$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa File: b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa (raw, json) Hash identifier: rdImLCvsgLXSJ4fEXM8vYaNA4Eva4EyJRSb0oqIir0A= Subject key identifier: 97:70:70:B9:8B:E8:72:19:6E:20:A7:A9:77:DD:FF:84:99:EF:52:88 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F43285848B8F0CDE90859EE8ADF3A2F40 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 32799 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cd:e9:08:59:ee:8a:df:3a:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=1882c133-9e42-4d01-acc2-8255c0331da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:87:8e:1e:7e:4f:08:5a:95:18:57:1e:23: 19:6e:50:6d:26:01:1a:10:03:a9:70:b0:be:a4:a9: 0f:98:ab:02:47:8a:f2:d3:34:28:8b:06:2f:07:ba: ee:7e:a4:65:07:78:96:74:54:8b:8a:52:c1:39:89: ef:3e:b6:8f:0b:66:a7:06:f9:d2:b4:5c:9a:eb:b1: 92:9e:3f:21:b3:c4:1c:e7:df:f6:5b:c1:fb:92:51: 88:bd:b4:8a:d4:19:11:91:e3:38:2d:d5:14:fe:1f: 7f:8b:2f:0c:8b:c3:80:06:33:c6:d1:df:d4:6f:77: 0d:21:92:60:89:36:63:a1:26:1f:9a:84:f5:66:68: 1c:9b:94:8e:c5:ec:cd:88:bb:18:45:80:3a:23:40: d8:ee:5c:f1:b1:94:07:02:5d:85:c8:2c:b8:1f:84: b5:6d:43:0e:18:e1:d3:93:37:ce:c0:6a:43:9e:87: 1c:c9:c2:73:e4:d7:94:e3:b5:44:57:fc:b6:5e:6b: 9c:d0:da:a6:be:5e:c4:dd:3e:f8:d2:11:f4:cb:8f: 8d:45:64:8a:6c:01:49:c1:8d:02:7e:18:2d:2b:a0: 60:0e:f2:6d:c4:a0:78:e3:f8:b2:0c:ea:0c:e8:fa: d9:1f:87:03:ef:12:c8:57:a2:8a:2c:e4:d9:c2:b5: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:70:B9:8B:E8:72:19:6E:20:A7:A9:77:DD:FF:84:99:EF:52:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:25:2c:c2:05:fe:29:ed:09:4e:6a:9d:10:58:b0:40:76:d9: 2b:a0:15:ab:a8:3d:b4:e5:cd:1a:0a:8d:f2:c6:10:f2:53:e3: 11:f5:cc:96:b7:c7:e3:66:6c:02:05:4a:59:bc:83:fa:e9:dc: ae:e3:2d:fa:71:22:53:68:8a:7c:1d:3c:e5:a9:83:05:36:b2: 5f:2c:4e:b2:33:62:30:45:f8:63:a2:4a:88:8c:da:20:e4:b4: da:fd:5b:24:d1:90:c9:11:b2:b3:06:ae:56:b6:df:7f:ce:48: 85:c6:cb:f7:47:fe:32:9d:23:b2:0a:df:85:a3:f4:2e:77:5d: 96:b3:97:bd:20:2c:bf:40:07:ff:89:db:89:d5:6b:64:aa:fb: 8f:06:26:08:ac:89:10:2d:0c:9f:6e:49:af:a3:95:d2:51:53: c6:f0:0e:57:ae:f8:8e:e5:9a:85:e2:5a:3d:d0:be:33:4e:7f: e6:76:f2:8b:0c:5f:61:13:fc:67:69:57:44:77:4c:66:59:cc: a3:6d:59:b4:ee:c7:29:67:7a:e5:08:ad:e3:c4:a9:77:a9:0c: ae:78:64:f8:e4:8c:34:56:fa:cf:ce:ad:54:e8:58:24:7a:2d: 69:dc:fa:79:66:ef:29:ea:cf:33:41:c8:fc:74:67:07:f1:b5: f8:65:d5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M3pCFnuit86L0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MTg4MmMxMzMtOWU0Mi00ZDAxLWFjYzItODI1NWMwMzMxZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lSHjh5+TwhalRhXHiMZblBtJgEaEAOpcLC+ pKkPmKsCR4ry0zQoiwYvB7rufqRlB3iWdFSLilLBOYnvPraPC2anBvnStFya67GS nj8hs8Qc59/2W8H7klGIvbSK1BkRkeM4LdUU/h9/iy8Mi8OABjPG0d/Ub3cNIZJg iTZjoSYfmoT1Zmgcm5SOxezNiLsYRYA6I0DY7lzxsZQHAl2FyCy4H4S1bUMOGOHT kzfOwGpDnoccycJz5NeU47VEV/y2Xmuc0Nqmvl7E3T740hH0y4+NRWSKbAFJwY0C fhgtK6BgDvJtxKB44/iyDOoM6PrZH4cD7xLIV6KKLOTZwrVx3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdwcLmL6HIZbiCnqXfd/4SZ71KIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvYjVkYzhhN2EtODFkYy0z ZWY3LTg0ZTktMmQ5YTM2ODhmYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAlLMIF/intCU5qnRBYsEB22SugFauoPbTlzRoKjfLGEPJT4xH1zJa3 x+NmbAIFSlm8g/rp3K7jLfpxIlNoinwdPOWpgwU2sl8sTrIzYjBF+GOiSoiM2iDk tNr9WyTRkMkRsrMGrla233/OSIXGy/dH/jKdI7IK34Wj9C53XZazl70gLL9AB/+J 24nVa2Sq+48GJgisiRAtDJ9uSa+jldJRU8bwDleu+I7lmoXiWj3QvjNOf+Z28osM X2ET/GdpV0R3TGZZzKNtWbTuxylneuUIrePEqXepDK54ZPjkjDRW+s/OrVToWCR6 LWnc+nlm7ynqzzNByPx0Zwfxtfhl1ZY= -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:21 2025 by rpki-client