$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa File: 397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa (raw, json) Hash identifier: bCEuJ7Skh5lLo18VQVDNj6+e8pFvVAOPSLN35MkF96Q= Subject key identifier: 8D:94:C2:8A:20:66:88:22:E8:D2:3D:2F:B7:2E:B1:15:B3:EF:93:FA Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9964FA39589968E28D2D8 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 24.214.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:96:4f:a3:95:89:96:8e:28:d2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=4a20a04f-2ad5-45eb-8bd6-6bc3d0c30be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:f4:1c:94:85:6e:32:27:ae:10:bb:42:a2: 62:e1:d6:d0:ea:20:64:ef:7b:a4:a2:d3:a6:e8:37: 1f:04:99:11:37:ee:b1:c7:e8:67:2e:90:84:8c:d4: be:02:f6:80:f4:da:47:9e:c0:11:73:04:22:ea:00: 68:26:82:4d:60:6d:27:02:d7:39:40:e7:bc:7e:5b: 26:78:1c:c5:de:c4:a7:42:25:12:aa:85:51:fc:0d: ad:83:42:54:e9:54:1e:98:f3:c7:2b:8b:7d:36:62: c2:cc:d8:1b:b0:27:21:ae:48:2c:94:0a:1c:26:7b: 6e:b2:ab:c6:42:14:ee:c9:3e:c5:4f:b1:85:a4:1e: 09:e4:2a:4a:cd:5b:c1:2e:2f:e9:a9:3c:a5:7d:9c: 3c:e4:ff:2f:d0:67:6a:18:20:eb:19:e2:1d:c2:6a: 2a:ab:29:08:91:d1:3b:73:a4:82:12:7f:c8:a8:2f: 87:a5:99:64:0c:6c:a9:b0:ac:e5:22:5f:9f:20:5c: c3:5b:da:c1:a9:c0:40:78:b9:2a:fb:6a:45:f3:61: bf:5d:7c:08:2d:2a:e2:8a:e2:63:73:94:17:98:1e: 3f:99:b3:c3:b7:1a:cd:49:a1:ba:e6:e1:07:fe:17: d0:23:8f:2e:56:9f:8f:e1:34:f3:7c:fd:c2:85:f2: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:94:C2:8A:20:66:88:22:E8:D2:3D:2F:B7:2E:B1:15:B3:EF:93:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/397c2778-f7a2-367d-9b64-fbb87c3ac5ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e5:25:d6:20:27:53:4d:1e:81:30:7b:7e:c0:3f:76:6b:8c: 6c:7c:92:59:ee:61:17:68:54:2c:43:98:39:36:f7:ea:09:af: 73:c1:ca:62:d4:4c:0c:ac:be:24:c5:27:77:38:8f:5d:c7:72: 70:b2:bd:f0:60:d4:8d:be:c3:f7:48:dd:7c:c5:61:eb:bc:20: c7:b6:5e:10:7b:1d:a3:6e:49:5a:07:b6:82:8b:18:0b:ba:22: 55:a5:88:0d:f2:6d:01:54:f3:21:bd:9c:a2:ed:37:6c:ba:a3: 48:3c:79:55:1d:a2:2a:74:23:f8:f6:cb:cd:c1:58:6f:07:4f: 7e:08:89:e7:70:0c:9d:c6:74:6d:7a:60:fc:6d:2d:88:bf:29: b3:9b:aa:21:6e:d5:2d:df:12:93:37:f4:60:be:18:5d:15:56: f1:db:26:8a:ad:b8:72:02:76:85:8e:e9:b9:96:6b:2b:3e:65: c7:27:e9:a8:ad:cd:7a:4d:6f:60:83:33:08:b6:c4:86:c5:cf: 3a:b9:68:73:57:d3:21:e5:5c:55:a7:f2:58:b1:13:70:b1:22: 36:73:7f:51:cb:d3:d7:9a:a2:76:e1:d4:b1:ed:09:8c:66:5b: db:2a:76:9a:8e:85:d8:cb:ac:58:aa:2a:dd:30:3c:35:e1:d8: 2b:00:14:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZZPo5WJlo4o0tgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NGEyMGEwNGYtMmFkNS00NWViLThiZDYtNmJjM2QwYzMwYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs/0HJSFbjInrhC7QqJi4dbQ6iBk73ukotOm 6DcfBJkRN+6xx+hnLpCEjNS+AvaA9NpHnsARcwQi6gBoJoJNYG0nAtc5QOe8flsm eBzF3sSnQiUSqoVR/A2tg0JU6VQemPPHK4t9NmLCzNgbsCchrkgslAocJntusqvG QhTuyT7FT7GFpB4J5CpKzVvBLi/pqTylfZw85P8v0GdqGCDrGeIdwmoqqykIkdE7 c6SCEn/IqC+HpZlkDGypsKzlIl+fIFzDW9rBqcBAeLkq+2pF82G/XXwILSriiuJj c5QXmB4/mbPDtxrNSaG65uEH/hfQI48uVp+P4TTzfP3ChfKBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2UwoogZogi6NI9L7cusRWz75P6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMzk3YzI3NzgtZjdhMi0z NjdkLTliNjQtZmJiODdjM2FjNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGNbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnlJdYgJ1NNHoEwe37AP3ZrjGx8klnuYRdoVCxDmDk29+oJr3PBymLU TAysviTFJ3c4j13HcnCyvfBg1I2+w/dI3XzFYeu8IMe2XhB7HaNuSVoHtoKLGAu6 IlWliA3ybQFU8yG9nKLtN2y6o0g8eVUdoip0I/j2y83BWG8HT34IiedwDJ3GdG16 YPxtLYi/KbObqiFu1S3fEpM39GC+GF0VVvHbJoqtuHICdoWO6bmWays+Zccn6ait zXpNb2CDMwi2xIbFzzq5aHNX0yHlXFWn8lixE3CxIjZzf1HL09eaonbh1LHtCYxm W9sqdpqOhdjLrFiqKt0wPDXh2CsAFOc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:11:41 2025 by rpki-client