$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa File: 3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa (raw, json) Hash identifier: uaISzRlZvVOKwXOX+E7g/45vtQnLmw4AC6mc8WABlBA= Subject key identifier: 7C:30:68:4B:FF:1B:09:92:A6:89:5E:47:50:B5:65:47:48:5C:1E:FF Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B99580060DBF0385CA98A0 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 24.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:95:80:06:0d:bf:03:85:ca:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=1d7e12de-53e6-4009-898a-cdcf1a6c154b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:c9:ef:08:64:d0:3f:38:c8:2e:cc:f2:3f: 22:94:b5:66:b4:55:a2:50:b6:4f:05:f3:03:f4:c1: 9e:58:44:d3:88:c2:46:e9:18:b1:14:57:61:9d:12: 2a:89:38:b6:b9:3f:02:c8:db:b5:b1:82:73:ed:da: 65:6a:e5:58:f7:9d:a3:ff:3f:56:f5:7c:37:46:d1: 48:ad:70:ef:74:5f:1b:4d:cc:7f:d0:8e:45:21:e6: 09:72:70:f8:79:5a:2b:4b:c5:d5:95:64:5c:5a:5c: c6:1f:0a:62:96:6f:3d:90:45:a1:dd:9a:1f:77:04: ae:6c:3c:1a:ce:54:e5:be:ac:9a:0c:12:87:de:68: 39:34:fd:01:dc:6c:14:79:f7:aa:b4:82:11:ac:a7: 3e:7b:d3:bf:99:7d:03:54:44:15:21:90:64:0d:23: 21:41:7b:93:96:b8:84:b3:5b:9d:8f:c2:ff:75:a9: 91:83:36:03:82:ea:c2:fa:34:24:cd:41:a6:00:15: 36:cf:a7:e2:e2:35:79:dc:c8:92:70:f2:d7:ea:ed: a2:47:58:e0:3e:ac:5a:41:17:b9:19:d4:5e:6b:02: 2a:50:9a:7c:3e:d2:1b:c7:a6:0d:4c:40:5a:26:24: 8e:b0:36:d7:d3:58:e8:e7:5b:76:35:b2:12:b1:d2: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:68:4B:FF:1B:09:92:A6:89:5E:47:50:B5:65:47:48:5C:1E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:83:28:2f:7a:c5:24:6e:d6:3d:c1:dc:20:e6:29:d6:30:38: fa:68:3c:0b:d9:f2:08:ae:1d:16:49:6e:49:7c:b8:1d:71:38: 08:90:1f:ac:26:b4:39:ca:69:4b:cc:db:45:4c:84:2f:e2:34: 39:5d:ab:5b:b8:67:49:56:88:4d:48:dc:4b:0f:4b:29:2f:57: 2e:15:0a:50:93:ed:e2:d4:53:aa:fe:32:6f:14:1c:62:f1:b3: 81:72:2a:a8:b7:24:eb:ff:04:8c:36:5e:5f:61:f3:a8:6f:b5: 7a:a6:53:2c:1b:fd:81:3c:58:f5:34:d8:72:27:df:c1:3d:de: 36:26:10:15:8b:cb:f3:3e:66:27:28:bb:ef:1b:64:91:c8:44: d5:41:88:53:d6:70:49:f3:0b:60:c3:da:c8:38:d5:37:05:dd: fb:93:f6:a2:5a:12:09:56:13:fb:e8:40:93:67:3d:c8:aa:f3: 97:bd:95:02:d8:d6:77:28:55:f8:85:14:96:ba:73:72:ff:5c: 94:b0:4c:51:a5:59:ab:1c:af:f2:72:77:8d:9f:34:eb:46:d5: a7:8b:1e:19:47:16:fb:35:ab:e9:e1:7e:63:49:4c:1b:1b:f5: f2:62:34:93:0b:38:83:66:41:1a:f1:22:95:4f:45:68:a5:90: da:b2:88:c6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElhuZWABg2/A4XKmKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MWQ3ZTEyZGUtNTNlNi00MDA5LTg5OGEtY2RjZjFhNmMxNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHJ7whk0D84yC7M8j8ilLVmtFWiULZPBfMD 9MGeWETTiMJG6RixFFdhnRIqiTi2uT8CyNu1sYJz7dplauVY952j/z9W9Xw3RtFI rXDvdF8bTcx/0I5FIeYJcnD4eVorS8XVlWRcWlzGHwpilm89kEWh3ZofdwSubDwa zlTlvqyaDBKH3mg5NP0B3GwUefeqtIIRrKc+e9O/mX0DVEQVIZBkDSMhQXuTlriE s1udj8L/damRgzYDgurC+jQkzUGmABU2z6fi4jV53MiScPLX6u2iR1jgPqxaQRe5 GdReawIqUJp8PtIbx6YNTEBaJiSOsDbX01jo51t2NbISsdJSnwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHwwaEv/GwmSpoleR1C1ZUdIXB7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ExY2UzNWMtNzBlYy0z YzAwLWFlNzktZjQwZGRkNTlhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGGAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALYMoL3rFJG7WPcHcIOYp1jA4+mg8C9nyCK4dFkluSXy4HXE4CJAfrCa0 OcppS8zbRUyEL+I0OV2rW7hnSVaITUjcSw9LKS9XLhUKUJPt4tRTqv4ybxQcYvGz gXIqqLck6/8EjDZeX2HzqG+1eqZTLBv9gTxY9TTYciffwT3eNiYQFYvL8z5mJyi7 7xtkkchE1UGIU9ZwSfMLYMPayDjVNwXd+5P2oloSCVYT++hAk2c9yKrzl72VAtjW dyhV+IUUlrpzcv9clLBMUaVZqxyv8nJ3jZ8060bVp4seGUcW+zWr6eF+Y0lMGxv1 8mI0kws4g2ZBGvEilU9FaKWQ2rKIxg== -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:08 2025 by rpki-client