$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8a249bd6-e3b7-34b3-9c27-9206673b443e.roa File: 8a249bd6-e3b7-34b3-9c27-9206673b443e.roa (raw, json) Hash identifier: NB1dhbouhxOEBf3KJzODdePk0HBPUYSZy+ljVfJD0P8= Subject key identifier: 3E:86:3A:9B:F5:64:C4:7F:F3:3A:0C:30:03:8E:42:11:D1:5C:DF:94 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9960F287BB8ABA18E6C80 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8a249bd6-e3b7-34b3-9c27-9206673b443e.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 24.214.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:96:0f:28:7b:b8:ab:a1:8e:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=86cfe029-5c47-4c8b-931e-bc679d62690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:15:2b:d1:cc:82:dd:fc:30:5f:82:03:40: 4f:ef:35:59:7c:9d:d1:97:74:93:4b:f1:95:fa:bc: 82:61:d4:be:5e:3d:0b:59:bc:87:ea:9c:fe:a6:95: 3f:25:1a:97:e1:f3:16:4e:94:7f:c1:13:1f:71:c1: ab:18:6d:fd:a9:db:40:d2:e2:7f:2a:4e:ae:59:86: 41:d3:17:8f:12:2d:e1:f4:ca:aa:8e:c3:a1:c7:ab: 6b:96:6d:d7:fc:16:1d:6b:27:20:20:ff:c3:3a:88: 2d:ac:a8:09:79:2f:07:85:ce:99:f6:d0:64:bd:23: 8f:32:96:4e:48:90:b6:1a:ec:19:7d:94:87:e1:99: b4:91:0e:d3:e3:51:9d:13:2c:dd:16:8e:a0:70:21: e7:ce:3e:e3:7b:36:23:b8:19:1c:5c:74:ad:05:5f: 77:01:f8:81:84:7d:24:2b:e1:87:c1:27:1b:bb:6b: 95:52:03:46:74:94:ba:4d:52:29:62:9f:f2:05:d4: a8:e4:8b:08:fc:15:98:b8:be:98:8d:3c:57:bb:ed: 41:92:9d:06:89:68:37:ef:5e:55:10:09:d3:7a:2d: d5:46:a2:86:95:f2:3a:67:a9:f4:58:74:2b:90:b6: 04:90:fc:86:ac:dc:03:4e:a3:16:4d:1e:a1:26:42: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:86:3A:9B:F5:64:C4:7F:F3:3A:0C:30:03:8E:42:11:D1:5C:DF:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/8a249bd6-e3b7-34b3-9c27-9206673b443e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1c:eb:85:1f:90:e1:65:52:e1:6b:53:97:8f:d0:66:75:c0: f3:e1:f7:6e:74:00:7e:e8:44:ed:1c:d5:91:19:a7:87:d0:08: 69:c2:99:c6:ca:08:e6:73:c4:53:c0:1d:99:98:89:57:e4:6f: 42:de:98:2c:86:7b:13:24:44:cd:d6:9e:b3:1d:a3:09:6b:fb: 12:b5:7d:01:6a:15:da:8e:22:e0:f2:53:0d:f6:b6:e7:2c:da: 75:a0:5d:e6:ea:e7:11:5e:db:17:05:23:b1:67:2e:97:af:28: 75:57:fc:dd:39:e1:83:63:14:53:ec:2c:f3:4e:c9:6d:df:39: 7b:06:64:d8:c9:5d:65:14:51:9c:31:e8:d1:c7:c0:37:4b:38: 48:ab:7b:18:ad:b9:d4:15:de:6c:e0:30:a0:2b:09:5e:50:7a: c4:1b:78:5f:ed:81:4c:44:23:d7:4f:bd:d7:60:5f:5a:3c:20: 34:b3:ff:a1:1a:81:b7:e3:90:9b:ea:64:78:a0:fb:53:83:d0: 18:0e:b9:cb:2c:e3:0d:b7:6c:4f:b9:c9:a3:df:b1:f4:c6:6a: 78:f8:36:ba:80:a9:be:e7:40:ba:01:28:ec:74:b5:7a:93:cd: c7:51:07:19:ea:de:9f:2b:a7:b3:b9:fb:97:bc:4e:6f:01:1b: 89:5f:d8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZYPKHu4q6GObIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ODZjZmUwMjktNWM0Ny00YzhiLTkzMWUtYmM2NzlkNjI2OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVAVK9HMgt38MF+CA0BP7zVZfJ3Rl3STS/GV +ryCYdS+Xj0LWbyH6pz+ppU/JRqX4fMWTpR/wRMfccGrGG39qdtA0uJ/Kk6uWYZB 0xePEi3h9MqqjsOhx6trlm3X/BYdaycgIP/DOogtrKgJeS8Hhc6Z9tBkvSOPMpZO SJC2GuwZfZSH4Zm0kQ7T41GdEyzdFo6gcCHnzj7jezYjuBkcXHStBV93AfiBhH0k K+GHwScbu2uVUgNGdJS6TVIpYp/yBdSo5IsI/BWYuL6YjTxXu+1Bkp0GiWg3715V EAnTei3VRqKGlfI6Z6n0WHQrkLYEkPyGrNwDTqMWTR6hJkKDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6GOpv1ZMR/8zoMMAOOQhHRXN+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOGEyNDliZDYtZTNiNy0z NGIzLTljMjctOTIwNjY3M2I0NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGNZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0c64UfkOFlUuFrU5eP0GZ1wPPh9250AH7oRO0c1ZEZp4fQCGnCmcbK COZzxFPAHZmYiVfkb0LemCyGexMkRM3WnrMdowlr+xK1fQFqFdqOIuDyUw32tucs 2nWgXebq5xFe2xcFI7FnLpevKHVX/N054YNjFFPsLPNOyW3fOXsGZNjJXWUUUZwx 6NHHwDdLOEirexitudQV3mzgMKArCV5QesQbeF/tgUxEI9dPvddgX1o8IDSz/6Ea gbfjkJvqZHig+1OD0BgOucss4w23bE+5yaPfsfTGanj4NrqAqb7nQLoBKOx0tXqT zcdRBxnq3p8rp7O5+5e8Tm8BG4lf2AE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:24 2025 by rpki-client