$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa File: ca7f5317-5bca-35bb-8b76-448393a2d976.roa (raw, json) Hash identifier: Zow4e1vTxWwtl07XLvJBjT2zxWbupiPzrEqyM2FcKa0= Subject key identifier: 7B:11:91:3E:DB:A7:FF:53:AF:AF:BA:FB:58:60:23:C3:16:A8:B3:A3 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9964082ED1B5A11B51900 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 24.214.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:96:40:82:ed:1b:5a:11:b5:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=00588f68-e133-4a71-9304-5d4989a3a15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:ef:40:26:ae:6a:36:25:8d:f1:78:d8:71: 4b:99:ba:71:0b:f8:53:c4:95:f7:12:09:86:de:7b: 81:cd:a1:45:6b:f9:58:6a:6d:de:4c:e6:0a:12:a9: 39:05:cb:e2:9d:42:23:d7:47:6d:55:83:90:89:7f: 67:0d:c8:f5:8b:a6:df:ba:f0:40:39:40:f9:ea:f3: fe:48:48:de:ca:aa:dc:52:1e:6d:c2:26:35:44:00: 1b:ef:03:85:2f:9d:9c:cb:49:60:83:cb:9c:22:ba: 76:f2:71:22:1e:f4:a2:e0:d9:c7:68:3c:c7:d2:46: 36:60:c0:1e:e4:03:16:45:d4:e7:79:20:0b:fa:a6: be:58:90:15:f3:2d:2a:6a:8e:44:ad:52:f5:3d:8f: 58:92:d5:71:33:2e:97:8b:7c:61:50:f4:27:56:1e: d5:5b:8c:97:85:e3:1c:a2:4e:9b:4c:14:6b:fb:38: c4:5c:cc:ff:55:63:81:e7:58:28:74:27:64:fb:49: 55:48:20:de:0d:ff:6e:16:cd:79:5f:8f:34:4b:ff: 16:f3:89:f3:5c:3d:1c:0c:8a:2b:7a:ad:a1:ec:49: 89:96:9e:26:0b:9c:f6:f3:b9:1f:1f:eb:13:b4:ae: 84:2e:48:ec:3f:ad:38:28:9e:8e:0f:cf:0d:77:91: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:91:3E:DB:A7:FF:53:AF:AF:BA:FB:58:60:23:C3:16:A8:B3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:46:57:8b:61:be:e6:75:3d:c9:c7:13:8e:06:c2:11:03:d7: 5f:61:cf:c8:7a:a8:53:64:f2:da:92:62:8e:14:68:42:21:87: c6:9d:07:60:9c:0b:fc:42:25:47:9e:00:77:1b:cf:83:21:cf: 0b:bb:ce:c3:22:61:9b:0b:1f:cc:e2:fa:03:07:16:17:41:b5: f1:9d:31:51:7e:89:08:8b:b1:59:c0:b0:0d:c1:22:a7:45:c1: cf:b3:03:07:44:db:3b:9f:95:02:58:53:2e:fa:25:7e:a5:e8: ad:5a:33:cc:20:8b:5a:f6:49:b7:5c:e0:21:d4:df:3b:3d:99: b2:bb:c5:44:be:86:ee:45:9d:42:31:5b:ad:fb:fd:90:57:05: b8:8f:1f:5a:6e:ce:43:e3:48:15:79:e9:c7:fa:0e:e7:e2:7b: e2:8a:4f:5e:2f:24:af:5b:44:d2:aa:8b:b8:b4:4b:5d:13:74: 5a:d9:48:48:f7:ba:5a:c3:f1:5a:d9:aa:43:ed:0a:d6:46:c9: bd:eb:6f:1e:a3:58:dc:5c:f6:73:7e:2c:fa:a7:40:d2:e5:47: 3b:74:ef:e4:9e:3f:d4:ff:7b:0d:ff:f8:6a:66:dc:1e:9b:ef: fe:d1:ae:5b:ce:be:c7:cd:b6:97:28:70:ca:87:3c:72:9c:4f: 6a:89:ca:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZZAgu0bWhG1GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MDA1ODhmNjgtZTEzMy00YTcxLTkzMDQtNWQ0OTg5YTNhMTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ/vQCauajYljfF42HFLmbpxC/hTxJX3EgmG 3nuBzaFFa/lYam3eTOYKEqk5BcvinUIj10dtVYOQiX9nDcj1i6bfuvBAOUD56vP+ SEjeyqrcUh5twiY1RAAb7wOFL52cy0lgg8ucIrp28nEiHvSi4NnHaDzH0kY2YMAe 5AMWRdTneSAL+qa+WJAV8y0qao5ErVL1PY9YktVxMy6Xi3xhUPQnVh7VW4yXheMc ok6bTBRr+zjEXMz/VWOB51godCdk+0lVSCDeDf9uFs15X480S/8W84nzXD0cDIor eq2h7EmJlp4mC5z287kfH+sTtK6ELkjsP604KJ6OD88Nd5HOnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsRkT7bp/9Tr6+6+1hgI8MWqLOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvY2E3ZjUzMTctNWJjYS0z NWJiLThiNzYtNDQ4MzkzYTJkOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1GV4thvuZ1PcnHE44GwhED119hz8h6qFNk8tqSYo4UaEIhh8adB2Cc C/xCJUeeAHcbz4Mhzwu7zsMiYZsLH8zi+gMHFhdBtfGdMVF+iQiLsVnAsA3BIqdF wc+zAwdE2zuflQJYUy76JX6l6K1aM8wgi1r2Sbdc4CHU3zs9mbK7xUS+hu5FnUIx W637/ZBXBbiPH1puzkPjSBV56cf6Dufie+KKT14vJK9bRNKqi7i0S10TdFrZSEj3 ulrD8VrZqkPtCtZGyb3rbx6jWNxc9nN+LPqnQNLlRzt07+SeP9T/ew3/+Gpm3B6b 7/7RrlvOvsfNtpcocMqHPHKcT2qJykg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:15 2025 by rpki-client