$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa File: b51ec417-f848-3dcb-9fd9-9674c9833110.roa (raw, json) Hash identifier: dLe34ugqSrmGeqAE2CEAYoBYMjxnpQWwtZAiVYC+HR0= Subject key identifier: A8:62:9C:CE:A4:4B:D8:99:06:8F:58:5E:0B:11:5D:08:EB:25:70:21 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285848A9961603F647D7D3B4F93D40 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395567 IP address blocks: 192.111.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:16:03:f6:47:d7:d3:b4:f9:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=df781b6a-ee3d-4dbf-ae24-717e92f359ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ed:ed:79:dd:96:a0:d5:21:fb:9d:8c:f6:fd: d2:e9:4e:61:42:71:2c:f2:80:a4:be:8c:f1:07:98: 89:16:b2:51:d6:c5:7f:e9:cb:1f:f7:89:74:e0:17: 03:78:db:97:17:72:fd:42:8d:74:1d:e3:96:bc:1e: ec:3f:ba:ba:84:16:bd:3b:a5:ab:2c:5c:df:57:36: ec:f3:44:90:6e:58:75:44:86:63:8c:be:10:7a:01: 99:7b:a2:88:cd:36:8b:09:84:6f:5f:bb:46:d5:fe: 2c:de:f4:43:05:53:3a:c2:3b:e9:f4:9f:a0:b0:14: c2:20:9c:29:45:f3:8b:ad:0b:de:ad:54:17:7e:f3: 6d:b3:7f:42:07:8b:56:25:15:5b:4f:09:88:44:bf: 4d:2f:a3:40:f2:af:9e:53:1e:09:23:7f:a5:92:c8: 99:44:dd:d6:f3:54:09:22:6b:90:b8:7d:3c:c9:57: e9:35:53:83:f8:85:3c:2d:8f:9b:a7:56:64:ad:df: cb:ca:b2:fe:f4:16:d3:8c:ad:fc:17:78:3b:64:d4: 8d:10:6b:e2:5b:dd:61:f8:29:b5:34:38:c2:4b:fe: 28:ad:e7:dc:22:7e:06:26:7d:18:4b:c5:ca:77:73: 1d:94:d0:45:71:4a:5a:de:bc:07:c3:46:4d:94:d5: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:9C:CE:A4:4B:D8:99:06:8F:58:5E:0B:11:5D:08:EB:25:70:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 192.111.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1c:f1:8b:84:f8:56:39:ab:0c:ec:8f:6a:4a:a6:8a:7f:6d: 81:b9:d6:db:40:79:ba:45:09:bb:59:b8:4e:13:ee:7c:c5:7b: a5:fc:24:85:7d:82:e5:26:a2:ad:17:f9:ba:d1:a2:68:4b:a6: 58:8f:d5:fb:46:d2:a0:39:28:3e:dc:fe:88:86:92:55:df:25: 6b:34:d8:09:2a:cd:c1:34:77:19:b6:1e:e3:30:9f:e3:fc:0d: 11:2e:bf:59:6a:67:8f:8b:be:90:5e:7e:99:42:50:76:64:69: 34:b4:d8:2f:b8:96:16:7e:3c:ec:39:6b:35:3e:8e:3e:7f:5f: 79:f3:48:9d:b0:b7:0d:65:5c:96:3e:63:fd:f0:04:36:a2:2d: 4a:20:b0:e6:c1:71:7e:ca:05:9c:65:b2:cc:1c:a3:4d:02:7c: 11:47:d4:17:a6:31:31:5f:70:09:e8:f8:3f:94:c5:78:46:63: 1e:c0:5c:4f:81:53:f4:a4:04:f6:16:c6:28:f4:8a:6a:de:3e: 02:ef:4e:d7:01:49:c0:e5:bb:ab:a3:b9:9a:7c:a6:a6:bd:1a: 93:a8:53:dc:95:63:64:34:c5:e2:c1:a2:84:7b:a9:c6:22:f0: 87:a1:0d:23:7a:26:6d:3f:e0:39:66:db:58:3d:09:d6:72:cf: ec:e0:c0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhYD9kfX07T5PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGY3ODFiNmEtZWUzZC00ZGJmLWFlMjQtNzE3ZTkyZjM1OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO3ted2WoNUh+52M9v3S6U5hQnEs8oCkvozx B5iJFrJR1sV/6csf94l04BcDeNuXF3L9Qo10HeOWvB7sP7q6hBa9O6WrLFzfVzbs 80SQblh1RIZjjL4QegGZe6KIzTaLCYRvX7tG1f4s3vRDBVM6wjvp9J+gsBTCIJwp RfOLrQverVQXfvNts39CB4tWJRVbTwmIRL9NL6NA8q+eUx4JI3+lksiZRN3W81QJ ImuQuH08yVfpNVOD+IU8LY+bp1Zkrd/LyrL+9BbTjK38F3g7ZNSNEGviW91h+Cm1 NDjCS/4orefcIn4GJn0YS8XKd3MdlNBFcUpa3rwHw0ZNlNX12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhinM6kS9iZBo9YXgsRXQjrJXAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYjUxZWM0MTctZjg0OC0z ZGNiLTlmZDktOTY3NGM5ODMzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwG8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAc8YuE+FY5qwzsj2pKpop/bYG51ttAebpFCbtZuE4T7nzFe6X8JIV9 guUmoq0X+brRomhLpliP1ftG0qA5KD7c/oiGklXfJWs02AkqzcE0dxm2HuMwn+P8 DREuv1lqZ4+LvpBefplCUHZkaTS02C+4lhZ+POw5azU+jj5/X3nzSJ2wtw1lXJY+ Y/3wBDaiLUogsObBcX7KBZxlsswco00CfBFH1BemMTFfcAno+D+UxXhGYx7AXE+B U/SkBPYWxij0imrePgLvTtcBScDlu6ujuZp8pqa9GpOoU9yVY2Q0xeLBooR7qcYi 8IehDSN6Jm0/4Dlm21g9CdZyz+zgwH0= -----END CERTIFICATE-----Generated at Sat Apr 12 10:59:42 2025 by rpki-client