$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa File: be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa (raw, json) Hash identifier: rwCA7EI7K1Ye+GuBNVRejDJLjqtxg37jOKOKh2F0MTw= Subject key identifier: 9E:05:7F:88:5B:7D:76:D3:34:93:E2:BD:DC:D7:6D:69:70:DA:14:14 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285848A996161D755E4845BD25AD80 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395567 IP address blocks: 216.153.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:16:1d:75:5e:48:45:bd:25:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=df5e89ed-27d8-4a8c-95f5-e27bc1a86323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:57:66:ea:45:2f:3f:c8:39:09:65:ca:5a: 26:82:0f:9e:28:9d:5f:71:c4:3f:a4:40:ce:a6:f8: d1:3a:3d:a9:6a:a2:ae:7e:25:73:1d:7c:a7:4f:b6: 80:17:32:64:8b:17:b5:db:e6:4f:27:d0:2f:98:a5: 7e:72:65:2a:72:b9:2b:df:5b:b9:5c:da:6c:c1:3c: d3:5c:c2:2a:47:38:45:63:a1:f9:a9:92:42:68:19: 89:04:6a:ae:c0:99:24:59:bf:bb:ea:cd:55:cd:e3: 9b:b1:6f:bc:83:30:65:11:bd:04:68:5a:74:10:d1: 04:b2:67:98:9c:d5:ae:7f:0d:fe:11:3a:99:2a:a7: 31:ee:2f:82:c3:30:2b:f3:9b:4b:ba:c5:b1:cf:7c: cc:91:25:0d:bd:06:e4:51:d4:e9:f1:35:5f:9a:bb: 58:16:1d:90:d4:e6:98:cc:48:23:4d:38:5e:32:5a: 9f:f0:d9:2c:f8:4f:fa:2e:b6:1f:d0:51:19:7b:ba: d9:b0:22:0a:a4:36:f5:d8:f3:ab:34:89:5b:33:57: 8b:b5:ef:24:d1:b5:af:fd:00:48:54:e9:f8:d1:6a: 59:02:21:e4:d8:b2:27:48:df:d0:1d:fe:82:0d:35: c9:58:12:0a:4c:30:dc:07:7e:c6:a2:02:fe:c9:74: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:05:7F:88:5B:7D:76:D3:34:93:E2:BD:DC:D7:6D:69:70:DA:14:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0e:4e:39:5e:18:c3:0a:63:12:81:a2:96:8e:b5:70:2c:d9: 62:26:8b:59:bd:62:99:37:c7:01:9e:87:b7:7b:91:ff:fe:9d: 6a:f7:76:ed:15:ae:fc:61:1b:98:47:93:79:d2:d7:1c:86:b3: 93:bb:fd:e3:32:84:b4:c0:eb:82:24:90:30:e0:36:c3:57:f4: c6:87:76:2d:0d:bf:c9:1b:4d:fd:0a:de:0a:10:f8:41:5a:d7: 93:03:61:05:3a:3c:f8:77:c4:7d:5a:7b:3e:05:20:00:17:f1: 7c:dd:c7:f5:78:f3:e8:69:e8:44:d7:e4:3d:0e:aa:2c:f4:9f: c9:8e:26:d2:a8:eb:0d:f0:96:fb:5b:c3:fd:e2:6e:88:98:85: cc:d9:49:76:ae:f3:c4:3f:2c:7c:e5:17:13:73:54:44:74:86: e4:bc:8f:c3:30:c2:b0:ef:e2:9c:ef:14:53:95:34:c5:82:c7: 52:74:75:f6:b2:65:5c:27:4e:db:df:3e:7b:8f:45:8b:ce:2a: d3:04:87:de:fb:bb:29:70:20:c5:a5:35:52:04:9b:62:95:6f: dc:25:64:77:fa:b4:0f:f2:92:e0:55:08:f2:fb:31:0d:36:ee: 7a:53:0e:f6:16:30:51:a8:9c:b9:f3:8d:86:11:76:ff:83:be: 2c:4a:c8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhYddV5IRb0lrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGY1ZTg5ZWQtMjdkOC00YThjLTk1ZjUtZTI3YmMxYTg2MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwhXZupFLz/IOQllylomgg+eKJ1fccQ/pEDO pvjROj2paqKufiVzHXynT7aAFzJkixe12+ZPJ9AvmKV+cmUqcrkr31u5XNpswTzT XMIqRzhFY6H5qZJCaBmJBGquwJkkWb+76s1VzeObsW+8gzBlEb0EaFp0ENEEsmeY nNWufw3+ETqZKqcx7i+CwzAr85tLusWxz3zMkSUNvQbkUdTp8TVfmrtYFh2Q1OaY zEgjTTheMlqf8Nks+E/6LrYf0FEZe7rZsCIKpDb12POrNIlbM1eLte8k0bWv/QBI VOn40WpZAiHk2LInSN/QHf6CDTXJWBIKTDDcB37GogL+yXTHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4Ff4hbfXbTNJPivdzXbWlw2hQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYmUxNDkzNGYtYjNhYS0z YzhlLTlhYjMtZWFlYmFhMzExMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEOTjleGMMKYxKBopaOtXAs2WImi1m9Ypk3xwGeh7d7kf/+nWr3du0V rvxhG5hHk3nS1xyGs5O7/eMyhLTA64IkkDDgNsNX9MaHdi0Nv8kbTf0K3goQ+EFa 15MDYQU6PPh3xH1aez4FIAAX8Xzdx/V48+hp6ETX5D0Oqiz0n8mOJtKo6w3wlvtb w/3iboiYhczZSXau88Q/LHzlFxNzVER0huS8j8MwwrDv4pzvFFOVNMWCx1J0dfay ZVwnTtvfPnuPRYvOKtMEh977uylwIMWlNVIEm2KVb9wlZHf6tA/ykuBVCPL7MQ02 7npTDvYWMFGonLnzjYYRdv+DvixKyNk= -----END CERTIFICATE-----Generated at Sat Apr 12 11:56:11 2025 by rpki-client