$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/afb1717a-4a5a-3704-84f4-f0c670b0914c.roa File: afb1717a-4a5a-3704-84f4-f0c670b0914c.roa (raw, json) Hash identifier: FvjAPi1/KztR66kYR8SGZLPc8C1VsiNG9vgEZi8VVp4= Subject key identifier: E4:20:DF:C7:A2:2F:0D:05:CC:E9:4A:0C:D3:3A:73:9C:A2:8E:B1:DF Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F43285849446947F56C9A5CC35010E280 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/afb1717a-4a5a-3704-84f4-f0c670b0914c.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 4922 IP address blocks: 24.149.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:47:f5:6c:9a:5c:c3:50:10:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=cf251d3d-27c8-464f-a850-5397350790b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:21:e3:55:d6:70:f5:06:7a:97:e1:f6:46: 2e:d4:82:24:57:6d:24:f3:88:d8:af:57:7f:8a:82: 24:d1:57:5d:f9:a8:b1:54:32:7d:00:4e:00:80:23: 0c:e7:d2:57:a3:07:f8:eb:cb:ba:f7:fa:70:d7:3f: d4:7c:43:58:69:85:e8:c4:92:a3:81:2e:3d:f8:e2: 3c:ed:a7:63:99:fb:36:9a:7c:b6:18:4e:33:f7:c9: f7:7b:d5:78:2f:14:ad:7c:52:32:4f:ab:4f:50:0b: 4a:cd:3c:24:8a:7d:89:35:7e:fb:8c:2e:65:f6:fc: 88:a7:30:bf:e3:b7:d0:36:d5:d3:33:47:2f:76:8f: 4b:76:96:cf:32:68:c8:8d:6a:28:68:5a:10:d9:23: e3:10:0c:f4:ed:60:c6:4a:fe:2f:f4:43:3e:e7:12: be:0d:69:f8:19:b6:c9:33:aa:3d:5d:25:31:84:b4: 60:e0:3b:cc:7c:0b:19:4b:93:a3:68:c6:60:3b:78: 4b:03:3a:08:96:21:7e:3a:0c:7f:14:c6:c3:8e:e2: 12:46:a2:34:cc:e0:07:e7:df:59:68:ac:52:06:0b: 61:85:eb:8c:04:e0:cf:75:b8:86:d9:44:1d:8d:de: 5e:72:28:25:2b:b4:29:77:05:a5:46:6f:70:57:35: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:DF:C7:A2:2F:0D:05:CC:E9:4A:0C:D3:3A:73:9C:A2:8E:B1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/afb1717a-4a5a-3704-84f4-f0c670b0914c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 24.149.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1c:7c:31:77:d0:5a:0b:16:0b:db:b1:69:a1:5f:b9:b0:a1: c3:15:69:64:e6:5f:34:be:e4:89:a5:d1:29:7d:91:08:00:d7: ee:b2:23:6d:53:03:f7:49:0a:1a:ac:38:ef:67:7f:cb:76:60: c8:46:72:09:14:f4:81:54:f9:41:37:48:3e:65:26:37:90:9b: 65:31:09:8b:24:a2:80:1d:01:b2:77:13:4e:6f:04:30:af:d4: a9:79:93:c7:6e:45:7a:1d:bc:d9:65:ca:1c:f4:23:e9:a4:93: 9e:4b:fd:c8:e3:4b:35:dd:b0:27:0e:dc:47:54:82:a7:1d:4e: 03:f5:e1:30:26:e6:8c:fe:4d:77:6c:88:44:07:bf:5c:26:11: e4:81:ab:13:48:bb:ab:b3:b8:83:44:80:0e:eb:8f:a9:72:d2: ee:6d:ef:09:15:a2:40:08:fd:e4:d0:c7:27:94:03:e0:fe:1d: 31:05:a1:2d:1b:f9:3f:09:f7:fa:6b:1b:d7:2a:01:11:e0:69: 91:42:19:7b:bd:49:bb:07:76:0e:bc:b0:8a:a0:8f:ef:72:43: 0b:7e:bc:c1:61:fb:58:cf:43:41:05:11:f4:d2:98:b1:47:b1: 66:23:b3:fe:22:b4:9a:b4:51:d4:30:1f:69:55:ac:65:c8:06: 91:98:df:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUf1bJpcw1AQ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk Y2YyNTFkM2QtMjdjOC00NjRmLWE4NTAtNTM5NzM1MDc5MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlQh41XWcPUGepfh9kYu1IIkV20k84jYr1d/ ioIk0Vdd+aixVDJ9AE4AgCMM59JXowf468u69/pw1z/UfENYaYXoxJKjgS49+OI8 7adjmfs2mny2GE4z98n3e9V4LxStfFIyT6tPUAtKzTwkin2JNX77jC5l9vyIpzC/ 47fQNtXTM0cvdo9LdpbPMmjIjWooaFoQ2SPjEAz07WDGSv4v9EM+5xK+DWn4GbbJ M6o9XSUxhLRg4DvMfAsZS5OjaMZgO3hLAzoIliF+Ogx/FMbDjuISRqI0zOAH599Z aKxSBgthheuMBODPdbiG2UQdjd5eciglK7QpdwWlRm9wVzVTDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQg38eiLw0FzOlKDNM6c5yijrHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYWZiMTcxN2EtNGE1YS0z NzA0LTg0ZjQtZjBjNjcwYjA5MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8cfDF30FoLFgvbsWmhX7mwocMVaWTmXzS+5Iml0Sl9kQgA1+6yI21T A/dJChqsOO9nf8t2YMhGcgkU9IFU+UE3SD5lJjeQm2UxCYskooAdAbJ3E05vBDCv 1Kl5k8duRXodvNllyhz0I+mkk55L/cjjSzXdsCcO3EdUgqcdTgP14TAm5oz+TXds iEQHv1wmEeSBqxNIu6uzuINEgA7rj6ly0u5t7wkVokAI/eTQxyeUA+D+HTEFoS0b +T8J9/prG9cqARHgaZFCGXu9SbsHdg68sIqgj+9yQwt+vMFh+1jPQ0EFEfTSmLFH sWYjs/4itJq0UdQwH2lVrGXIBpGY35Q= -----END CERTIFICATE-----Generated at Fri Apr 11 21:21:07 2025 by rpki-client