$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa File: ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa (raw, json) Hash identifier: D4q9n2J34/7kK+fj16mcOktpTKnDAnnxe/9z+8Kk6L4= Subject key identifier: 99:B6:E9:23:E6:4F:A1:35:D8:5D:28:56:F2:67:72:A2:EE:9E:20:41 Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7 Certificate serial: 010D0C9F432858491699ADA173E7D30C34280C80 Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa Signing time: Wed 05 Mar 2025 15:11:15 +0000 ROA not before: Wed 05 Mar 2025 15:11:15 +0000 ROA not after: Tue 03 Jun 2025 14:11:15 +0000 asID: 1299 IP address blocks: 24.225.112.0/20 maxlen: 24 216.172.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:99:ad:a1:73:e7:d3:0c:34:28:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7 Validity Not Before: Mar 5 15:11:15 2025 GMT Not After : Jun 3 14:11:15 2025 GMT Subject: CN=4b680e1e-4a18-4bdb-9be8-d28f5afaa08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:bd:e6:23:b9:e7:2b:84:b0:a0:74:c4:51: 62:a3:f5:19:57:b8:d6:f0:03:62:bb:04:4c:43:df: 82:dc:b8:b3:28:7c:13:10:f5:9f:ca:a4:f0:49:7e: 32:89:5d:e5:eb:a3:db:64:dc:17:6f:f7:80:fe:e3: 45:92:da:7b:4a:8d:27:b4:c0:80:e0:be:44:8e:02: cd:67:6c:21:6b:d2:24:a7:a9:24:8b:f0:2a:76:e7: 00:52:93:0f:8a:e0:84:c3:88:28:11:48:10:70:b3: d9:af:a9:3d:3f:61:56:8f:5c:c7:a0:93:a6:85:31: ba:15:6b:54:d2:fd:f3:28:b9:21:4b:93:e2:e9:72: 76:05:d9:68:52:39:ac:51:c6:04:4f:89:0d:35:a1: 8b:25:41:b1:c7:9e:4b:0f:ba:90:e1:15:0b:ef:8f: 5a:7c:4a:f1:41:15:35:44:47:7b:f8:20:e5:d1:19: 7e:75:f2:36:de:4b:ee:0c:dd:4d:09:40:10:cb:ae: 33:b4:24:95:23:51:31:a1:d0:6f:49:e8:29:9e:7c: dd:48:4a:b1:f7:d3:2b:c4:b2:6e:88:d8:38:38:3b: b1:32:16:ad:0a:8c:19:88:ef:b8:29:19:1a:18:65: 7c:aa:16:12:fd:47:fa:05:98:fe:86:26:28:b7:c5: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:E9:23:E6:4F:A1:35:D8:5D:28:56:F2:67:72:A2:EE:9E:20:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl X509v3 Authority Key Identifier: keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer sbgp-ipAddrBlock: critical IPv4: 24.225.112.0/20 216.172.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3c:04:74:79:00:cc:5a:d0:a0:97:cd:ab:1c:da:43:e4:08: b9:6d:16:5d:1a:b2:71:fc:ca:b8:87:e5:6c:4b:4c:0e:88:f2: 51:1e:9d:8e:0e:e1:06:d5:4a:72:38:07:3b:b7:20:ab:95:45: 1c:e7:07:93:d6:65:a7:86:f9:aa:38:64:36:b5:aa:fe:e5:15: ce:04:14:03:af:ee:16:60:15:c2:5e:50:c1:74:4b:a2:f9:e1: d5:82:29:81:2f:69:8e:29:92:53:97:f3:c2:f6:ba:1c:2a:1f: b3:5f:db:cf:e8:bf:9d:f4:bf:7c:e9:c7:51:d6:44:0b:68:f3: f3:6b:33:8e:dc:b3:d8:85:d2:7f:1c:4f:aa:60:19:1c:b8:b9: ab:38:23:f8:98:d4:d2:5a:ce:45:a5:b0:de:88:7b:4c:2b:44: 87:58:2e:0a:11:28:8f:33:cf:bf:f3:c4:8c:92:d3:d9:e5:e3: 6f:43:fe:47:3d:c8:17:40:ae:f5:f9:74:32:05:76:ca:eb:44: 1f:b0:85:74:be:49:1d:6a:8e:bb:dc:35:8c:44:9f:8e:39:b5: 8c:14:65:24:8e:89:d0:9e:44:15:c5:96:1a:ec:d2:58:f5:ce: 9d:af:50:f0:92:9b:db:93:aa:60:a9:a0:4a:b9:1f:f8:94:ff: c1:0b:89:27 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkWma2hc+fTDDQoDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAzMWYyODgtYWExMC00YzZkLWI2NDAtNjc0OWYyMTJj NmI3MB4XDTI1MDMwNTE1MTExNVoXDTI1MDYwMzE0MTExNVowLzEtMCsGA1UEAxMk NGI2ODBlMWUtNGExOC00YmRiLTliZTgtZDI4ZjVhZmFhMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3K95iO55yuEsKB0xFFio/UZV7jW8ANiuwRM Q9+C3LizKHwTEPWfyqTwSX4yiV3l66PbZNwXb/eA/uNFktp7So0ntMCA4L5EjgLN Z2wha9Ikp6kki/AqducAUpMPiuCEw4goEUgQcLPZr6k9P2FWj1zHoJOmhTG6FWtU 0v3zKLkhS5Pi6XJ2BdloUjmsUcYET4kNNaGLJUGxx55LD7qQ4RUL749afErxQRU1 REd7+CDl0Rl+dfI23kvuDN1NCUAQy64ztCSVI1ExodBvSegpnnzdSEqx99MrxLJu iNg4ODuxMhatCowZiO+4KRkaGGV8qhYS/Uf6BZj+hiYot8V7HQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJm26SPmT6E12F0oVvJncqLuniBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMDMx ZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5ZjIxMmM2YjcvY2U5M2JhN2UtOTFkYS0z ZGZmLWE1MmQtNjhlMWRiMDkxNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjAzMWYyODgtYWExMC00YzZkLWI2 NDAtNjc0OWYyMTJjNmI3L2IwMzFmMjg4LWFhMTAtNGM2ZC1iNjQwLTY3NDlmMjEy YzZiNy5jcmwwHwYDVR0jBBgwFoAUpyjee9vTdDuXx9kIaBKDfKcx5w0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMDMxZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5 ZjIxMmM2YjcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEGOFwAwQE 2KxwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIY8BHR5AMxa0KCXzasc2kPkCLltFl0asnH8yriH5WxLTA6I 8lEenY4O4QbVSnI4Bzu3IKuVRRznB5PWZaeG+ao4ZDa1qv7lFc4EFAOv7hZgFcJe UMF0S6L54dWCKYEvaY4pklOX88L2uhwqH7Nf28/ov530v3zpx1HWRAto8/NrM47c s9iF0n8cT6pgGRy4uas4I/iY1NJazkWlsN6Ie0wrRIdYLgoRKI8zz7/zxIyS09nl 429D/kc9yBdArvX5dDIFdsrrRB+whXS+SR1qjrvcNYxEn445tYwUZSSOidCeRBXF lhrs0lj1zp2vUPCSm9uTqmCpoEq5H/iU/8ELiSc= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:14 2025 by rpki-client