$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/4e57234e-6352-39da-a6ac-2994ef9d30b3.roa File: 4e57234e-6352-39da-a6ac-2994ef9d30b3.roa (raw, json) Hash identifier: JVUpmCvCCcPgKQIY7CtbwQICytK5X7Wh1W3laCASeb4= Subject key identifier: 3C:C2:12:1E:25:E7:DC:42:AD:E1:2E:57:64:50:0B:8D:7E:85:2E:32 Certificate issuer: /CN=02ad5a58-3adf-41cb-9598-b3260591398c Certificate serial: 010D0C9F43285848C8AE3966C8A90FFDBDEB3F80 Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/4e57234e-6352-39da-a6ac-2994ef9d30b3.roa Signing time: Wed 05 Feb 2025 17:19:36 +0000 ROA not before: Wed 05 Feb 2025 17:19:36 +0000 ROA not after: Tue 06 May 2025 16:19:36 +0000 asID: 12097 IP address blocks: 24.140.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:ae:39:66:c8:a9:0f:fd:bd:eb:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c Validity Not Before: Feb 5 17:19:36 2025 GMT Not After : May 6 16:19:36 2025 GMT Subject: CN=7fff04f8-7a6b-49e1-91a0-e29a549ab736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:54:be:87:90:fb:63:e5:2e:45:80:23:8c: f5:b8:86:6e:bf:cf:84:b7:24:17:9b:bc:fc:06:67: 3e:bb:22:8f:76:a6:cc:76:9f:aa:72:77:7b:a3:ed: a9:bd:16:2e:ae:6c:44:66:aa:f9:a5:73:f9:b9:e6: 91:73:3a:8c:5a:6a:d8:c3:a2:7f:51:bb:b1:4e:d0: a7:09:32:da:31:ca:1f:e0:88:26:35:33:76:9d:46: 92:97:d2:ac:6f:c5:c7:dc:1a:5f:d4:61:5c:57:96: 67:cf:18:5b:f5:bc:6a:6a:e4:8e:ca:a3:16:0c:49: 98:36:9a:16:72:a3:f8:3f:a5:16:79:88:ff:9c:a4: e7:13:cd:80:a0:2b:6b:ae:b4:61:33:88:af:24:30: 4c:44:78:34:ca:78:92:eb:6e:4e:98:93:3c:a1:77: 33:65:33:96:1a:9b:7a:0d:49:83:cf:e8:24:ac:fc: eb:1d:be:6c:a5:d2:12:45:bb:7a:18:91:20:8a:70: 70:1a:6a:6a:9f:87:d2:ca:be:0c:a8:c8:f1:8d:c8: 2e:7f:62:1c:e4:5c:00:c3:96:c4:79:2e:fa:d3:07: ed:fa:b6:e7:5c:8c:fc:34:b1:dc:9e:d3:32:89:3a: c0:1a:55:a9:d9:70:f2:5f:ab:c9:89:41:49:02:9d: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:12:1E:25:E7:DC:42:AD:E1:2E:57:64:50:0B:8D:7E:85:2E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/4e57234e-6352-39da-a6ac-2994ef9d30b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl X509v3 Authority Key Identifier: keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer sbgp-ipAddrBlock: critical IPv4: 24.140.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:03:a4:a0:a0:e4:83:7c:12:23:fc:34:3d:49:5f:3a:67:7c: 94:b6:43:24:2f:6b:d5:ef:64:cd:b1:55:32:c9:5b:06:7a:44: fb:00:6c:d1:30:e9:5e:59:82:98:dc:67:71:4e:42:78:70:0a: d8:08:77:7d:0d:40:87:1d:d0:7d:90:51:1c:7a:cb:50:ca:c3: 4d:db:a8:97:90:00:57:c9:90:d1:ab:61:31:91:b6:d3:a9:0a: ee:d4:da:26:aa:d0:56:0c:02:e5:87:5f:fe:4b:fb:46:d2:ff: ab:fc:9d:08:00:93:f1:3e:77:6b:8b:a5:01:3e:9f:b1:af:61: 0b:14:a5:7f:62:1a:6c:83:65:a5:7f:43:c4:83:58:1d:c6:4b: 70:d8:86:e6:1c:13:7d:44:c8:0e:1f:2c:22:3b:d9:5c:c2:71: e8:13:a3:92:23:fa:19:3c:db:d6:31:b6:18:c4:8a:fc:79:88: 5d:1d:36:c8:e7:52:dd:fa:3c:3e:fb:7f:9a:62:76:83:5e:02: a8:4d:98:f8:97:36:be:c4:91:4f:36:4d:2f:9b:5a:aa:16:b8: f4:da:a8:3e:5b:88:1f:4c:7a:65:c1:be:97:ff:61:09:d4:16: 41:0e:94:4f:63:da:b4:b3:68:9c:68:de:06:25:56:d2:9d:e6: b0:09:06:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIrjlmyKkP/b3rP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz OThjMB4XDTI1MDIwNTE3MTkzNloXDTI1MDUwNjE2MTkzNlowLzEtMCsGA1UEAxMk N2ZmZjA0ZjgtN2E2Yi00OWUxLTkxYTAtZTI5YTU0OWFiNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0BUvoeQ+2PlLkWAI4z1uIZuv8+EtyQXm7z8 Bmc+uyKPdqbMdp+qcnd7o+2pvRYurmxEZqr5pXP5ueaRczqMWmrYw6J/UbuxTtCn CTLaMcof4IgmNTN2nUaSl9Ksb8XH3Bpf1GFcV5Znzxhb9bxqauSOyqMWDEmYNpoW cqP4P6UWeYj/nKTnE82AoCtrrrRhM4ivJDBMRHg0yniS625OmJM8oXczZTOWGpt6 DUmDz+gkrPzrHb5spdISRbt6GJEginBwGmpqn4fSyr4MqMjxjcguf2Ic5FwAw5bE eS760wft+rbnXIz8NLHcntMyiTrAGlWp2XDyX6vJiUFJAp1dgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzCEh4l59xCreEuV2RQC41+hS4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvNGU1NzIzNGUtNjM1Mi0z OWRhLWE2YWMtMjk5NGVmOWQzMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1 OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2 MDU5MTM5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADADpKCg5IN8EiP8ND1JXzpnfJS2QyQva9XvZM2xVTLJWwZ6RPsAbNEw 6V5ZgpjcZ3FOQnhwCtgId30NQIcd0H2QURx6y1DKw03bqJeQAFfJkNGrYTGRttOp Cu7U2iaq0FYMAuWHX/5L+0bS/6v8nQgAk/E+d2uLpQE+n7GvYQsUpX9iGmyDZaV/ Q8SDWB3GS3DYhuYcE31EyA4fLCI72VzCcegTo5Ij+hk829YxthjEivx5iF0dNsjn Ut36PD77f5pidoNeAqhNmPiXNr7EkU82TS+bWqoWuPTaqD5biB9MemXBvpf/YQnU FkEOlE9j2rSzaJxo3gYlVtKd5rAJBnA= -----END CERTIFICATE-----Generated at Sat Apr 12 18:41:58 2025 by rpki-client