$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa File: bf501b39-cf10-3228-be24-2d4a79b1b202.roa (raw, json) Hash identifier: vE5AN7BdZa7Don8zjBjsbPT0vr8+lmeyHiK1OMvaxIw= Subject key identifier: D2:1A:F1:4D:A6:FE:59:F8:6E:E5:9C:09:2B:1C:98:6B:27:F8:BE:4A Certificate issuer: /CN=02ad5a58-3adf-41cb-9598-b3260591398c Certificate serial: 010D0C9F432858496CE44FA9184911FE2E3326C0 Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 12097 IP address blocks: 24.140.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4f:a9:18:49:11:fe:2e:33:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=a94ef7be-5534-4fc5-a786-5e6bd1f7e9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:c6:cc:62:d8:05:bb:75:c6:94:04:06:47: 96:c3:1b:90:e3:61:64:8d:d4:c1:43:e6:55:9f:b4: 3c:bc:39:8a:4e:b9:e9:1c:cd:4a:62:ca:2c:1f:ff: c4:3c:22:98:8a:27:77:87:97:43:0a:bc:49:a3:cf: e4:8d:11:cb:44:7e:dc:5a:ab:55:57:64:cd:12:a2: b8:ce:6c:27:75:2f:47:fe:f4:c5:85:ee:7b:bf:ac: c0:a4:3c:8d:a1:ea:38:1e:9a:e6:15:b0:65:f5:cd: 64:b9:a9:8d:30:5b:4f:7a:91:b5:10:17:20:6a:01: be:bc:5a:69:cb:69:e4:a7:19:db:70:98:fc:34:41: 6b:a0:91:d6:3c:8d:bd:ce:83:c7:cb:25:79:59:03: 1b:d7:4a:2f:df:ef:c4:36:3d:de:2f:6d:6d:2c:3d: 28:57:f9:fb:15:bc:33:21:70:32:8d:34:e0:03:fc: 9d:40:04:bc:a2:97:f2:81:47:8d:49:50:7e:09:a4: 5a:8b:36:e0:8e:a5:46:44:78:d8:09:a0:7f:4a:5f: e2:ef:de:0c:88:fd:6f:ca:71:45:66:d9:6c:a4:9e: 76:4e:ba:51:48:ca:f5:5a:d3:74:a6:dc:ba:87:af: 43:65:a8:6a:ae:54:3f:6c:07:ed:c4:dc:7e:3a:05: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1A:F1:4D:A6:FE:59:F8:6E:E5:9C:09:2B:1C:98:6B:27:F8:BE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl X509v3 Authority Key Identifier: keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer sbgp-ipAddrBlock: critical IPv4: 24.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f8:86:59:6b:86:a0:eb:83:8a:7c:31:61:3a:a4:20:96:51: c3:24:9e:9a:b6:73:4a:42:43:54:db:39:20:bb:37:f4:4b:6c: 1d:8f:d0:7f:f7:2c:b5:1b:9d:c7:48:23:31:03:73:c7:57:73: 0c:48:1d:33:28:95:d7:0f:b6:e8:38:92:b3:fb:55:88:08:8d: c2:7d:81:72:85:c4:c3:27:91:52:d2:85:bb:60:98:94:9e:87: ae:d4:34:ca:25:d7:10:16:b4:35:fc:b4:d6:93:e7:f2:64:e4: 66:2a:29:00:72:16:9e:39:d7:d6:f8:fc:1c:99:84:63:df:7e: 2d:9a:bd:88:1a:97:7f:bb:2b:24:98:1c:d6:64:3e:3e:9d:e2: 50:ab:66:a4:b3:82:47:b1:9c:f6:02:8c:9e:f7:22:7b:a0:e5: d9:15:79:f8:62:f2:85:d5:37:d9:9a:97:ac:fd:39:94:29:ad: ac:2c:9b:f5:53:61:62:e3:3f:21:f0:26:51:df:67:34:be:87: 03:1c:d4:c2:18:30:ac:5d:44:c6:25:cb:27:05:87:91:a3:4b: 7e:3f:0f:45:18:b3:95:63:26:cc:e9:d6:73:fc:b7:4d:74:b6: df:4f:9c:ab:fd:26:bb:7f:23:6c:c3:97:10:fc:aa:91:d2:d1: ff:24:30:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5E+pGEkR/i4zJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz OThjMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk YTk0ZWY3YmUtNTUzNC00ZmM1LWE3ODYtNWU2YmQxZjdlOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZLGzGLYBbt1xpQEBkeWwxuQ42FkjdTBQ+ZV n7Q8vDmKTrnpHM1KYsosH//EPCKYiid3h5dDCrxJo8/kjRHLRH7cWqtVV2TNEqK4 zmwndS9H/vTFhe57v6zApDyNoeo4HprmFbBl9c1kuamNMFtPepG1EBcgagG+vFpp y2nkpxnbcJj8NEFroJHWPI29zoPHyyV5WQMb10ov3+/ENj3eL21tLD0oV/n7Fbwz IXAyjTTgA/ydQAS8opfygUeNSVB+CaRaizbgjqVGRHjYCaB/Sl/i794MiP1vynFF ZtlspJ52TrpRSMr1WtN0pty6h69DZahqrlQ/bAftxNx+OgWkzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIa8U2m/ln4buWcCSscmGsn+L5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvYmY1MDFiMzktY2YxMC0z MjI4LWJlMjQtMmQ0YTc5YjFiMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1 OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2 MDU5MTM5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv4hllrhqDrg4p8MWE6pCCWUcMknpq2c0pCQ1TbOSC7N/RLbB2P0H/3 LLUbncdIIzEDc8dXcwxIHTMoldcPtug4krP7VYgIjcJ9gXKFxMMnkVLShbtgmJSe h67UNMol1xAWtDX8tNaT5/Jk5GYqKQByFp4519b4/ByZhGPffi2avYgal3+7KySY HNZkPj6d4lCrZqSzgkexnPYCjJ73Inug5dkVefhi8oXVN9mal6z9OZQprawsm/VT YWLjPyHwJlHfZzS+hwMc1MIYMKxdRMYlyycFh5GjS34/D0UYs5VjJszp1nP8t010 tt9PnKv9Jrt/I2zDlxD8qpHS0f8kMKs= -----END CERTIFICATE-----Generated at Sat Apr 12 15:21:15 2025 by rpki-client