$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/648adc4e-8804-3dd1-9c55-6f8681153add.roa File: 648adc4e-8804-3dd1-9c55-6f8681153add.roa (raw, json) Hash identifier: fprIK+4a4Fl6vz1yr89odHF9uS0lRw9kUIi3vIAk9V4= Subject key identifier: CB:7E:25:14:04:40:E2:CC:0D:A9:24:06:F7:53:C7:1C:D6:7B:16:6F Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D14BAAFDD771D7AB12D960 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/648adc4e-8804-3dd1-9c55-6f8681153add.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 16787 IP address blocks: 24.24.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:4b:aa:fd:d7:71:d7:ab:12:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=e380cff0-7a47-4a20-b279-ef128fff4aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:b7:4f:71:9d:27:a5:48:64:0e:90:95:82: 40:b4:ce:9c:d9:55:c3:fa:53:65:bc:ee:cf:a2:8c: c7:7c:46:2d:d1:ff:5e:5b:ed:ec:ac:28:c1:20:44: bc:bc:80:46:14:4a:a9:f5:ff:3b:cf:16:3c:81:57: 9c:32:4b:98:47:33:e6:2f:8c:4b:e5:cd:d6:44:56: 73:90:5c:c6:2b:a3:09:2f:2e:c6:5b:18:8c:37:14: 88:16:e1:6a:9c:ce:92:50:fb:a2:f4:09:df:5f:f9: 32:07:44:d2:de:06:20:14:7f:45:6b:87:c0:9e:40: 80:8e:9c:7d:77:a8:1d:5b:77:c0:02:13:a1:3e:d2: 07:67:ee:e5:70:af:4b:52:3c:bb:79:10:bb:e1:de: d1:23:b8:7b:d9:6d:97:dd:36:80:b3:ed:1b:40:e7: 7d:e0:d0:4c:9e:dd:61:22:9e:88:07:ef:c2:81:21: 7e:23:03:ca:fe:60:85:d4:a0:19:47:79:3d:f8:b8: 0e:6a:38:f2:08:86:ec:ed:39:09:46:30:58:50:a0: 94:71:ea:42:c7:94:05:3c:01:b4:63:af:53:0a:57: 6f:d5:87:35:3a:8e:39:0e:32:09:46:40:6a:8b:c2: 99:bd:37:d3:77:a4:71:10:ea:dc:ea:41:13:ee:83: 76:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7E:25:14:04:40:E2:CC:0D:A9:24:06:F7:53:C7:1C:D6:7B:16:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/648adc4e-8804-3dd1-9c55-6f8681153add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.24.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:22:2e:9c:a3:6a:af:f3:bc:0a:21:b5:da:63:08:65:74:91: e2:50:a2:6c:2d:03:d5:48:a2:96:05:1c:c3:c7:e9:ee:84:fc: 16:60:d6:80:0c:c2:be:43:98:ec:71:f8:3e:a7:5e:e0:b1:73: 98:ec:81:75:71:d6:0a:d0:7b:07:0c:0a:fb:98:69:d0:e8:e5: 1b:0c:37:ff:64:6d:f7:8f:df:37:70:5a:87:9e:4f:f7:60:e8: 14:c0:0f:65:38:d3:fe:79:95:d3:0c:fa:a6:d7:77:5f:50:2e: f4:3c:20:19:ec:cf:cb:f7:65:63:6e:ad:fa:1b:3a:90:a5:a4: 4f:5e:3a:8f:34:24:00:ed:b2:57:87:e1:d6:4a:3b:3d:0b:7d: 5a:45:75:90:78:32:17:5d:1e:7f:c9:e5:78:99:46:16:90:c9: 7f:c0:f6:ce:02:1c:cc:10:f2:d0:00:01:ba:16:b1:42:a5:df: d9:09:80:6e:ec:c1:44:8f:e8:31:24:6f:bc:16:c1:4d:eb:7b: dd:02:a2:1f:3a:76:23:83:66:4b:e8:b9:62:34:79:36:f0:69: 2e:35:a0:77:6d:fc:69:d1:82:47:d4:46:e6:71:84:dd:5f:00: 25:38:ad:97:e1:55:4d:46:9b:2c:c3:da:13:60:64:e8:05:f3: 60:39:5d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Uuq/ddx16sS2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTM4MGNmZjAtN2E0Ny00YTIwLWIyNzktZWYxMjhmZmY0YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmC3T3GdJ6VIZA6QlYJAtM6c2VXD+lNlvO7P oozHfEYt0f9eW+3srCjBIES8vIBGFEqp9f87zxY8gVecMkuYRzPmL4xL5c3WRFZz kFzGK6MJLy7GWxiMNxSIFuFqnM6SUPui9AnfX/kyB0TS3gYgFH9Fa4fAnkCAjpx9 d6gdW3fAAhOhPtIHZ+7lcK9LUjy7eRC74d7RI7h72W2X3TaAs+0bQOd94NBMnt1h Ip6IB+/CgSF+IwPK/mCF1KAZR3k9+LgOajjyCIbs7TkJRjBYUKCUcepCx5QFPAG0 Y69TCldv1Yc1Oo45DjIJRkBqi8KZvTfTd6RxEOrc6kET7oN2pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt+JRQEQOLMDakkBvdTxxzWexZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjQ4YWRjNGUtODgwNC0z ZGQxLTljNTUtNmY4NjgxMTUzYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwiLpyjaq/zvAohtdpjCGV0keJQomwtA9VIopYFHMPH6e6E/BZg1oAM wr5DmOxx+D6nXuCxc5jsgXVx1grQewcMCvuYadDo5RsMN/9kbfeP3zdwWoeeT/dg 6BTAD2U40/55ldMM+qbXd19QLvQ8IBnsz8v3ZWNurfobOpClpE9eOo80JADtsleH 4dZKOz0LfVpFdZB4MhddHn/J5XiZRhaQyX/A9s4CHMwQ8tAAAboWsUKl39kJgG7s wUSP6DEkb7wWwU3re90Coh86diODZkvouWI0eTbwaS41oHdt/GnRgkfURuZxhN1f ACU4rZfhVU1GmyzD2hNgZOgF82A5XWE= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:58 2025 by rpki-client