$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/931b7a63-af19-3eb6-bf09-1356c431101c.roa File: 931b7a63-af19-3eb6-bf09-1356c431101c.roa (raw, json) Hash identifier: WwzHwiR8YC+0p8Yle0NPoSUnyCaJZohFXgf5+v94H9o= Subject key identifier: CE:E8:E0:56:3A:74:75:E8:D0:66:31:48:9B:C9:CD:41:48:93:3C:BC Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D13EF20F11FE4663121500 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/931b7a63-af19-3eb6-bf09-1356c431101c.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 11426 IP address blocks: 24.167.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:3e:f2:0f:11:fe:46:63:12:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=4cb78ce8-dcae-4097-8da9-e8ab7c1cd4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:20:a1:30:b1:89:53:eb:5c:3b:cc:77:0d: b1:1d:1f:c5:65:69:24:b0:19:03:58:0b:70:f5:81: a0:27:22:ed:80:3a:9f:64:41:ec:41:2c:a7:f5:f3: 54:77:6d:24:fa:80:6a:0b:43:39:48:e1:69:03:91: 20:46:12:33:d2:45:71:1b:77:4b:23:80:7d:f6:62: c4:e0:1f:4f:7c:05:cc:1e:b0:a7:e7:06:0b:86:ff: ef:c8:36:12:4e:34:f0:69:38:4d:08:c8:05:01:2e: eb:e8:d3:e6:25:af:9f:ff:b8:98:18:df:46:46:0b: 73:cd:17:9b:f2:35:35:28:16:73:4f:d5:20:25:a1: 0a:a6:51:23:d4:62:76:57:1c:b4:ae:c1:85:e9:04: 12:94:a9:60:5a:d8:97:97:33:bf:c1:be:7d:9b:a3: 0c:8e:89:49:ff:40:7d:ae:79:30:5e:32:ab:bd:fd: 37:d4:fa:63:6c:6b:0b:5d:5a:51:0f:dd:8d:ce:83: 8c:91:6c:75:1b:44:a2:0b:83:0a:7e:f6:fd:b5:7f: f4:37:3b:63:ef:2f:e2:0e:60:07:3b:56:2b:8f:da: ff:68:1e:03:3d:27:2f:b8:5e:53:57:33:d1:81:00: ce:3b:52:5e:be:fe:87:be:50:9a:f8:9a:98:0a:3a: d7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E8:E0:56:3A:74:75:E8:D0:66:31:48:9B:C9:CD:41:48:93:3C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/931b7a63-af19-3eb6-bf09-1356c431101c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.167.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0c:cf:e7:73:93:be:76:8b:11:a3:67:3f:6e:42:30:c4:37: 1d:e0:3b:08:9b:ea:d1:8f:46:ec:af:f8:ef:63:6f:e8:e7:4d: 8c:02:84:c1:05:7d:af:3c:68:9b:e8:63:58:d2:cd:0a:93:76: d0:9a:ba:ed:94:ce:2d:96:ec:5a:8c:b4:53:51:00:68:91:6d: a6:a9:54:38:e1:9b:d5:dd:a2:95:97:6b:34:7b:7b:c2:c1:9b: b4:97:cb:48:d8:cc:72:0a:9b:26:94:f1:86:83:03:35:c9:ac: b0:46:4d:80:05:03:c3:4e:fa:de:9d:27:00:fd:02:6d:e8:b8: 47:12:64:e3:7e:4b:c7:fe:6e:0c:d8:4d:aa:15:b5:32:dd:52: da:fd:34:ea:d8:d3:1e:eb:8a:91:c4:2b:fb:08:dd:e4:ef:f1: 28:be:12:2b:12:9e:3c:4b:04:34:9d:09:18:19:7e:05:b4:d5: b2:30:b3:f9:76:fe:f0:a9:f8:e4:25:f2:05:f2:fc:ff:9f:25: ba:21:ad:a1:48:40:f7:0b:61:d1:56:b2:a6:5e:ea:70:25:61: 9e:13:f0:e7:a2:aa:ba:e4:e1:2b:b0:21:03:3a:f7:58:e9:9c: cf:34:c0:fc:c3:1f:78:68:0d:21:13:92:f6:aa:ea:c5:8e:81: 09:40:71:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0T7yDxH+RmMSFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NGNiNzhjZTgtZGNhZS00MDk3LThkYTktZThhYjdjMWNkNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZogoTCxiVPrXDvMdw2xHR/FZWkksBkDWAtw 9YGgJyLtgDqfZEHsQSyn9fNUd20k+oBqC0M5SOFpA5EgRhIz0kVxG3dLI4B99mLE 4B9PfAXMHrCn5wYLhv/vyDYSTjTwaThNCMgFAS7r6NPmJa+f/7iYGN9GRgtzzReb 8jU1KBZzT9UgJaEKplEj1GJ2Vxy0rsGF6QQSlKlgWtiXlzO/wb59m6MMjolJ/0B9 rnkwXjKrvf031PpjbGsLXVpRD92NzoOMkWx1G0SiC4MKfvb9tX/0Nztj7y/iDmAH O1Yrj9r/aB4DPScvuF5TVzPRgQDOO1Jevv6HvlCa+JqYCjrXpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7o4FY6dHXo0GYxSJvJzUFIkzy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTMxYjdhNjMtYWYxOS0z ZWI2LWJmMDktMTM1NmM0MzExMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoMz+dzk752ixGjZz9uQjDENx3gOwib6tGPRuyv+O9jb+jnTYwChMEF fa88aJvoY1jSzQqTdtCauu2Uzi2W7FqMtFNRAGiRbaapVDjhm9XdopWXazR7e8LB m7SXy0jYzHIKmyaU8YaDAzXJrLBGTYAFA8NO+t6dJwD9Am3ouEcSZON+S8f+bgzY TaoVtTLdUtr9NOrY0x7ripHEK/sI3eTv8Si+EisSnjxLBDSdCRgZfgW01bIws/l2 /vCp+OQl8gXy/P+fJbohraFIQPcLYdFWsqZe6nAlYZ4T8Oeiqrrk4SuwIQM691jp nM80wPzDH3hoDSETkvaq6sWOgQlAcbM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:17 2025 by rpki-client