$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c97f0404-a0c3-390f-84ff-dfe951d4d37f.roa File: c97f0404-a0c3-390f-84ff-dfe951d4d37f.roa (raw, json) Hash identifier: p4s9zXw1NKh+fbPQ8lcygAfIj4Up4OzFgJGiMw0lc5Q= Subject key identifier: C4:5C:B9:4B:D9:C0:91:EB:E4:2D:A9:D7:0C:E8:F0:D0:BC:58:21:20 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1AA832B6A7B178DF6D540 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c97f0404-a0c3-390f-84ff-dfe951d4d37f.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 7843 IP address blocks: 24.33.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:aa:83:2b:6a:7b:17:8d:f6:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=ad4d3d0c-b00f-4e93-884d-cb2a2ee54bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:6a:97:a0:c3:55:c3:07:4b:d8:40:73:2e: 53:16:95:80:59:f1:8d:03:da:f2:6c:a7:98:06:e8: fa:95:05:6e:e2:c0:f9:fc:ab:d8:a2:ab:81:92:fd: 8d:e7:54:a2:2f:b6:90:f7:14:3c:bd:b8:2d:27:63: da:88:03:7d:6d:eb:9c:c1:41:e1:b9:57:d9:a2:91: 66:c2:90:05:bb:44:75:63:5a:72:94:23:5b:b2:10: b2:33:d5:28:47:68:df:ba:b9:f1:40:c9:77:ff:81: 91:14:57:a8:3f:1b:68:d2:d7:21:bc:a1:be:07:d5: e5:9e:d0:35:f6:4c:81:85:c0:f7:d0:ec:6f:99:40: 7f:d5:56:ed:53:e2:6c:24:bd:a5:70:88:56:82:d9: 74:e8:e0:39:35:a7:75:5e:06:d2:87:c0:49:e1:2a: 30:f8:10:55:e4:6a:72:2a:84:b6:af:3a:8b:ba:40: 16:6b:be:90:7a:52:56:6f:6a:b4:36:53:0b:6b:cd: 04:2c:81:ed:4f:87:ec:5d:98:ea:01:9d:98:04:b6: 5f:ab:ce:dd:68:a7:77:0b:ea:0f:8a:c3:d2:d8:73: 4a:73:86:5a:bf:3d:cc:c5:00:bf:29:ee:fe:4b:a1: 03:eb:2c:e3:57:3d:2e:d1:4a:ea:4c:06:4d:9f:b0: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:B9:4B:D9:C0:91:EB:E4:2D:A9:D7:0C:E8:F0:D0:BC:58:21:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c97f0404-a0c3-390f-84ff-dfe951d4d37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.33.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:90:df:9f:46:29:25:39:3c:5a:dd:8d:e4:8a:7f:6f:db:b4: 0b:e7:b8:7f:ea:93:bb:f8:db:cb:63:cc:2e:5a:d1:64:27:74: 6c:71:c2:bd:2f:c4:dd:71:d8:8c:3a:bb:0e:d6:5b:92:67:49: 9e:0e:6f:6e:0d:e6:e7:fe:dd:92:c9:a9:04:f6:4a:2c:70:cb: e3:09:e4:e4:46:a8:58:5a:63:55:8c:df:94:17:b4:e6:ae:18: bd:a8:97:0f:c2:6b:c5:dd:14:5d:85:91:a4:b3:71:f9:b2:98: 15:87:ad:3c:6d:f8:7f:d4:a8:2e:8f:b3:75:f8:9b:69:18:0f: 04:a8:05:e7:4e:c5:c0:82:f2:c8:12:0c:04:62:8c:82:e6:36: 57:02:5e:d6:fa:45:49:34:7d:bf:39:f2:64:81:e3:cf:df:ee: 8d:4a:d7:97:32:21:2b:03:7d:6b:c9:1a:ba:0e:c6:22:b2:df: 37:7a:d9:da:57:09:64:7a:65:02:23:37:d5:5a:65:2b:01:0e: 8f:26:d7:c0:c7:f1:ce:dd:3e:22:c3:ea:78:f6:19:d6:12:c5: 20:7b:06:c3:08:0b:10:c9:9e:17:e6:ea:5a:d1:c9:ce:83:9f: a0:5f:70:b3:f2:59:5d:de:cf:fb:85:40:aa:48:94:e8:f5:e0: 08:17:a7:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aqDK2p7F4321UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YWQ0ZDNkMGMtYjAwZi00ZTkzLTg4NGQtY2IyYTJlZTU0YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9ql6DDVcMHS9hAcy5TFpWAWfGNA9rybKeY Buj6lQVu4sD5/KvYoquBkv2N51SiL7aQ9xQ8vbgtJ2PaiAN9beucwUHhuVfZopFm wpAFu0R1Y1pylCNbshCyM9UoR2jfurnxQMl3/4GRFFeoPxto0tchvKG+B9XlntA1 9kyBhcD30OxvmUB/1VbtU+JsJL2lcIhWgtl06OA5Nad1XgbSh8BJ4Sow+BBV5Gpy KoS2rzqLukAWa76QelJWb2q0NlMLa80ELIHtT4fsXZjqAZ2YBLZfq87daKd3C+oP isPS2HNKc4Zavz3MxQC/Ke7+S6ED6yzjVz0u0UrqTAZNn7BjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRcuUvZwJHr5C2p1wzo8NC8WCEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzk3ZjA0MDQtYTBjMy0z OTBmLTg0ZmYtZGZlOTUxZDRkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWQ359GKSU5PFrdjeSKf2/btAvnuH/qk7v428tjzC5a0WQndGxxwr0v xN1x2Iw6uw7WW5JnSZ4Ob24N5uf+3ZLJqQT2Sixwy+MJ5ORGqFhaY1WM35QXtOau GL2olw/Ca8XdFF2FkaSzcfmymBWHrTxt+H/UqC6Ps3X4m2kYDwSoBedOxcCC8sgS DARijILmNlcCXtb6RUk0fb858mSB48/f7o1K15cyISsDfWvJGroOxiKy3zd62dpX CWR6ZQIjN9VaZSsBDo8m18DH8c7dPiLD6nj2GdYSxSB7BsMICxDJnhfm6lrRyc6D n6BfcLPyWV3ez/uFQKpIlOj14AgXp5k= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:05 2025 by rpki-client