$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json) Hash identifier: qDChkULkd99odd8MOjJBEb4jiT3BBe/jKpJLAiTE0hc= Subject key identifier: DC:B0:35:6E:6F:34:6C:24:63:DD:8F:AA:4D:3C:1C:62:BF:D9:24:F7 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F43285848BBBB73C704C26CE1D1FC4E80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 394437 IP address blocks: 72.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:73:c7:04:c2:6c:e1:d1:fc:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=84d98012-73b9-46b2-8d87-7f43ee8e9a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:59:46:fc:7c:7a:3d:73:02:ab:09:9b:92: 88:02:03:bb:d2:c0:e0:d8:23:a0:1d:a7:52:11:f9: 51:70:2d:81:a5:f8:01:17:4c:07:e8:34:ab:d5:60: 73:94:89:62:31:07:28:e2:bb:4a:62:d0:cf:44:e1: 1b:d0:ec:39:f2:9a:36:00:70:1f:9f:72:b4:98:09: c9:53:7d:8f:a0:aa:9a:99:bb:a1:50:c5:41:b9:ad: 50:6e:cf:93:48:da:89:07:0e:fa:1e:10:7d:10:b8: 99:ec:5c:02:32:ec:09:49:44:c5:f7:94:cf:81:63: bb:37:03:fe:81:c1:63:94:75:64:21:08:14:58:bb: 5e:63:fa:1f:4b:94:06:65:24:7d:19:9d:20:c6:b9: 5c:7b:a3:90:06:45:18:c6:a1:f5:11:bc:64:55:e1: ca:64:6d:1e:23:ff:24:62:16:dc:f6:a5:29:99:65: 36:3b:12:85:25:1d:3d:6f:17:a6:aa:87:89:e3:d5: d0:8f:9d:4d:ce:a3:fe:93:9d:0c:c3:25:29:57:9c: 20:38:1e:fd:b2:ae:ca:11:b9:ce:2f:38:e7:78:56: 89:f4:b9:21:67:b0:82:ac:79:19:b0:d9:5d:6a:75: 35:a3:38:6c:da:2a:75:24:34:a5:97:dc:9a:ad:43: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B0:35:6E:6F:34:6C:24:63:DD:8F:AA:4D:3C:1C:62:BF:D9:24:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2f:ea:3e:1b:d1:13:ee:c5:13:4c:fd:c5:dc:d8:e9:d4:1f: 91:62:a4:52:5f:1e:54:05:aa:ef:32:65:28:56:86:2a:38:2a: b9:91:a7:68:0d:d5:15:41:66:4c:42:22:36:61:c2:0f:a9:98: 22:dc:51:a8:33:b6:bb:d5:7d:30:1a:8b:5f:42:2e:91:0f:c0: 34:af:e8:f9:6f:7d:6e:8f:51:03:0e:57:d8:ec:c4:78:3c:c8: be:c8:d9:40:8b:b1:cb:0b:c8:36:b5:c1:f7:02:6a:0c:8a:6d: 6d:78:da:c7:66:89:4f:58:ee:6d:14:29:2c:be:85:62:b7:18: 76:85:e8:0e:11:fb:98:58:f6:94:07:ba:4c:e5:3f:45:10:c2: 0b:98:6d:56:58:a9:a4:72:87:cc:00:29:cf:6d:7e:ba:bc:0a: 7a:ad:be:f1:d0:42:05:f5:0f:67:b8:11:13:50:4d:b5:65:e5: 9c:57:1d:65:81:a0:66:c0:b3:90:54:b9:2e:21:2d:f8:f4:17: 00:d5:32:d8:42:36:15:bc:37:e7:a6:ec:61:d6:32:1b:62:2e: e5:70:38:8f:14:41:44:a3:8d:ee:62:6e:c4:b6:be:41:53:84: d3:b6:cd:46:88:13:62:b7:75:1f:dc:aa:52:90:d4:c6:ed:d3: b6:4c:bc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3PHBMJs4dH8ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ODRkOTgwMTItNzNiOS00NmIyLThkODctN2Y0M2VlOGU5YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprhZRvx8ej1zAqsJm5KIAgO70sDg2COgHadS EflRcC2BpfgBF0wH6DSr1WBzlIliMQco4rtKYtDPROEb0Ow58po2AHAfn3K0mAnJ U32PoKqambuhUMVBua1Qbs+TSNqJBw76HhB9ELiZ7FwCMuwJSUTF95TPgWO7NwP+ gcFjlHVkIQgUWLteY/ofS5QGZSR9GZ0gxrlce6OQBkUYxqH1EbxkVeHKZG0eI/8k Yhbc9qUpmWU2OxKFJR09bxemqoeJ49XQj51NzqP+k50MwyUpV5wgOB79sq7KEbnO LzjneFaJ9LkhZ7CCrHkZsNldanU1ozhs2ip1JDSll9yarUNhKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNywNW5vNGwkY92Pqk08HGK/2ST3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMDBkODQwNDktY2UzZC0z OGZkLThmN2ItNmIyYzJiODk2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQv6j4b0RPuxRNM/cXc2OnUH5FipFJfHlQFqu8yZShWhio4KrmRp2gN 1RVBZkxCIjZhwg+pmCLcUagztrvVfTAai19CLpEPwDSv6PlvfW6PUQMOV9jsxHg8 yL7I2UCLscsLyDa1wfcCagyKbW142sdmiU9Y7m0UKSy+hWK3GHaF6A4R+5hY9pQH ukzlP0UQwguYbVZYqaRyh8wAKc9tfrq8CnqtvvHQQgX1D2e4ERNQTbVl5ZxXHWWB oGbAs5BUuS4hLfj0FwDVMthCNhW8N+em7GHWMhtiLuVwOI8UQUSjje5ibsS2vkFT hNO2zUaIE2K3dR/cqlKQ1Mbt07ZMvL0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:05 2025 by rpki-client