$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71c7648c-a123-3f38-bf3c-993d379ab435.roa File: 71c7648c-a123-3f38-bf3c-993d379ab435.roa (raw, json) Hash identifier: RaZxXcN29YDuqWq0tk3Ys1Xo+y6gwRqdeBzwu7BhJqA= Subject key identifier: 76:21:70:6D:D3:7B:28:E8:AF:B2:32:91:75:0A:A6:04:D9:62:7C:99 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584908817025E55CCA5A39938A30 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71c7648c-a123-3f38-bf3c-993d379ab435.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 400894 IP address blocks: 205.196.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:70:25:e5:5c:ca:5a:39:93:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=682d479d-69ad-4283-b3cb-a128cc2a6be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:55:d4:af:44:7b:67:67:16:cf:09:92:a2: cc:b6:e7:38:ec:9c:d1:72:e5:ad:bf:7c:a8:80:58: 51:60:bf:08:5a:96:7b:43:df:20:19:30:dd:45:74: 14:ce:8a:b6:95:16:e8:93:00:4c:0b:df:01:f6:0a: 81:ad:17:4f:5f:0e:18:7c:89:68:01:e7:15:b0:b4: 15:3a:35:16:14:7f:83:93:b2:03:99:4e:5f:e5:d0: 1f:be:16:40:a6:37:4a:14:d0:f4:9f:ed:0a:f0:c9: 3f:63:e9:91:a1:1c:4e:3f:94:d1:67:39:1a:59:0c: ce:86:17:7b:91:1e:78:6a:63:1f:97:df:90:81:52: 8a:0d:2c:57:5d:0a:cb:5a:99:5f:50:50:4c:c0:00: 50:70:6e:08:bd:f5:ff:34:e4:4b:65:3f:a0:0c:96: 0c:31:b0:ef:f9:ca:9f:7a:6c:13:2b:5b:e4:fc:51: f6:02:d9:aa:31:cc:75:de:22:cb:f7:b4:20:cc:54: 6e:fd:8c:26:13:00:a5:87:eb:38:6b:c0:85:19:80: 32:74:bd:01:41:a3:a9:e0:7a:3f:d3:d8:b8:c1:85: 72:d0:8f:89:7b:ec:f2:6f:2b:4c:01:e1:2d:68:4c: bf:1d:d6:4a:31:aa:6f:f6:cc:dc:9b:4f:b1:02:b3: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:21:70:6D:D3:7B:28:E8:AF:B2:32:91:75:0A:A6:04:D9:62:7C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71c7648c-a123-3f38-bf3c-993d379ab435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 205.196.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:06:1b:c3:d6:85:01:fa:8e:d5:44:d0:9e:83:83:29:ec:91: b4:8b:e9:0c:fc:97:81:c7:fa:77:93:65:60:92:40:2c:bc:1e: 8e:97:f7:25:70:5f:d6:b1:f8:b8:26:3b:1e:da:a5:d6:30:c3: 7f:ad:4b:4a:b8:f5:de:14:f8:93:f5:d4:b0:ba:00:42:82:f8: e3:25:d5:a6:07:65:11:b9:83:d1:62:19:f5:bd:20:05:25:7f: 76:9d:94:95:e4:cd:43:cd:4c:fc:7b:5d:d6:63:b2:de:9c:c2: 81:4d:05:c5:a7:74:1e:a8:2e:af:6c:7e:aa:d7:22:14:0c:b8: 33:28:34:e8:03:0b:32:42:22:c0:b7:ff:14:fa:bd:cf:60:01: 1a:93:00:05:47:73:7d:9b:a1:4a:7c:f3:ab:14:d3:c1:73:90: 86:1a:00:79:98:89:79:40:b2:76:28:3b:2a:77:ba:3c:f9:f0: a5:c9:b9:3b:aa:49:c0:ad:2e:72:e7:d4:71:e0:7d:20:a9:4d: 66:42:d2:76:43:29:b4:c5:b1:7d:f1:8d:d5:08:fd:a7:59:d6: a3:fe:8b:d9:39:da:10:01:4c:6c:c2:04:4a:e6:db:14:35:ed: 04:e3:59:af:8a:9b:73:88:52:ad:8c:31:b3:2b:82:db:11:e1: 62:73:a0:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXAl5VzKWjmTijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjgyZDQ3OWQtNjlhZC00MjgzLWIzY2ItYTEyOGNjMmE2YmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGpV1K9Ee2dnFs8JkqLMtuc47JzRcuWtv3yo gFhRYL8IWpZ7Q98gGTDdRXQUzoq2lRbokwBMC98B9gqBrRdPXw4YfIloAecVsLQV OjUWFH+Dk7IDmU5f5dAfvhZApjdKFND0n+0K8Mk/Y+mRoRxOP5TRZzkaWQzOhhd7 kR54amMfl9+QgVKKDSxXXQrLWplfUFBMwABQcG4IvfX/NORLZT+gDJYMMbDv+cqf emwTK1vk/FH2AtmqMcx13iLL97QgzFRu/YwmEwClh+s4a8CFGYAydL0BQaOp4Ho/ 09i4wYVy0I+Je+zybytMAeEtaEy/HdZKMapv9szcm0+xArORUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYhcG3Teyjor7IykXUKpgTZYnyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNzFjNzY0OGMtYTEyMy0z ZjM4LWJmM2MtOTkzZDM3OWFiNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzcS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIGG8PWhQH6jtVE0J6DgynskbSL6Qz8l4HH+neTZWCSQCy8Ho6X9yVw X9ax+LgmOx7apdYww3+tS0q49d4U+JP11LC6AEKC+OMl1aYHZRG5g9FiGfW9IAUl f3adlJXkzUPNTPx7XdZjst6cwoFNBcWndB6oLq9sfqrXIhQMuDMoNOgDCzJCIsC3 /xT6vc9gARqTAAVHc32boUp886sU08FzkIYaAHmYiXlAsnYoOyp3ujz58KXJuTuq ScCtLnLn1HHgfSCpTWZC0nZDKbTFsX3xjdUI/adZ1qP+i9k52hABTGzCBErm2xQ1 7QTjWa+Km3OIUq2MMbMrgtsR4WJzoGQ= -----END CERTIFICATE-----Generated at Wed Apr 9 14:15:26 2025 by rpki-client