$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa File: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (raw, json) Hash identifier: lT7SSuE7OkhcsZzzAxZE59QTW1alg1Sq6TRc9yIuCDM= Subject key identifier: A4:B9:48:EF:2C:BF:F8:56:F3:A3:6D:23:ED:A3:F7:E9:4E:AE:B2:66 Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F43285848F926A04D1B20527C3FB24E40 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 7127 IP address blocks: 192.214.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a0:4d:1b:20:52:7c:3f:b2:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=c7429c0d-5f77-4784-a510-66337c9fb3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2a:97:5f:3d:02:6b:0a:e6:06:b5:0f:bd:dc: d3:82:7f:4a:2c:f3:5b:f2:b8:d6:5c:4b:e3:e7:4b: ac:77:fe:05:fc:1b:86:b8:bc:ee:50:f4:01:0e:69: 5b:19:ea:12:30:7b:25:11:79:9f:e1:2c:c9:5c:6e: 7a:ef:77:9d:90:14:c2:25:0f:8a:e5:98:1a:c9:9d: 06:15:ea:44:c2:86:d7:04:26:43:21:20:98:48:97: d0:2b:c4:5f:e4:e2:8c:80:2b:39:49:f1:93:33:22: 18:2c:f8:5f:b2:f2:45:bd:e7:67:2d:d7:27:48:d1: 23:fb:79:a2:e4:39:5e:97:7a:48:7a:7c:da:9a:02: f8:29:d8:58:12:93:0b:92:bc:ae:f6:fc:00:a2:91: da:ed:80:39:50:58:06:62:c8:60:ab:86:2d:3d:6e: 84:22:de:bf:df:52:80:c4:a7:f6:72:c3:b6:a8:bc: 9b:b7:8b:62:09:b1:08:6c:a9:c9:fc:26:66:eb:c7: e8:32:16:e5:34:b7:9b:72:16:50:53:3f:bc:01:73: eb:f6:10:f1:f1:6a:c8:ea:6b:14:97:34:16:52:85: 14:bb:93:ec:c9:38:6c:57:0d:50:7f:13:3a:d1:9d: 72:2a:71:4e:99:db:ee:a7:97:37:f0:23:48:a7:a9: a2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:48:EF:2C:BF:F8:56:F3:A3:6D:23:ED:A3:F7:E9:4E:AE:B2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: 192.214.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:24:f6:18:e7:50:f3:b8:ee:8a:8a:70:44:f5:ac:12:2d:c1: 5f:af:a2:07:cd:a8:ff:6d:6a:c7:20:38:16:40:aa:87:4a:3e: 6b:df:a5:13:43:a7:a2:07:a3:35:22:2f:5c:3b:d3:5f:33:de: 29:36:13:79:5f:9e:52:0e:14:9a:36:2b:d7:bc:30:ae:ec:3a: 6d:29:04:55:8e:1c:3b:ff:ec:a4:be:37:a1:8b:14:ec:81:bc: 29:d6:62:72:19:77:16:3c:27:19:62:5f:94:fc:9b:3a:1c:16: ac:29:cf:ab:16:6a:0e:53:20:e9:f7:d3:ca:2b:83:6e:1a:76: 83:ed:a0:97:55:d4:8e:b5:dd:db:d3:72:09:c8:57:73:91:44: 2e:23:e3:8f:20:12:fa:ed:cf:72:e8:e5:d0:f3:f5:3b:ab:48: a1:81:56:4d:86:61:1c:75:4f:18:cc:cc:aa:07:da:ad:ff:93: 9e:a1:99:bb:67:ae:91:f3:dc:c0:af:cb:6e:41:e0:1c:44:65: c1:e0:ac:24:94:28:36:d5:41:86:38:a7:18:30:30:d0:10:4d: c3:96:22:1b:8b:82:eb:12:95:73:0d:a8:0d:f4:ab:27:2f:57: 8a:24:1e:70:85:7e:fd:97:da:72:40:fb:66:ca:eb:0d:a9:f5: 88:1d:1b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqBNGyBSfD+yTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Yzc0MjljMGQtNWY3Ny00Nzg0LWE1MTAtNjYzMzdjOWZiM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyqXXz0CawrmBrUPvdzTgn9KLPNb8rjWXEvj 50usd/4F/BuGuLzuUPQBDmlbGeoSMHslEXmf4SzJXG5673edkBTCJQ+K5ZgayZ0G FepEwobXBCZDISCYSJfQK8Rf5OKMgCs5SfGTMyIYLPhfsvJFvednLdcnSNEj+3mi 5Dlel3pIenzamgL4KdhYEpMLkryu9vwAopHa7YA5UFgGYshgq4YtPW6EIt6/31KA xKf2csO2qLybt4tiCbEIbKnJ/CZm68foMhblNLebchZQUz+8AXPr9hDx8WrI6msU lzQWUoUUu5PsyThsVw1QfxM60Z1yKnFOmdvup5c38CNIp6mihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS5SO8sv/hW86NtI+2j9+lOrrJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvYjdlZWY0YmUtODBiNy0z YjFkLTkyMjAtZDU3ZDk0Yzc4MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYk9hjnUPO47oqKcET1rBItwV+vogfNqP9tascgOBZAqodKPmvfpRND p6IHozUiL1w7018z3ik2E3lfnlIOFJo2K9e8MK7sOm0pBFWOHDv/7KS+N6GLFOyB vCnWYnIZdxY8JxliX5T8mzocFqwpz6sWag5TIOn308org24adoPtoJdV1I613dvT cgnIV3ORRC4j448gEvrtz3Lo5dDz9TurSKGBVk2GYRx1TxjMzKoH2q3/k56hmbtn rpHz3MCvy25B4BxEZcHgrCSUKDbVQYY4pxgwMNAQTcOWIhuLgusSlXMNqA30qycv V4okHnCFfv2X2nJA+2bK6w2p9YgdG5A= -----END CERTIFICATE-----Generated at Sat Apr 12 13:42:59 2025 by rpki-client