$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa File: c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa (raw, json) Hash identifier: 3r4q168SU4MlmztO/76CltPLFO6/GpJb+/8Inivrkec= Subject key identifier: B1:02:7F:3C:03:ED:64:18:C9:49:C6:A5:A1:32:36:DD:F1:DA:BD:DA Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584902EBFE52B3E355B752E07900 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 394846 IP address blocks: 24.224.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fe:52:b3:e3:55:b7:52:e0:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=da6dd083-3eea-47b5-a2be-a20d5b1faf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:9d:aa:0f:85:7e:4a:f2:89:b7:71:71:c7: 95:ef:7b:cb:14:25:ad:4d:cf:c5:2f:fd:63:cc:69: 52:4d:37:1e:23:fd:22:1d:67:66:fd:b8:f6:e7:40: 75:c4:b6:18:80:4f:0e:13:31:f4:2a:3e:dd:46:ff: f9:6a:51:0b:d3:5a:69:be:53:73:6d:40:4f:1a:d7: 90:dc:19:b9:6f:60:de:61:fa:0b:08:c6:e1:c2:1c: 5b:85:9a:1c:c1:e2:d8:16:69:3a:cf:66:52:d6:cc: e1:ba:31:83:ea:fb:1f:80:79:7a:5b:c4:d9:f9:cb: 3f:59:f4:41:4c:66:4d:82:7e:9d:4f:17:ab:d6:b6: d2:49:a7:1f:b6:7d:57:23:0b:22:3d:50:98:b9:e3: 09:bf:63:3c:ed:0b:7f:13:09:cb:ee:29:e2:47:b7: c0:92:c7:8c:64:aa:26:c5:92:ee:06:d6:a2:10:a4: 97:b5:df:64:9a:4f:df:e0:d5:bf:cb:af:03:81:db: 66:08:d2:2d:0b:0e:08:a1:b8:00:75:38:51:d7:e4: 9a:4b:67:a1:f6:ee:ab:72:eb:2e:01:48:ad:d4:16: c3:b5:8f:5b:27:0d:bf:dc:26:2f:08:46:88:9f:91: 5d:0c:b1:b0:9b:43:72:32:f9:ed:c4:1a:0d:cc:85: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:7F:3C:03:ED:64:18:C9:49:C6:A5:A1:32:36:DD:F1:DA:BD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.224.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4d:8b:5f:26:e3:14:44:63:54:ba:00:23:7c:85:72:34:92: 9f:9e:36:dd:8f:17:61:37:7c:ca:b2:e8:0f:32:11:19:77:75: 5f:51:6e:00:83:cf:2b:c2:93:bb:0a:7a:aa:2e:ff:dc:a9:65: ca:73:6d:79:02:4b:da:8e:34:0c:78:8c:fd:71:a3:ce:de:ae: 9e:b5:1f:73:0d:c7:be:08:7c:fd:36:2a:3a:25:df:25:82:fa: ed:94:ae:ce:c6:2c:56:66:0e:49:c1:20:b5:61:f1:e4:49:25: 67:6a:af:ac:c9:9d:eb:6a:3a:ea:15:28:df:54:50:2b:a0:87: 9d:b1:dd:a8:f6:2b:77:56:02:a1:be:04:42:54:46:d7:28:90: 2c:69:be:a0:71:f1:6a:af:6c:77:ee:de:8b:0c:63:81:04:bb: 09:25:32:4e:c0:a1:57:a5:c8:74:d9:44:2f:2f:63:e1:40:6d: 9d:a4:94:84:f3:be:10:d8:d0:a0:d6:d6:a1:23:cf:e5:54:e9: cf:2c:07:c0:ff:90:57:34:90:c8:a6:13:c4:5a:e3:a5:41:f5: 1f:f6:01:8e:28:69:ec:a3:46:51:89:4c:55:20:9e:d5:ee:18: a1:d0:0a:50:ff:8e:dc:ef:78:e3:17:6b:c7:03:36:cf:64:96: 39:4e:61:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/5Ss+NVt1LgeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZGE2ZGQwODMtM2VlYS00N2I1LWEyYmUtYTIwZDViMWZhZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNWdqg+FfkryibdxcceV73vLFCWtTc/FL/1j zGlSTTceI/0iHWdm/bj250B1xLYYgE8OEzH0Kj7dRv/5alEL01ppvlNzbUBPGteQ 3Bm5b2DeYfoLCMbhwhxbhZocweLYFmk6z2ZS1szhujGD6vsfgHl6W8TZ+cs/WfRB TGZNgn6dTxer1rbSSacftn1XIwsiPVCYueMJv2M87Qt/EwnL7iniR7fAkseMZKom xZLuBtaiEKSXtd9kmk/f4NW/y68DgdtmCNItCw4IobgAdThR1+SaS2eh9u6rcusu AUit1BbDtY9bJw2/3CYvCEaIn5FdDLGwm0NyMvntxBoNzIV37QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLECfzwD7WQYyUnGpaEyNt3x2r3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYzliYWYyZDctN2FjNC0z YjFiLWFjN2YtY2QyZTE0MGJmNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGODqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxNi18m4xREY1S6ACN8hXI0kp+eNt2PF2E3fMqy6A8yERl3dV9RbgCD zyvCk7sKeqou/9ypZcpzbXkCS9qONAx4jP1xo87erp61H3MNx74IfP02Kjol3yWC +u2Urs7GLFZmDknBILVh8eRJJWdqr6zJnetqOuoVKN9UUCugh52x3aj2K3dWAqG+ BEJURtcokCxpvqBx8WqvbHfu3osMY4EEuwklMk7AoVelyHTZRC8vY+FAbZ2klITz vhDY0KDW1qEjz+VU6c8sB8D/kFc0kMimE8Ra46VB9R/2AY4oaeyjRlGJTFUgntXu GKHQClD/jtzveOMXa8cDNs9kljlOYT8= -----END CERTIFICATE-----Generated at Mon Apr 7 15:26:38 2025 by rpki-client