$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json) Hash identifier: IpYx0IZNU4hDEi2kxbXciFeZogmLKRbjnBDO7WSDKAM= Subject key identifier: A0:8F:E7:06:1F:D1:E9:9B:37:49:BA:36:CD:E9:C3:BB:D8:8C:DA:F4 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285848D3765DFDA39EE4A5C122FB00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/24 maxlen: 24 158.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5d:fd:a3:9e:e4:a5:c1:22:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=41c8225e-7fdc-41a9-af5a-83e97d3ea367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:11:81:aa:59:92:99:54:f8:2a:84:d8:86: 26:f1:db:2f:86:08:9d:69:41:70:10:e9:33:8e:cb: 8e:02:51:bb:de:32:ad:57:35:47:8d:b1:a8:d2:ac: ad:61:68:99:ed:42:a1:ea:37:57:a6:7c:f5:3b:19: 39:a6:a2:d3:88:fa:7d:6b:4d:ed:e9:73:fe:53:1f: b5:a9:c5:15:bf:ce:05:28:f1:67:5e:b0:28:2a:15: f5:a4:ee:b7:08:c1:7d:8f:72:aa:b0:89:9f:67:68: c0:33:57:5d:c5:89:a0:d4:2a:fa:fb:79:9e:c7:14: f6:7a:40:4a:29:44:0b:f2:4b:26:94:70:0c:7d:3c: 5d:0b:6e:7d:07:45:a6:2b:76:80:1b:2e:61:8c:a2: de:2c:4b:ea:b6:3e:33:bc:11:a5:59:fd:bf:31:fa: 7d:f7:59:d5:33:3c:ae:51:0d:7a:82:c9:40:5d:a8: 8f:f7:50:17:63:4e:fd:93:cf:bc:02:74:5d:48:ce: 30:83:06:dc:e7:26:2d:11:ba:71:86:a7:86:50:83: d7:ec:dc:bc:05:e0:89:83:0a:b4:3e:26:7b:dd:8d: 4a:58:56:b4:02:00:a6:20:fe:07:e2:b7:78:ef:20: e6:9b:a8:97:12:01:69:01:df:61:f4:52:49:a4:2c: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:E7:06:1F:D1:E9:9B:37:49:BA:36:CD:E9:C3:BB:D8:8C:DA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:48:c4:01:59:6e:a1:21:9f:8d:1c:16:79:82:ac:1f:48:4a: 85:e9:3a:9d:b9:d8:c8:1e:1c:c0:a6:0f:60:0e:d3:39:19:e1: 4d:ac:90:c3:a6:2a:70:cc:35:0e:d8:c8:b8:ea:b3:ad:2d:8c: 99:06:c8:1d:ca:5c:2b:21:f2:85:87:3f:86:f6:e3:ef:9c:22: 74:91:4a:b8:43:83:0d:1f:2a:43:b6:9f:40:17:bc:73:08:52: cd:e9:33:19:ae:1d:ad:74:01:4f:b3:b6:9b:23:44:a1:2b:dc: c2:d1:79:e7:38:f3:bc:b1:a4:c3:63:08:0a:dd:8a:11:8f:b4: 18:3a:0b:23:e7:f3:8c:3a:a1:44:bb:57:d4:4f:f2:77:e2:05: c3:85:bd:ad:bb:dc:41:f7:0c:f8:52:d8:a0:70:e9:ea:01:94: e7:e3:d2:66:06:64:f9:4e:90:5c:bf:b8:ba:e6:32:7e:35:c7: 61:9d:0e:ae:87:ac:a4:7d:e1:5d:ab:72:02:37:11:c4:d3:1c: 8c:c3:22:c6:97:49:21:df:78:d5:b2:b3:e4:ad:f9:3b:6d:08: 44:96:2b:d5:ec:e7:94:8a:8c:1f:cc:05:4d:69:09:76:0b:b2: 0c:08:a5:57:4b:e5:f1:27:b9:42:e3:5c:f5:70:7f:01:f3:93: 78:5b:99:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjTdl39o57kpcEi+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk NDFjODIyNWUtN2ZkYy00MWE5LWFmNWEtODNlOTdkM2VhMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcgRgapZkplU+CqE2IYm8dsvhgidaUFwEOkz jsuOAlG73jKtVzVHjbGo0qytYWiZ7UKh6jdXpnz1Oxk5pqLTiPp9a03t6XP+Ux+1 qcUVv84FKPFnXrAoKhX1pO63CMF9j3KqsImfZ2jAM1ddxYmg1Cr6+3mexxT2ekBK KUQL8ksmlHAMfTxdC259B0WmK3aAGy5hjKLeLEvqtj4zvBGlWf2/Mfp991nVMzyu UQ16gslAXaiP91AXY079k8+8AnRdSM4wgwbc5yYtEbpxhqeGUIPX7Ny8BeCJgwq0 PiZ73Y1KWFa0AgCmIP4H4rd47yDmm6iXEgFpAd9h9FJJpCy25QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKCP5wYf0embN0m6Ns3pw7vYjNr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2FlNWFmZDEtNGIyOC0z ODU1LWFlNmItOWJhNzE5MTU4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABdIxAFZbqEhn40cFnmCrB9ISoXpOp252MgeHMCmD2AO0zkZ 4U2skMOmKnDMNQ7YyLjqs60tjJkGyB3KXCsh8oWHP4b24++cInSRSrhDgw0fKkO2 n0AXvHMIUs3pMxmuHa10AU+ztpsjRKEr3MLReec487yxpMNjCArdihGPtBg6CyPn 84w6oUS7V9RP8nfiBcOFva273EH3DPhS2KBw6eoBlOfj0mYGZPlOkFy/uLrmMn41 x2GdDq6HrKR94V2rcgI3EcTTHIzDIsaXSSHfeNWys+St+TttCESWK9Xs55SKjB/M BU1pCXYLsgwIpVdL5fEnuULjXPVwfwHzk3hbmZw= -----END CERTIFICATE-----Generated at Sun Apr 6 17:45:37 2025 by rpki-client