$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa File: 0639a3ec-6704-3229-98c1-628460a5c2f0.roa (raw, json) Hash identifier: law/PVCvNXjOFnrboDmV9XaIR0FqUHH+OAp4EbG21MM= Subject key identifier: 3A:81:EC:00:23:1D:23:57:D4:54:83:83:8D:77:69:37:9E:4D:C6:1F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642258165F69802A5CBA00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 192.175.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:58:16:5f:69:80:2a:5c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=d931af6d-8313-4f55-99a1-bc5a1a34aaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d5:65:b8:dd:d0:a1:82:50:33:af:cd:2c:02: ab:1a:ff:8b:81:3e:e2:20:b4:f0:d7:72:19:cb:e4: 87:08:d1:6c:a2:f6:15:3f:d8:cf:b1:60:cc:42:03: f9:70:19:5f:7f:8b:97:a3:ba:c2:20:a2:4c:43:64: e8:fc:aa:55:bd:ce:7a:20:84:ee:bc:a9:b3:82:90: 14:6c:78:15:1f:f2:82:aa:f3:bf:93:3f:c1:86:50: 0c:c5:d2:0d:f7:3e:3d:86:df:fe:14:62:88:10:c5: f7:ba:d0:db:33:81:a8:9b:0a:e5:59:76:d2:e8:4c: d4:1b:59:4b:b9:55:85:bf:fd:2d:a9:13:e2:7d:97: ea:08:d8:ab:c0:09:8e:75:62:83:0b:b0:3d:cc:1a: 17:76:04:7a:df:2e:97:b7:2a:7a:1c:b8:7e:6f:11: ee:0b:e5:83:47:23:6a:56:41:e1:a7:e6:78:23:36: 25:6c:06:df:74:2c:44:2b:76:32:40:d0:70:27:dd: c3:9a:04:e6:61:29:bf:cb:24:19:35:a1:52:54:4b: 96:9e:43:0b:95:50:4a:64:f9:f3:99:6b:07:4a:27: 5c:9f:e5:0c:c7:6d:1c:02:0d:dd:67:bb:58:0a:b1: 20:b4:ae:62:b3:73:58:6c:fc:36:45:3e:ee:04:a4: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:81:EC:00:23:1D:23:57:D4:54:83:83:8D:77:69:37:9E:4D:C6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0639a3ec-6704-3229-98c1-628460a5c2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 192.175.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0e:da:b6:3d:27:62:bf:86:16:66:35:02:15:c0:4f:59:a0: 21:aa:3b:cf:ea:b0:ac:5c:7f:9b:13:56:cc:62:5c:99:97:cc: ab:3c:cc:86:b3:7a:80:53:77:f8:b8:1c:3f:62:94:d0:fc:60: d6:cb:9a:04:f0:b0:33:8d:20:cd:c1:a8:4d:cf:99:ff:01:08: dd:ba:06:c5:a2:fa:30:e2:28:71:de:8a:d8:8a:32:dd:b1:77: 31:63:6b:79:24:aa:86:d4:03:10:79:1a:1a:97:ed:4f:70:47: 6e:d0:31:e3:63:1a:ea:f1:48:a5:e9:eb:68:d8:84:b6:f7:3e: a1:0e:d9:25:c0:48:40:87:45:46:47:c5:10:9a:5b:f9:39:a9: 84:a0:84:30:02:37:51:11:8c:70:5b:fb:f3:c0:f1:7b:41:23: 70:d5:3d:59:8e:f9:07:e8:14:ef:b7:38:98:33:e6:42:d5:cd: 5b:5a:d0:30:37:70:ce:7f:90:a4:73:5a:f7:28:7c:3e:48:6d: 9b:d8:32:1e:9a:9d:6a:e2:d9:1e:76:66:f4:f3:7c:51:8e:2f: ab:c1:01:89:33:22:75:43:75:56:30:18:87:ae:59:59:34:00: 7d:dc:01:75:d8:dd:c5:cf:7e:e2:ee:bb:67:ac:9f:77:57:b2: fb:21:e0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCJYFl9pgCpcugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDkzMWFmNmQtODMxMy00ZjU1LTk5YTEtYmM1YTFhMzRhYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9VluN3QoYJQM6/NLAKrGv+LgT7iILTw13IZ y+SHCNFsovYVP9jPsWDMQgP5cBlff4uXo7rCIKJMQ2To/KpVvc56IITuvKmzgpAU bHgVH/KCqvO/kz/BhlAMxdIN9z49ht/+FGKIEMX3utDbM4GomwrlWXbS6EzUG1lL uVWFv/0tqRPifZfqCNirwAmOdWKDC7A9zBoXdgR63y6Xtyp6HLh+bxHuC+WDRyNq VkHhp+Z4IzYlbAbfdCxEK3YyQNBwJ93DmgTmYSm/yyQZNaFSVEuWnkMLlVBKZPnz mWsHSidcn+UMx20cAg3dZ7tYCrEgtK5is3NYbPw2RT7uBKTcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqB7AAjHSNX1FSDg413aTeeTcYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDYzOWEzZWMtNjcwNC0z MjI5LTk4YzEtNjI4NDYwYTVjMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgO2rY9J2K/hhZmNQIVwE9ZoCGqO8/qsKxcf5sTVsxiXJmXzKs8zIaz eoBTd/i4HD9ilND8YNbLmgTwsDONIM3BqE3Pmf8BCN26BsWi+jDiKHHeitiKMt2x dzFja3kkqobUAxB5GhqX7U9wR27QMeNjGurxSKXp62jYhLb3PqEO2SXASECHRUZH xRCaW/k5qYSghDACN1ERjHBb+/PA8XtBI3DVPVmO+QfoFO+3OJgz5kLVzVta0DA3 cM5/kKRzWvcofD5IbZvYMh6anWri2R52ZvTzfFGOL6vBAYkzInVDdVYwGIeuWVk0 AH3cAXXY3cXPfuLuu2esn3dXsvsh4G8= -----END CERTIFICATE-----Generated at Sat Apr 5 19:11:15 2025 by rpki-client