$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa File: 24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa (raw, json) Hash identifier: Rpdrn8bC6lYAGjEKlo/gryy5mK1i/MmGLVi6QrIbDuM= Subject key identifier: 88:9C:9D:12:AD:0E:A0:0C:C5:1F:E7:7D:F0:74:28:84:F3:26:59:A2 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285848CB164F26FA67C49898903DC0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 16433 IP address blocks: 147.92.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:4f:26:fa:67:c4:98:98:90:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=a4b57762-fd48-40ae-ad0d-e9964aaaba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:4c:b8:28:fd:97:a8:75:83:25:da:17:dc: cf:73:56:0b:02:83:36:dd:eb:69:b6:3f:4c:c9:a9: 7d:f6:be:9e:a6:27:fd:85:fe:f2:27:2e:51:b2:a2: fc:ec:b8:91:e8:18:80:8c:be:73:15:27:1b:e3:ad: fa:20:67:fa:a7:5a:cc:db:a5:96:db:df:80:6b:8e: eb:49:93:02:ad:5f:f3:ee:ed:bf:c1:11:a8:24:2e: e1:9a:eb:ea:be:39:2e:20:b7:7f:46:ec:1d:b7:53: 06:f5:89:aa:9a:dc:d6:39:17:4b:62:15:97:c2:35: 07:be:50:cb:88:e5:51:7b:22:97:23:9b:65:42:a2: 0c:e2:1f:11:0f:e4:ac:63:54:e0:6a:a4:51:b5:1e: 99:4f:78:65:9f:25:51:84:52:59:db:4e:d3:33:d2: 15:3a:c9:b8:6f:6f:ad:d8:f1:af:42:5c:83:59:64: f0:43:42:d0:df:c1:d0:8b:b8:6f:f8:a3:7b:ed:3e: 09:8f:02:b6:a6:91:1d:d7:5d:83:38:fb:01:ec:92: 8f:d8:1a:49:80:05:03:c3:86:b6:00:ce:3a:73:18: 41:2d:0d:29:96:2e:a4:3a:8e:a4:bf:e9:db:3c:14: 11:24:32:a2:0a:3a:f8:36:97:68:85:1c:4e:46:2c: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9C:9D:12:AD:0E:A0:0C:C5:1F:E7:7D:F0:74:28:84:F3:26:59:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a3:c1:1c:c1:80:42:29:b7:18:f8:2a:5e:43:ac:f0:f1:f6: f4:73:76:df:f7:6e:86:30:34:f3:9b:c3:37:c9:91:e2:f9:d1: 35:38:e4:a1:bd:39:8b:19:c5:24:40:79:23:d7:99:d2:70:19: a4:c7:47:ed:1b:c8:d9:75:4b:a9:d2:02:92:4d:f9:68:55:bb: f7:e6:c7:ea:3b:f8:ad:97:d0:e9:df:12:ff:57:0f:80:1a:0b: 43:f1:9d:9a:80:d1:fe:16:b3:3e:df:4c:3b:23:5d:29:45:35: d9:02:af:d3:db:b0:2c:ac:95:ef:a9:ef:71:23:73:e8:21:96: b8:fa:bb:b0:2d:e2:2b:62:fa:de:ac:dd:e1:6b:c2:a5:05:48: 01:84:37:47:5b:2d:cd:23:59:a5:f7:ec:89:65:27:f7:34:2d: 49:b0:c0:c6:9d:0c:32:11:bc:6a:40:7e:b4:c2:95:06:27:7c: d2:85:ec:3e:34:38:ba:27:0b:23:46:e0:ab:8d:6e:f6:83:e2: cd:81:7d:3e:9e:c0:6c:a7:fd:21:85:84:14:22:63:81:f4:42: 25:bb:2f:a4:9f:e1:3f:4a:93:de:33:a2:05:48:aa:23:e0:41: ce:eb:ef:27:80:13:c5:de:fa:86:0c:32:c9:38:27:27:05:11: 73:bd:2d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFk8m+mfEmJiQPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk YTRiNTc3NjItZmQ0OC00MGFlLWFkMGQtZTk5NjRhYWFiYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqZMuCj9l6h1gyXaF9zPc1YLAoM23etptj9M yal99r6epif9hf7yJy5RsqL87LiR6BiAjL5zFScb4636IGf6p1rM26WW29+Aa47r SZMCrV/z7u2/wRGoJC7hmuvqvjkuILd/Ruwdt1MG9YmqmtzWORdLYhWXwjUHvlDL iOVReyKXI5tlQqIM4h8RD+SsY1TgaqRRtR6ZT3hlnyVRhFJZ207TM9IVOsm4b2+t 2PGvQlyDWWTwQ0LQ38HQi7hv+KN77T4JjwK2ppEd112DOPsB7JKP2BpJgAUDw4a2 AM46cxhBLQ0pli6kOo6kv+nbPBQRJDKiCjr4NpdohRxORiz0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIicnRKtDqAMxR/nffB0KITzJlmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjRjNzhhN2QtM2ZjNC0z ZWUyLWE3N2YtMDJkOGZmYTE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk1wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCjwRzBgEIptxj4Kl5DrPDx9vRzdt/3boYwNPObwzfJkeL50TU45KG9 OYsZxSRAeSPXmdJwGaTHR+0byNl1S6nSApJN+WhVu/fmx+o7+K2X0OnfEv9XD4Aa C0PxnZqA0f4Wsz7fTDsjXSlFNdkCr9PbsCysle+p73Ejc+ghlrj6u7At4iti+t6s 3eFrwqUFSAGEN0dbLc0jWaX37IllJ/c0LUmwwMadDDIRvGpAfrTClQYnfNKF7D40 OLonCyNG4KuNbvaD4s2BfT6ewGyn/SGFhBQiY4H0QiW7L6Sf4T9Kk94zogVIqiPg Qc7r7yeAE8Xe+oYMMsk4JycFEXO9LdM= -----END CERTIFICATE-----Generated at Fri Apr 11 21:01:39 2025 by rpki-client