$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa File: 1469698d-5721-3dc4-a71b-77c9af5be168.roa (raw, json) Hash identifier: +BX0VvEEB1xtm40Ar9bFHMx9qw0JGBPvmCM1fj0gxbQ= Subject key identifier: E7:6E:D9:41:43:B4:D5:78:82:F0:D8:87:22:69:90:13:E8:E0:53:B5 Certificate issuer: /CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e Certificate serial: 010D0C9F432858497CED8FEB30B197F07861FA00 Authority key identifier: 8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa Signing time: Fri 11 Apr 2025 06:52:43 +0000 ROA not before: Fri 11 Apr 2025 06:52:43 +0000 ROA not after: Thu 10 Jul 2025 06:52:43 +0000 asID: 49683 IP address blocks: 172.82.64.0/24 maxlen: 24 172.82.65.0/24 maxlen: 24 172.82.66.0/24 maxlen: 24 172.82.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:ed:8f:eb:30:b1:97:f0:78:61:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e Validity Not Before: Apr 11 06:52:43 2025 GMT Not After : Jul 10 06:52:43 2025 GMT Subject: CN=4429a25c-d153-43b7-919d-14679e9ed00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:0a:c0:59:86:76:9e:91:89:08:05:90:dd: 8b:dc:27:98:7f:44:5a:24:ae:00:90:1e:67:1d:72: 11:01:aa:4c:e7:0b:64:94:75:f6:36:47:6d:2b:4d: 3f:fc:96:14:a3:de:be:58:cc:ba:2c:f6:b9:ee:13: 83:ae:ae:13:eb:88:00:ce:9a:76:5f:f2:d8:c1:69: 05:54:62:31:8b:fe:f9:21:9c:ba:1b:d9:e5:6d:4c: 3f:47:28:21:18:0f:78:d4:07:c6:6b:f7:dd:7d:2a: c3:80:33:9c:95:fe:e1:5d:6b:0f:aa:be:c5:58:12: fd:b8:46:92:a6:ea:0c:b0:e0:46:00:86:45:77:5e: 27:6b:ae:9d:33:cd:c2:7a:a7:8b:10:d8:29:18:43: 3a:3e:e0:24:8d:50:c3:af:e6:a6:af:96:04:cc:d6: 9b:56:31:f5:65:27:1c:13:43:5d:b1:74:3f:86:a0: e3:e2:70:27:54:46:58:76:83:3a:e2:04:63:45:8e: 7d:ec:10:c1:b0:68:51:28:36:9d:52:d8:1f:67:0b: 66:61:f8:01:d9:01:1a:df:79:87:4f:88:ae:bf:d0: 71:0e:9c:14:de:6b:32:c8:9f:a4:3d:dd:fc:45:3d: 68:59:ff:fb:61:ac:b8:8e:fb:30:7b:4a:92:7a:b3: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:D9:41:43:B4:D5:78:82:F0:D8:87:22:69:90:13:E8:E0:53:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl X509v3 Authority Key Identifier: keyid:8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:77:86:12:41:69:b0:89:30:38:4d:4f:83:2d:df:1e:7f:1b: 59:94:f2:2a:43:97:c6:87:f1:a0:25:54:79:e7:6e:f1:2e:d0: 8c:1e:94:37:46:f5:dd:67:b9:b9:82:38:28:9a:55:a1:dc:ac: 42:4e:0f:c5:5e:c7:1d:ce:ca:0f:47:a9:12:9b:5f:3b:56:66: 5d:2a:ad:da:69:e9:21:fe:f8:bc:43:10:a9:26:4e:c8:95:f5: d9:95:8b:6b:0d:6e:42:d5:86:1b:1d:62:41:b9:33:90:26:5a: 95:c8:6e:7d:7a:a2:93:26:33:37:50:af:e7:f1:ad:f2:ee:a8: 3c:f6:95:4e:82:84:65:d9:d1:c7:eb:08:bf:bf:18:77:41:bb: c1:d4:a3:b8:5e:0a:33:c0:32:33:eb:8b:7a:5d:ae:fa:9e:6f: 38:6a:b3:c0:0c:c2:d4:f7:eb:8c:1f:50:b0:6e:0e:2c:0d:4c: 32:60:91:19:bb:48:48:9c:91:5e:f4:ad:50:87:55:c4:3c:ad: 1d:f4:1e:c6:2a:9d:1d:6f:01:e2:04:bf:32:aa:f0:73:eb:88: 45:ba:91:0e:d8:71:0e:52:b5:18:8b:f0:43:29:e3:c4:72:d7: b8:3a:9e:c5:73:11:cb:dc:37:18:dc:54:6c:73:a4:4c:0e:a9: ff:76:5b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl87Y/rMLGX8Hhh+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRkNWVjYTAtODRmMS00MmE5LWFiYTYtNDZiMzdmMDdh YTRlMB4XDTI1MDQxMTA2NTI0M1oXDTI1MDcxMDA2NTI0M1owLzEtMCsGA1UEAxMk NDQyOWEyNWMtZDE1My00M2I3LTkxOWQtMTQ2NzllOWVkMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhgKwFmGdp6RiQgFkN2L3CeYf0RaJK4AkB5n HXIRAapM5wtklHX2NkdtK00//JYUo96+WMy6LPa57hODrq4T64gAzpp2X/LYwWkF VGIxi/75IZy6G9nlbUw/RyghGA941AfGa/fdfSrDgDOclf7hXWsPqr7FWBL9uEaS puoMsOBGAIZFd14na66dM83CeqeLENgpGEM6PuAkjVDDr+amr5YEzNabVjH1ZScc E0NdsXQ/hqDj4nAnVEZYdoM64gRjRY597BDBsGhRKDadUtgfZwtmYfgB2QEa33mH T4iuv9BxDpwU3msyyJ+kPd38RT1oWf/7Yay4jvswe0qSerNnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdu2UFDtNV4gvDYhyJpkBPo4FO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNGQ1 ZWNhMC04NGYxLTQyYTktYWJhNi00NmIzN2YwN2FhNGUvMTQ2OTY5OGQtNTcyMS0z ZGM0LWE3MWItNzdjOWFmNWJlMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjRkNWVjYTAtODRmMS00MmE5LWFi YTYtNDZiMzdmMDdhYTRlLzI0ZDVlY2EwLTg0ZjEtNDJhOS1hYmE2LTQ2YjM3ZjA3 YWE0ZS5jcmwwHwYDVR0jBBgwFoAUjiwpDP8/rWrgW3vKoPmVFszpnnwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNGQ1ZWNhMC04NGYxLTQyYTktYWJhNi00NmIz N2YwN2FhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt3hhJBabCJMDhNT4Mt3x5/G1mU8ipDl8aH8aAlVHnnbvEu0IwelDdG 9d1nubmCOCiaVaHcrEJOD8Vexx3Oyg9HqRKbXztWZl0qrdpp6SH++LxDEKkmTsiV 9dmVi2sNbkLVhhsdYkG5M5AmWpXIbn16opMmMzdQr+fxrfLuqDz2lU6ChGXZ0cfr CL+/GHdBu8HUo7heCjPAMjPri3pdrvqebzhqs8AMwtT364wfULBuDiwNTDJgkRm7 SEickV70rVCHVcQ8rR30HsYqnR1vAeIEvzKq8HPriEW6kQ7YcQ5StRiL8EMp48Ry 17g6nsVzEcvcNxjcVGxzpEwOqf92Wys= -----END CERTIFICATE-----Generated at Mon Apr 21 20:04:52 2025 by rpki-client