$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa File: 646207f2-cf4f-3abb-93af-47f00919b1b8.roa (raw, json) Hash identifier: s/2amdj89bj9VgiEAKfUm6EXX0yvS/42+y5EiTAJ4Pc= Subject key identifier: 8D:E5:B4:6F:94:91:28:D5:9D:06:6E:41:AA:92:04:C1:92:E9:AF:2C Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F43285849301CFF85B26EE40718D17280 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa Signing time: Fri 14 Mar 2025 18:31:03 +0000 ROA not before: Fri 14 Mar 2025 18:31:03 +0000 ROA not after: Thu 12 Jun 2025 18:31:03 +0000 asID: 12213 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:1c:ff:85:b2:6e:e4:07:18:d1:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Mar 14 18:31:03 2025 GMT Not After : Jun 12 18:31:03 2025 GMT Subject: CN=15b6a7a9-eab0-442f-aef6-e48b8c8262a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:1d:be:31:ff:b3:d9:a9:df:7a:51:ea:05: 40:68:0d:e2:f8:27:fa:77:35:75:0a:bb:6e:28:74: af:cd:d8:4c:2c:30:20:e8:fe:54:94:67:38:a8:da: 8a:b7:a8:67:d9:82:2e:ca:b6:44:94:55:c8:d5:e1: 40:d5:7d:2a:0e:be:03:2a:d4:66:cd:60:f5:92:2e: 1e:70:71:fb:62:74:ec:df:51:52:e7:d4:eb:6b:2c: 38:bc:0a:77:f6:6f:b0:3b:fd:84:94:1e:90:00:9d: 2a:ec:d6:ee:4b:e8:55:5f:f6:2e:39:25:be:3e:4d: f8:9d:6c:72:a4:e6:fd:28:d8:1f:e0:4d:91:24:a5: 4d:66:1e:5f:79:00:58:91:8b:67:f3:44:c6:6b:b7: d7:99:0f:8e:af:e7:48:82:7f:6e:0c:19:78:cf:eb: 31:8f:4d:de:ce:c9:6b:ee:85:4d:a5:9e:5f:41:e0: c1:5e:e0:52:69:05:c6:15:95:9a:b6:5c:70:af:72: fa:23:76:69:af:25:f8:9f:db:ec:bb:03:e6:a9:27: 8a:2f:41:98:33:6b:ef:45:a4:46:2e:5d:a3:75:b7: 69:d7:f3:e0:87:41:06:67:4d:e7:1e:b8:91:ec:f9: ee:ca:28:f5:02:06:36:64:8e:c9:76:de:97:52:32: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E5:B4:6F:94:91:28:D5:9D:06:6E:41:AA:92:04:C1:92:E9:AF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e9:18:06:1b:a4:ce:0d:9e:6e:63:74:cd:16:c8:3e:57:01: fc:91:f7:57:c0:09:13:d0:df:49:fd:c5:df:87:a3:34:43:89: c5:8f:68:5a:86:63:8c:e8:4a:bf:a9:07:a8:69:72:88:b0:3b: 88:30:e6:2d:0a:e0:9f:0a:44:96:17:70:8b:46:96:45:77:d2: bc:dc:f5:92:bc:73:c8:91:9f:f3:d8:21:f0:13:33:db:13:ea: a5:2f:bf:88:ae:db:f4:96:c4:0a:82:41:79:22:69:a7:8a:ce: 82:6d:f4:84:84:d3:65:4f:75:a5:8a:53:aa:64:3b:a0:ee:86: ef:59:8e:23:d7:67:4c:ea:17:9a:5c:dc:b3:3f:89:08:8b:03: 90:6c:2f:39:d8:bd:a5:ca:53:ae:bf:5c:a3:91:2c:d3:ce:53: 28:0b:36:ec:c1:bb:d5:db:1c:d6:55:1e:dc:e4:83:57:f2:a8: 18:a3:f2:0f:5d:97:58:56:49:ce:c6:28:8b:d0:fe:0a:6b:fc: e6:9a:35:72:1a:02:af:3d:2b:15:75:1d:12:35:7b:2a:a9:25: bd:f9:76:7a:fb:b3:a5:b6:a6:21:d4:6b:f6:9d:3e:bf:5e:17: 72:6f:f1:73:20:46:cc:3b:c9:f8:32:94:94:83:40:24:60:8f: e8:c1:65:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwHP+Fsm7kBxjRcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDMxNDE4MzEwM1oXDTI1MDYxMjE4MzEwM1owLzEtMCsGA1UEAxMk MTViNmE3YTktZWFiMC00NDJmLWFlZjYtZTQ4YjhjODI2MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvQdvjH/s9mp33pR6gVAaA3i+Cf6dzV1Crtu KHSvzdhMLDAg6P5UlGc4qNqKt6hn2YIuyrZElFXI1eFA1X0qDr4DKtRmzWD1ki4e cHH7YnTs31FS59Trayw4vAp39m+wO/2ElB6QAJ0q7NbuS+hVX/YuOSW+Pk34nWxy pOb9KNgf4E2RJKVNZh5feQBYkYtn80TGa7fXmQ+Or+dIgn9uDBl4z+sxj03ezslr 7oVNpZ5fQeDBXuBSaQXGFZWatlxwr3L6I3ZpryX4n9vsuwPmqSeKL0GYM2vvRaRG Ll2jdbdp1/Pgh0EGZ03nHriR7Pnuyij1AgY2ZI7Jdt6XUjIsqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3ltG+UkSjVnQZuQaqSBMGS6a8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNjQ2MjA3ZjItY2Y0Zi0z YWJiLTkzYWYtNDdmMDA5MTliMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXpGAYbpM4Nnm5jdM0WyD5XAfyR91fACRPQ30n9xd+HozRDicWPaFqG Y4zoSr+pB6hpcoiwO4gw5i0K4J8KRJYXcItGlkV30rzc9ZK8c8iRn/PYIfATM9sT 6qUvv4iu2/SWxAqCQXkiaaeKzoJt9ISE02VPdaWKU6pkO6Duhu9ZjiPXZ0zqF5pc 3LM/iQiLA5BsLznYvaXKU66/XKORLNPOUygLNuzBu9XbHNZVHtzkg1fyqBij8g9d l1hWSc7GKIvQ/gpr/OaaNXIaAq89KxV1HRI1eyqpJb35dnr7s6W2piHUa/adPr9e F3Jv8XMgRsw7yfgylJSDQCRgj+jBZY0= -----END CERTIFICATE-----Generated at Fri Apr 11 22:41:56 2025 by rpki-client