$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: AoxX92gVxPs0Es4kui857wGcknkGWYl+N4v9JL0wtT8= Subject key identifier: 9A:CD:B7:E2:30:4C:74:E8:23:85:DF:1A:B8:4E:E5:9B:44:78:34:99 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285848E2D1034378117A37BDF32520 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:03:43:78:11:7a:37:bd:f3:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=8b3244db-f398-404b-8de8-8a014729b02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:55:e5:a6:a0:c2:fa:fb:22:90:f2:14:1a: 4d:c7:10:57:1d:6a:a8:8a:d0:4f:84:ae:21:a2:e2: b0:31:ca:50:69:d9:98:11:10:6e:44:0f:ea:44:c6: 13:21:49:52:33:92:a1:a6:8f:36:e7:d7:c1:a0:11: c2:dd:dc:77:b8:29:9e:85:67:84:63:d1:9b:8c:48: 47:2a:5e:de:2d:ca:05:19:dd:7d:6d:da:b2:2b:9e: 2d:61:67:89:39:97:11:2f:91:37:af:87:9c:ab:fb: 1c:43:4d:a7:12:eb:f4:25:16:b3:61:10:ad:d8:23: 1a:3e:de:66:39:95:3a:15:0f:fa:a8:00:31:a3:1d: 0f:4d:53:b6:f9:12:f4:c2:33:7a:bc:c2:e8:44:a8: fe:a0:31:97:c5:4a:ff:1f:3a:4e:f8:b9:c1:ec:bc: a0:a8:ac:1e:10:3d:42:cd:dd:32:f8:ae:36:a6:9f: ac:2c:d5:ea:c0:33:83:3e:37:8b:2e:89:df:6a:58: de:f0:58:b0:e9:f1:d4:b6:92:9b:0b:7c:72:05:c7: a6:f4:2d:92:b9:1d:ee:17:6e:04:6d:79:e8:55:4a: 50:12:28:ee:dd:3c:de:a0:ef:26:a9:08:58:cf:c7: 69:b7:0d:8f:ab:3a:5d:d2:b7:83:51:00:c3:a2:0f: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CD:B7:E2:30:4C:74:E8:23:85:DF:1A:B8:4E:E5:9B:44:78:34:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:55:a1:01:5a:91:37:39:7c:94:89:af:04:5d:52:3b:79:4e: ad:7e:76:4b:21:26:e9:e3:40:78:7d:dd:ff:4d:55:6a:66:5e: 12:61:34:b4:72:a3:3b:ba:d3:7d:5d:32:43:c2:7e:67:86:3f: b2:fc:f0:16:4f:fa:3b:1a:4d:01:c2:a8:21:8e:5b:57:99:62: 93:7b:f5:59:f1:57:ac:4b:87:b6:13:dc:59:48:09:bf:bc:63: fe:bf:db:3b:e9:0f:7a:6e:32:bc:a2:40:06:6a:cc:a2:4e:f2: 88:c9:96:42:8f:ca:84:97:db:2e:85:fa:95:64:fb:d9:c6:0b: 9c:5e:fa:17:61:c8:c7:fe:89:e4:a9:d0:a6:63:08:42:c2:3f: 18:ac:67:8b:91:28:df:b8:b1:07:b5:aa:1b:24:bb:45:8b:48: dd:d6:73:4e:9c:bf:e1:80:ec:34:bf:89:ce:73:4f:3a:fa:ae: 1d:2d:a4:28:6b:bd:83:f2:c9:f4:59:ab:d9:91:3f:aa:3b:eb: 8b:28:40:dc:03:74:20:d0:1f:9b:81:54:4e:26:ab:9f:6f:9a: 74:be:e8:53:53:d2:b7:ae:12:db:74:ff:1e:e3:8b:cb:34:a6: 3c:f2:ad:a3:f2:2c:6f:39:91:b0:38:e4:8a:ae:e9:d7:a8:19: cc:39:70:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QNDeBF6N73zJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OGIzMjQ0ZGItZjM5OC00MDRiLThkZTgtOGEwMTQ3MjliMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqclV5aagwvr7IpDyFBpNxxBXHWqoitBPhK4h ouKwMcpQadmYERBuRA/qRMYTIUlSM5Khpo8259fBoBHC3dx3uCmehWeEY9GbjEhH Kl7eLcoFGd19bdqyK54tYWeJOZcRL5E3r4ecq/scQ02nEuv0JRazYRCt2CMaPt5m OZU6FQ/6qAAxox0PTVO2+RL0wjN6vMLoRKj+oDGXxUr/HzpO+LnB7LygqKweED1C zd0y+K42pp+sLNXqwDODPjeLLonfalje8Fiw6fHUtpKbC3xyBcem9C2SuR3uF24E bXnoVUpQEiju3TzeoO8mqQhYz8dptw2Pqzpd0reDUQDDog95SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrNt+IwTHToI4XfGrhO5ZtEeDSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5VoQFakTc5fJSJrwRdUjt5Tq1+dkshJunjQHh93f9NVWpmXhJhNLRy ozu6031dMkPCfmeGP7L88BZP+jsaTQHCqCGOW1eZYpN79VnxV6xLh7YT3FlICb+8 Y/6/2zvpD3puMryiQAZqzKJO8ojJlkKPyoSX2y6F+pVk+9nGC5xe+hdhyMf+ieSp 0KZjCELCPxisZ4uRKN+4sQe1qhsku0WLSN3Wc06cv+GA7DS/ic5zTzr6rh0tpChr vYPyyfRZq9mRP6o764soQNwDdCDQH5uBVE4mq59vmnS+6FNT0reuEtt0/x7ji8s0 pjzyraPyLG85kbA45Iqu6deoGcw5cPM= -----END CERTIFICATE-----Generated at Sat Apr 12 15:23:19 2025 by rpki-client