$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/06af1d82-f2b5-3070-9ee7-6972446c5441.roa File: 06af1d82-f2b5-3070-9ee7-6972446c5441.roa (raw, json) Hash identifier: afajBtcMxK90u9hllxGMLGeNM1VSfRHcdp1TS8iwG8s= Subject key identifier: 53:F6:67:C8:46:D3:53:D0:97:F3:81:B1:D7:31:E4:6A:7E:97:31:8E Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F432858493243E72BB35533E3FDA87C80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/06af1d82-f2b5-3070-9ee7-6972446c5441.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 6079 IP address blocks: 24.148.0.0/18 maxlen: 24 24.148.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e7:2b:b3:55:33:e3:fd:a8:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=87f233ea-1430-4033-8081-2acfc746facd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:d2:32:cb:5f:57:63:bb:07:1f:1d:5b:81: d0:2a:f9:4b:f2:c6:03:ee:e8:9b:51:4f:07:da:17: 8d:71:ae:ad:4b:fc:e5:6e:7b:1e:f7:89:17:8d:ab: ce:2e:bf:80:c2:28:72:40:10:65:00:6e:ee:99:5a: 02:76:4a:48:29:15:3d:6f:b4:27:ee:57:b6:8e:e5: fd:72:f3:db:36:7c:bd:63:70:0a:0c:b8:4f:9a:a7: 9b:6a:4f:30:db:8f:fa:d1:b4:7f:6a:c2:0b:ea:62: 1c:50:6e:fc:61:c1:bd:49:1c:61:c5:2f:46:94:71: 77:b5:27:3d:98:1a:7b:e3:bd:50:07:7e:ac:6d:cd: 9a:90:62:5a:77:c4:27:e4:a7:9f:96:e9:4e:7f:9e: 7d:08:4b:3d:07:a7:f4:ab:ca:0a:e7:43:7c:ad:bf: ff:d1:f4:18:ad:03:8b:75:04:a5:07:8b:46:42:51: f4:fe:68:a9:09:bc:f7:be:f3:80:80:24:61:4f:db: 98:2a:91:19:6a:ef:20:03:b4:c1:94:5c:a0:30:b9: dd:65:b1:95:61:98:e9:da:87:c2:ed:c7:1d:90:e4: 6d:d3:bc:8d:b3:67:db:ff:e5:63:0c:b7:8e:27:cc: 54:e1:2b:f6:3d:61:09:80:24:82:62:67:85:42:eb: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:67:C8:46:D3:53:D0:97:F3:81:B1:D7:31:E4:6A:7E:97:31:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/06af1d82-f2b5-3070-9ee7-6972446c5441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 24.148.0.0-24.148.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:28:4c:08:2e:54:db:28:b5:bf:cc:c5:c5:99:34:d2:ab:fc: c0:9d:af:08:98:f0:68:d9:bc:35:6c:80:30:5a:74:01:5e:f3: 95:89:8b:71:8f:f4:18:99:c3:47:a7:2f:7b:07:2f:f0:46:90: 06:4f:84:31:be:59:37:d3:c8:6d:16:94:a3:25:e3:f0:a4:0b: f1:3d:af:9d:90:dd:fa:77:a8:62:05:c6:86:c3:60:49:3b:9f: 5c:73:30:30:f3:37:64:8f:96:b9:35:fa:f4:63:92:31:48:bd: 66:08:f6:a9:c7:7f:d7:d6:ea:42:1f:2a:40:de:df:62:d6:96: 56:34:8d:4c:9a:3e:c5:8c:d5:ee:28:eb:e9:ed:10:a0:c2:9c: 31:4d:77:7f:ad:6d:40:17:f8:b3:7e:d9:12:4b:44:6e:d0:33: 8e:1c:bf:f5:2d:f8:04:82:17:2d:a3:4a:02:19:43:c8:00:82: e5:67:9a:8e:a3:21:b9:7b:cd:29:e3:07:2f:7a:87:31:f1:2e: ab:ce:5d:2e:11:7d:67:39:b0:2b:38:88:08:92:48:fc:97:f9: 10:55:6a:c4:6b:01:23:b1:21:11:c4:b0:00:97:b8:1e:43:6d: 13:11:0b:53:b5:a0:0a:5a:e1:a2:17:f4:c3:fa:eb:80:e9:78: 27:70:b4:99 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEkyQ+crs1Uz4/2ofIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ODdmMjMzZWEtMTQzMC00MDMzLTgwODEtMmFjZmM3NDZmYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fjSMstfV2O7Bx8dW4HQKvlL8sYD7uibUU8H 2heNca6tS/zlbnse94kXjavOLr+AwihyQBBlAG7umVoCdkpIKRU9b7Qn7le2juX9 cvPbNny9Y3AKDLhPmqebak8w24/60bR/asIL6mIcUG78YcG9SRxhxS9GlHF3tSc9 mBp7471QB36sbc2akGJad8Qn5KeflulOf559CEs9B6f0q8oK50N8rb//0fQYrQOL dQSlB4tGQlH0/mipCbz3vvOAgCRhT9uYKpEZau8gA7TBlFygMLndZbGVYZjp2ofC 7ccdkORt07yNs2fb/+VjDLeOJ8xU4Sv2PWEJgCSCYmeFQusEewIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFFP2Z8hG01PQl/OBsdcx5Gp+lzGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvMDZhZjFkODItZjJiNS0z MDcwLTllZTctNjk3MjQ0NmM1NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwIYlAME BRiUQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQDBKEwILlTbKLW/zMXFmTTSq/zAna8ImPBo2bw1bIAwWnQB XvOViYtxj/QYmcNHpy97By/wRpAGT4Qxvlk308htFpSjJePwpAvxPa+dkN36d6hi BcaGw2BJO59cczAw8zdkj5a5Nfr0Y5IxSL1mCPapx3/X1upCHypA3t9i1pZWNI1M mj7FjNXuKOvp7RCgwpwxTXd/rW1AF/izftkSS0Ru0DOOHL/1LfgEghcto0oCGUPI AILlZ5qOoyG5e80p4wcveocx8S6rzl0uEX1nObArOIgIkkj8l/kQVWrEawEjsSER xLAAl7geQ20TEQtTtaAKWuGiF/TD+uuA6XgncLSZ -----END CERTIFICATE-----Generated at Tue Apr 8 23:44:07 2025 by rpki-client