$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/4137d465-ffcc-358c-bd4e-9ebe80dab2b4.roa File: 4137d465-ffcc-358c-bd4e-9ebe80dab2b4.roa (raw, json) Hash identifier: gHkfmp5ynDxbKLJnZ65q9LmVAB3XTdxqNT0fo+sSBHs= Subject key identifier: D9:A1:E1:C3:95:1E:9E:FD:57:2B:32:42:DA:19:AA:F2:39:B2:FF:80 Certificate issuer: /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Certificate serial: 010D0C9F43285849446929F9C9C8D7BCA0E76280 Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/4137d465-ffcc-358c-bd4e-9ebe80dab2b4.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 6327 IP address blocks: 24.76.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:29:f9:c9:c8:d7:bc:a0:e7:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=ef8d6137-3a8c-4d89-b7d5-f2973b5b5f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:93:e5:fc:ef:5b:14:73:e3:8d:02:33:58: 76:04:ab:24:d9:a2:b2:82:29:82:d4:88:dc:f9:1b: ec:d7:2e:6f:8a:ea:38:ae:23:58:07:31:3c:b2:0f: 22:5a:d2:d6:50:19:a1:97:ed:9b:21:32:5e:f5:3a: cd:48:f7:df:4d:ca:b2:0c:c8:75:72:1b:80:9e:2e: 6e:2a:da:1d:8c:92:66:d3:88:90:ab:aa:47:84:72: 1b:d1:b3:13:26:fb:f2:5a:e3:49:3b:25:76:55:0c: ef:73:61:f3:80:d7:ba:10:2d:a1:25:31:be:a0:b1: b8:ae:21:4a:e8:9c:77:ab:f0:10:d0:f5:35:7f:d0: 58:bf:2b:3d:81:be:1d:a5:c8:27:3e:10:da:47:df: 1e:32:e6:b3:cf:f9:d5:b4:82:96:6d:e2:ad:71:e3: 07:09:b4:3a:8a:3c:3d:5a:4f:0e:6a:4d:b8:85:c4: 12:69:bd:aa:b6:30:60:92:46:18:37:2f:73:89:85: 2a:0f:71:2c:3f:ea:a1:e9:3b:51:46:43:1a:11:82: 33:70:bd:ae:d7:5f:77:9d:53:f8:e4:62:2b:7c:d0: 0e:ad:01:f0:ce:4b:d3:61:76:a3:b7:ae:67:71:d5: 43:af:78:c9:64:67:48:15:5d:52:79:78:df:c7:6f: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:E1:C3:95:1E:9E:FD:57:2B:32:42:DA:19:AA:F2:39:B2:FF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/4137d465-ffcc-358c-bd4e-9ebe80dab2b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl X509v3 Authority Key Identifier: keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer sbgp-ipAddrBlock: critical IPv4: 24.76.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c8:8d:2d:fd:14:26:87:36:13:b5:8c:8e:02:2c:3f:db:6d: 6b:32:55:79:db:b8:25:f2:ea:96:08:86:66:9c:15:56:67:e8: b0:8d:fc:d9:a9:89:62:49:32:2a:b1:d3:02:0b:c1:f0:ec:e6: 44:d4:b2:87:f3:8e:39:a6:f3:62:1d:06:81:b4:1c:79:98:1b: 0f:ac:83:89:f1:3e:e4:8d:9c:88:5a:32:5a:5f:2a:65:a0:bd: 5f:43:3e:f4:e8:85:21:9b:ed:c1:ac:10:11:b5:32:0e:7b:f8: 1a:f2:7b:27:d8:9a:3f:a2:1e:6c:c8:71:e1:ad:99:22:64:f7: 66:fe:4c:97:61:ed:59:61:09:f3:b4:77:fb:40:08:88:56:67: 70:50:1c:1d:c5:e3:1e:b0:92:d7:6f:64:35:17:6d:46:3d:ac: c7:c3:06:18:ed:8e:e5:79:b3:cc:f1:ba:b3:2a:d4:9a:ba:b1: 4d:03:66:47:f7:83:c6:f7:8e:0a:7a:49:fc:0f:97:67:36:a8: 80:39:b8:5f:3b:2d:91:7f:6c:42:58:cc:b7:42:76:17:46:1f: 54:a7:9c:05:da:63:1c:8d:b8:7b:4e:fd:f2:f2:b1:ce:a5:63: ba:59:18:21:2e:a9:d6:01:b2:0b:48:3f:19:0f:5f:28:9f:67: cf:1f:0f:cc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElEaSn5ycjXvKDnYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUwZjA2MTYtNmUwMy00OWRlLWI1ZjgtNGI4NzRlNmQ4 NTM5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZWY4ZDYxMzctM2E4Yy00ZDg5LWI3ZDUtZjI5NzNiNWI1ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbyT5fzvWxRz440CM1h2BKsk2aKygimC1Ijc +Rvs1y5viuo4riNYBzE8sg8iWtLWUBmhl+2bITJe9TrNSPffTcqyDMh1chuAni5u KtodjJJm04iQq6pHhHIb0bMTJvvyWuNJOyV2VQzvc2HzgNe6EC2hJTG+oLG4riFK 6Jx3q/AQ0PU1f9BYvys9gb4dpcgnPhDaR98eMuazz/nVtIKWbeKtceMHCbQ6ijw9 Wk8Oak24hcQSab2qtjBgkkYYNy9ziYUqD3EsP+qh6TtRRkMaEYIzcL2u1193nVP4 5GIrfNAOrQHwzkvTYXajt65ncdVDr3jJZGdIFV1SeXjfx28uGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNmh4cOVHp79VysyQtoZqvI5sv+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBm MDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3NGU2ZDg1MzkvNDEzN2Q0NjUtZmZjYy0z NThjLWJkNGUtOWViZTgwZGFiMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWUwZjA2MTYtNmUwMy00OWRlLWI1 ZjgtNGI4NzRlNmQ4NTM5LzFlMGYwNjE2LTZlMDMtNDlkZS1iNWY4LTRiODc0ZTZk ODUzOS5jcmwwHwYDVR0jBBgwFoAUdntXZLDIEgFgrrbz5LT5tnN6j5gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBmMDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3 NGU2ZDg1MzkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCGEwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJciNLf0UJoc2E7WMjgIsP9ttazJVedu4JfLqlgiGZpwVVmfosI382amJ YkkyKrHTAgvB8OzmRNSyh/OOOabzYh0GgbQceZgbD6yDifE+5I2ciFoyWl8qZaC9 X0M+9OiFIZvtwawQEbUyDnv4GvJ7J9iaP6IebMhx4a2ZImT3Zv5Ml2HtWWEJ87R3 +0AIiFZncFAcHcXjHrCS129kNRdtRj2sx8MGGO2O5XmzzPG6syrUmrqxTQNmR/eD xveOCnpJ/A+XZzaogDm4XzstkX9sQljMt0J2F0YfVKecBdpjHI24e0798vKxzqVj ulkYIS6p1gGyC0g/GQ9fKJ9nzx8PzA== -----END CERTIFICATE-----Generated at Sat Apr 12 11:42:52 2025 by rpki-client