$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa File: daa2fabc-9c56-318e-90b1-cadec688c590.roa (raw, json) Hash identifier: riNcUC38I02cQM4vAjPRxo0WppRGeeEFgOor6pbbSnI= Subject key identifier: DC:9B:EC:51:6E:39:88:DD:57:0B:3C:82:91:48:2E:3B:28:22:F4:0C Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285848DA70FDBBE98BC069A1151CC0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 5645 IP address blocks: 24.246.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fd:bb:e9:8b:c0:69:a1:15:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=d60eed10-a58f-4fdd-a487-2e80eda7485c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:43:e9:c8:53:b9:80:f7:d1:88:f9:14:59: de:5a:8e:d2:77:f0:50:53:55:37:8b:44:71:19:ee: 94:7a:23:db:60:44:55:9a:98:81:16:6d:7c:5c:65: 99:52:c5:72:bb:ad:c1:de:8c:f8:38:49:ef:46:55: bf:f9:0b:8d:b1:0a:d9:cb:5d:55:b3:fa:ef:cd:75: 63:df:b5:be:b1:06:ac:0f:44:c6:82:33:2e:e2:fd: 75:e0:d6:dc:64:24:18:3b:29:78:e7:49:b0:69:34: a8:8a:0e:90:d8:44:7b:2f:b4:b7:cb:77:2a:f7:90: ce:df:6e:95:0c:73:8d:89:59:cf:8b:f0:63:11:92: 66:cb:6c:a3:62:1f:b7:35:d1:7d:1a:f0:d4:d5:22: a9:62:49:bf:9b:a9:dd:df:ea:40:75:91:7f:2b:75: 0a:db:8d:6c:a3:4d:ea:64:5f:57:e6:61:44:df:a9: d0:0b:11:8b:30:48:99:cc:63:c9:7d:a6:bd:b1:99: ea:36:27:b9:f2:39:1d:9e:a8:56:8d:c0:6e:d7:2d: a9:f4:a9:c4:fb:1b:6d:cd:75:fd:f7:b8:b5:e3:12: 51:be:1f:82:a1:14:7e:90:c1:ef:fb:db:9c:f2:fa: 7a:a6:20:b9:60:b5:b4:bd:b0:56:3d:46:05:f3:56: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:EC:51:6E:39:88:DD:57:0B:3C:82:91:48:2E:3B:28:22:F4:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/daa2fabc-9c56-318e-90b1-cadec688c590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.246.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:17:85:cc:61:cd:eb:9f:76:4b:99:44:c3:ef:5d:02:b7:50: af:55:77:f5:a5:8e:58:b5:5d:bf:95:37:d5:ed:9e:cf:ff:4d: 7f:97:8b:df:a3:31:91:25:7a:33:51:30:d2:f3:05:4a:03:e6: dd:d0:58:82:a6:64:2d:b6:c8:8a:73:fc:46:4e:b9:c3:3e:31: 3f:80:e4:9d:0c:01:f5:ae:3c:1a:45:a7:32:9c:21:9e:ce:9b: 90:38:e6:94:50:f9:87:76:2d:2d:9a:f6:64:38:63:a7:60:12: 5f:8e:8d:58:b9:dc:7a:0b:43:96:45:96:40:d0:dd:0e:15:ac: 10:76:d9:41:54:d0:05:ff:e2:48:54:45:e9:8c:ec:9b:86:b0: 87:1c:e0:be:68:f7:b5:2d:e2:ed:ed:78:79:cb:20:b7:1f:16: ac:fe:b6:61:e2:36:5a:de:75:a5:4f:ee:8b:ad:d6:e4:cf:dd: 73:bd:9b:a3:ec:ec:27:98:22:da:1f:2d:c0:17:23:d2:21:de: 1e:30:b5:7a:c0:af:14:a0:94:3b:08:15:a7:9d:72:68:08:66: b5:d7:c8:e2:d9:e6:eb:b7:49:01:3c:9a:3e:9b:f5:53:79:7c: cb:d3:99:e3:1e:1e:d7:b1:77:ef:a9:f6:5e:68:d2:87:2e:ab: 8c:b4:76:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacP276YvAaaEVHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDYwZWVkMTAtYTU4Zi00ZmRkLWE0ODctMmU4MGVkYTc0ODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi05D6chTuYD30Yj5FFneWo7Sd/BQU1U3i0Rx Ge6UeiPbYERVmpiBFm18XGWZUsVyu63B3oz4OEnvRlW/+QuNsQrZy11Vs/rvzXVj 37W+sQasD0TGgjMu4v114NbcZCQYOyl450mwaTSoig6Q2ER7L7S3y3cq95DO326V DHONiVnPi/BjEZJmy2yjYh+3NdF9GvDU1SKpYkm/m6nd3+pAdZF/K3UK241so03q ZF9X5mFE36nQCxGLMEiZzGPJfaa9sZnqNie58jkdnqhWjcBu1y2p9KnE+xttzXX9 97i14xJRvh+CoRR+kMHv+9uc8vp6piC5YLW0vbBWPUYF81bX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyb7FFuOYjdVws8gpFILjsoIvQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZGFhMmZhYmMtOWM1Ni0z MThlLTkwYjEtY2FkZWM2ODhjNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGPYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYXhcxhzeufdkuZRMPvXQK3UK9Vd/Wljli1Xb+VN9Xtns//TX+Xi9+j MZElejNRMNLzBUoD5t3QWIKmZC22yIpz/EZOucM+MT+A5J0MAfWuPBpFpzKcIZ7O m5A45pRQ+Yd2LS2a9mQ4Y6dgEl+OjVi53HoLQ5ZFlkDQ3Q4VrBB22UFU0AX/4khU RemM7JuGsIcc4L5o97Ut4u3teHnLILcfFqz+tmHiNlredaVP7out1uTP3XO9m6Ps 7CeYItofLcAXI9Ih3h4wtXrArxSglDsIFaedcmgIZrXXyOLZ5uu3SQE8mj6b9VN5 fMvTmeMeHtexd++p9l5o0ocuq4y0dlQ= -----END CERTIFICATE-----Generated at Sat Apr 12 10:25:00 2025 by rpki-client