$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa File: c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa (raw, json) Hash identifier: 2GAdd0VnM4x410gg81zk5HZ+H8Qep51Ai6wNDix/weo= Subject key identifier: CD:40:CB:EE:4A:E6:81:7B:6F:09:29:02:78:04:D8:0E:D9:A7:88:91 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F432858494469369712457F513E054CC0 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 13807 IP address blocks: 24.72.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:36:97:12:45:7f:51:3e:05:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=56899df2-fd56-4021-b9ab-0b1770c34ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:4a:87:3a:a1:50:5e:6a:74:ae:3b:9f:01: d4:ad:b1:c6:ca:f0:d5:55:9f:8f:64:1e:ac:e7:81: 98:a2:76:91:56:87:63:cd:7c:5c:58:88:6c:d0:28: a9:28:a5:36:03:f5:5b:f1:88:e1:3e:15:75:92:f4: ed:64:1e:2e:2c:e0:4c:59:22:8f:0b:78:1a:64:09: e8:da:39:89:98:05:14:8f:24:85:2a:08:93:15:3b: c2:22:9e:ed:02:80:1d:82:9e:b8:cf:20:16:3e:c3: 99:06:02:91:70:7c:12:94:db:13:99:2f:3c:c2:b6: 2b:98:b8:b6:91:bf:00:1c:7a:16:8d:30:c0:eb:76: dc:18:f3:7c:8a:33:47:4d:f3:43:97:91:7d:51:d1: d2:9c:72:78:a6:ce:ff:ca:5d:b3:d8:e3:b3:96:10: a9:b7:27:96:b4:f2:54:f5:b9:4c:26:24:21:58:bb: f5:6f:2c:ce:82:74:89:f8:51:de:dc:09:2b:d7:00: b4:a7:61:d0:ae:60:84:3b:e9:7e:07:0b:1d:08:70: a4:b5:47:1c:44:e7:09:b9:d3:c9:ff:a6:a5:77:be: 36:52:7c:0b:ca:76:02:d7:6d:da:d5:30:03:94:0b: 2b:e4:42:f8:44:d4:0a:94:ca:87:e7:15:eb:03:1f: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:40:CB:EE:4A:E6:81:7B:6F:09:29:02:78:04:D8:0E:D9:A7:88:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.72.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e8:a1:d5:d1:de:1c:f8:b8:84:04:a7:b7:1c:11:02:90:44: c2:c3:27:65:ca:17:fa:00:ab:ed:36:cc:ac:cd:79:e9:22:c7: 50:98:44:41:d4:1a:fa:a0:62:aa:83:a6:f8:6b:52:de:b4:b9: 7f:e3:c2:9b:5f:ca:b9:72:37:21:43:a4:90:1f:43:91:4b:f8: 26:5d:a8:87:84:f8:c9:1f:8d:6d:88:6e:54:16:fd:78:76:94: a7:d3:13:40:18:0d:3d:cb:f1:fe:bf:a0:07:76:89:23:f9:40: e6:5e:3d:f2:fd:00:19:61:e5:5e:2d:65:52:e2:39:ba:dc:0f: 2f:84:bc:93:50:8b:80:e6:9d:c9:96:e5:7e:8f:a9:d2:97:21: ae:fd:ce:b3:62:3b:19:e8:b9:10:bb:7e:09:68:96:51:78:c4: a6:31:63:54:e8:bb:0f:2b:40:8c:9e:0d:64:13:26:44:f3:7b: d3:c9:61:bd:d1:62:bd:4e:8b:d1:d6:02:eb:a3:64:4c:4e:ca: 82:5c:52:4b:8b:7b:7b:bb:aa:5e:7c:54:3a:c6:be:cf:4a:b5: d6:db:d0:a2:03:fd:c4:cb:81:48:cd:cb:52:5b:6f:03:cb:e4: fd:27:b1:8a:d5:19:ba:63:24:e1:fd:88:f8:aa:0f:f8:83:e7: 49:a4:0c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTaXEkV/UT4FTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NTY4OTlkZjItZmQ1Ni00MDIxLWI5YWItMGIxNzcwYzM0Y2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4pKhzqhUF5qdK47nwHUrbHGyvDVVZ+PZB6s 54GYonaRVodjzXxcWIhs0CipKKU2A/Vb8YjhPhV1kvTtZB4uLOBMWSKPC3gaZAno 2jmJmAUUjySFKgiTFTvCIp7tAoAdgp64zyAWPsOZBgKRcHwSlNsTmS88wrYrmLi2 kb8AHHoWjTDA63bcGPN8ijNHTfNDl5F9UdHSnHJ4ps7/yl2z2OOzlhCptyeWtPJU 9blMJiQhWLv1byzOgnSJ+FHe3Akr1wC0p2HQrmCEO+l+BwsdCHCktUccROcJudPJ /6ald742UnwLynYC123a1TADlAsr5EL4RNQKlMqH5xXrAx8JhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Ay+5K5oF7bwkpAngE2A7Zp4iRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYzFiYzAwMjMtMWJhMC0z MTY3LWEyZTItOGI5ZjRjODBjMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGEjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGroodXR3hz4uIQEp7ccEQKQRMLDJ2XKF/oAq+02zKzNeekix1CYREHU GvqgYqqDpvhrUt60uX/jwptfyrlyNyFDpJAfQ5FL+CZdqIeE+MkfjW2IblQW/Xh2 lKfTE0AYDT3L8f6/oAd2iSP5QOZePfL9ABlh5V4tZVLiObrcDy+EvJNQi4DmncmW 5X6PqdKXIa79zrNiOxnouRC7fglollF4xKYxY1Touw8rQIyeDWQTJkTze9PJYb3R Yr1Oi9HWAuujZExOyoJcUkuLe3u7ql58VDrGvs9Ktdbb0KID/cTLgUjNy1JbbwPL 5P0nsYrVGbpjJOH9iPiqD/iD50mkDGY= -----END CERTIFICATE-----Generated at Sat Apr 12 00:04:16 2025 by rpki-client