$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: Pm5mer5+cc+oFUQpeXWqom+U/H1nUm+iVuim8Jjgqpc= Subject key identifier: 78:E4:19:9F:FF:FF:90:2C:C4:25:36:E1:D8:99:45:54:69:CC:A0:04 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F432858499829D5BE313A36E0CFB3B480 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d5:be:31:3a:36:e0:cf:b3:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9ca10521-ed52-477d-9aad-4b58407d8237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:e3:c7:5f:af:59:1d:af:44:00:15:2c:83: 09:93:6c:2f:b5:2c:66:db:25:78:30:04:f8:0a:59: a2:7e:d1:9b:5a:27:bf:d7:b6:4f:9f:ac:00:09:9d: 19:e8:4d:ac:3c:de:8d:1c:9c:45:fb:31:05:bf:fb: cb:19:70:03:b0:c3:ea:4f:be:84:a2:00:23:eb:79: e1:e3:88:37:74:bb:f4:6f:21:c3:91:c9:02:f2:b3: 9f:a9:d0:d8:66:00:b4:d9:48:74:d8:88:e1:00:1a: 11:dd:26:0d:a9:03:e6:c6:33:91:ab:89:75:65:c3: 29:94:89:e3:18:b3:08:a2:35:94:25:6e:4b:8f:9e: 0c:20:6c:ba:b8:d1:da:a5:9f:8e:fc:9c:05:b0:dc: ba:7c:d9:96:0a:35:88:d6:e7:a7:97:21:15:cb:81: 9a:94:95:15:7a:22:43:d6:92:ec:40:63:96:c9:ea: c0:cf:5b:ca:8d:77:40:04:76:e7:94:6d:96:c7:ec: 20:33:cb:0e:a9:bc:ba:bc:61:1e:cf:95:35:4e:11: 6e:06:99:2d:e7:42:3f:64:45:f1:51:0d:e8:9f:94: b4:ef:41:66:15:13:25:87:77:ff:43:43:ad:b8:bc: 6c:9c:5b:3f:b8:06:0e:20:74:5c:48:44:57:de:46: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E4:19:9F:FF:FF:90:2C:C4:25:36:E1:D8:99:45:54:69:CC:A0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:05:96:ae:bc:d3:b3:3a:59:5c:a5:72:06:b6:20:86:e1:1f: f5:50:82:5f:fa:d5:70:b6:6f:25:56:fd:32:f5:19:34:9f:10: 17:5b:9f:32:c2:1b:c8:66:98:01:1a:3c:74:86:12:5c:16:76: 0d:16:28:13:8f:16:f8:f9:d3:90:67:27:45:6d:7a:2f:41:9c: 76:3a:53:a2:9d:b3:82:40:d6:d0:6f:d4:9c:3c:e9:73:06:e8: b2:94:07:1b:8b:59:46:fd:bb:d9:d1:bf:38:49:82:ca:1f:31: 8f:ff:cc:b0:9f:7a:24:aa:4b:59:f3:a9:1b:61:b3:6e:19:2e: c9:00:d9:f8:8b:4c:73:73:1c:ae:39:37:27:bb:12:f1:aa:89: a9:04:3a:24:bf:10:86:0f:9f:ac:61:fa:61:3a:81:bf:8a:81: c1:17:82:a5:1f:47:03:a4:71:ed:8f:a5:ed:99:c3:3d:97:09: 00:00:db:c5:c4:60:fc:ea:f9:10:8b:2c:be:e3:d4:48:da:e9: ee:71:b6:34:dc:85:e3:3d:fe:7f:da:fc:04:74:a1:a4:39:7e: bc:c7:9c:95:a8:4a:c4:3f:0f:22:a0:68:da:aa:fa:e3:79:5c: 81:74:bc:b6:47:b6:e6:92:e5:b4:db:3d:09:10:bc:ca:2d:78: 15:e0:9c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdW+MTo24M+ztIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OWNhMTA1MjEtZWQ1Mi00NzdkLTlhYWQtNGI1ODQwN2Q4MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarjx1+vWR2vRAAVLIMJk2wvtSxm2yV4MAT4 ClmiftGbWie/17ZPn6wACZ0Z6E2sPN6NHJxF+zEFv/vLGXADsMPqT76EogAj63nh 44g3dLv0byHDkckC8rOfqdDYZgC02Uh02IjhABoR3SYNqQPmxjORq4l1ZcMplInj GLMIojWUJW5Lj54MIGy6uNHapZ+O/JwFsNy6fNmWCjWI1uenlyEVy4GalJUVeiJD 1pLsQGOWyerAz1vKjXdABHbnlG2Wx+wgM8sOqby6vGEez5U1ThFuBpkt50I/ZEXx UQ3on5S070FmFRMlh3f/Q0OtuLxsnFs/uAYOIHRcSERX3kZPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjkGZ///5AsxCU24diZRVRpzKAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAFlq6807M6WVylcga2IIbhH/VQgl/61XC2byVW/TL1GTSfEBdbnzLC G8hmmAEaPHSGElwWdg0WKBOPFvj505BnJ0Vtei9BnHY6U6Kds4JA1tBv1Jw86XMG 6LKUBxuLWUb9u9nRvzhJgsofMY//zLCfeiSqS1nzqRths24ZLskA2fiLTHNzHK45 Nye7EvGqiakEOiS/EIYPn6xh+mE6gb+KgcEXgqUfRwOkce2Ppe2Zwz2XCQAA28XE YPzq+RCLLL7j1Eja6e5xtjTcheM9/n/a/AR0oaQ5frzHnJWoSsQ/DyKgaNqq+uN5 XIF0vLZHtuaS5bTbPQkQvMoteBXgnEI= -----END CERTIFICATE-----Generated at Sun May 11 01:33:13 2025 by rpki-client