$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa File: bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json) Hash identifier: sOjOG1Lqbej2nsAleeJu9/qXi0ngaYhEinEUND+lFXo= Subject key identifier: 21:96:71:53:60:96:22:FB:31:C3:07:E3:0F:FE:F8:1A:D5:F8:D2:7F Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F43285849BDDA257E600476E49972FCC0 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 33141 IP address blocks: 24.38.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:25:7e:60:04:76:e4:99:72:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=71562f3f-a883-456b-a728-662e4902fa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:bc:b2:a4:4b:4c:33:3f:bf:0d:9f:d2:c1: f2:6f:9b:80:be:fa:d5:a9:78:86:a7:49:cf:01:de: c4:98:7f:e4:e8:c0:49:08:ef:24:52:1d:b0:0f:d5: 19:36:0f:c4:70:1d:b8:09:24:26:5d:db:42:85:ab: b5:b7:cd:58:f1:46:ad:44:e7:98:44:eb:5d:d8:fa: 29:87:e2:7c:ae:c7:ef:e9:06:5f:c8:7f:8c:d1:09: 2b:56:f7:2f:f4:29:ce:c1:6f:41:ee:eb:a4:14:32: 96:4c:8b:70:ad:7e:bd:a5:2d:9b:2d:b7:71:cd:d3: 21:ab:fa:85:c6:9e:0f:8e:fa:8a:6b:0d:26:5a:30: 59:cc:58:e2:86:32:a9:21:fb:00:36:14:7a:1d:8d: 7e:1a:27:b4:23:06:45:b9:3d:1e:f3:9b:7a:48:f5: fa:0f:c1:9f:66:51:5d:5e:d5:86:51:3d:6d:bb:3f: fb:75:a3:11:3f:b5:73:96:81:7b:98:33:7e:47:db: 2f:88:8e:d0:6a:22:22:c5:54:f2:2d:a7:0f:cd:f7: fe:8d:6e:a2:6f:1f:58:3e:1f:38:4e:31:43:96:ef: 86:39:fb:49:e7:fb:ab:c9:5f:9a:2a:80:45:50:99: 1e:20:9a:a4:63:58:ba:95:35:e5:a3:89:a2:e6:7c: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:71:53:60:96:22:FB:31:C3:07:E3:0F:FE:F8:1A:D5:F8:D2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:6b:30:e6:97:9c:01:14:e7:6e:34:53:f2:fd:79:2d:8d:52: 54:7e:a5:3f:50:15:86:0e:03:06:93:c4:3e:62:a1:73:b9:b4: 58:d5:ab:8e:f0:9e:52:c4:8b:09:69:b9:22:78:a9:60:02:25: a6:e9:8d:18:70:ea:98:ea:96:bc:b0:19:f9:3b:d0:82:e5:b6: 23:ce:80:64:c1:23:9b:e4:59:b9:bd:e5:a9:c8:07:bb:d1:e1: ee:03:2c:2c:be:a9:43:6c:8e:fe:2a:bb:9e:9e:54:3b:84:ab: aa:72:5e:7e:01:2f:60:49:01:a2:1c:cd:43:dd:a8:56:2a:ef: be:b0:1d:f1:72:a4:10:59:66:a5:9a:f3:0b:49:de:25:6a:f0: 36:92:c8:64:d5:e4:53:7e:7b:f5:18:93:67:bf:ea:54:ac:d3: 4c:89:da:6f:44:f1:6e:bb:08:83:bc:a6:9c:a8:86:08:67:d9: b1:c9:4a:fd:5c:f7:ae:91:ef:71:69:42:91:93:f9:ee:74:92: 14:91:6c:21:4e:41:81:c6:7c:db:59:3b:98:85:91:e7:2a:cc: 96:2c:86:5b:f8:79:4e:c3:d7:36:34:a4:61:d6:4c:05:0f:a3: 02:4f:2f:43:81:63:87:b5:a9:0c:d5:f5:ca:51:d6:08:72:43: d8:80:25:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iV+YAR25Jly/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NzE1NjJmM2YtYTg4My00NTZiLWE3MjgtNjYyZTQ5MDJmYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKq8sqRLTDM/vw2f0sHyb5uAvvrVqXiGp0nP Ad7EmH/k6MBJCO8kUh2wD9UZNg/EcB24CSQmXdtChau1t81Y8UatROeYROtd2Pop h+J8rsfv6QZfyH+M0QkrVvcv9CnOwW9B7uukFDKWTItwrX69pS2bLbdxzdMhq/qF xp4PjvqKaw0mWjBZzFjihjKpIfsANhR6HY1+Gie0IwZFuT0e85t6SPX6D8GfZlFd XtWGUT1tuz/7daMRP7VzloF7mDN+R9sviI7QaiIixVTyLacPzff+jW6ibx9YPh84 TjFDlu+GOftJ5/uryV+aKoBFUJkeIJqkY1i6lTXlo4mi5nwPDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGWcVNgliL7McMH4w/++BrV+NJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYmIzNDQ4NDktNzZkOC0z NmE4LTgwMWMtYzg1NmUzMDRhM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZrMOaXnAEU5240U/L9eS2NUlR+pT9QFYYOAwaTxD5ioXO5tFjVq47w nlLEiwlpuSJ4qWACJabpjRhw6pjqlrywGfk70ILltiPOgGTBI5vkWbm95anIB7vR 4e4DLCy+qUNsjv4qu56eVDuEq6pyXn4BL2BJAaIczUPdqFYq776wHfFypBBZZqWa 8wtJ3iVq8DaSyGTV5FN+e/UYk2e/6lSs00yJ2m9E8W67CIO8ppyohghn2bHJSv1c 966R73FpQpGT+e50khSRbCFOQYHGfNtZO5iFkecqzJYshlv4eU7D1zY0pGHWTAUP owJPL0OBY4e1qQzV9cpR1ghyQ9iAJRs= -----END CERTIFICATE-----Generated at Sat May 10 11:38:25 2025 by rpki-client