$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json) Hash identifier: L5Ct+GkvUXvHOtiNPDJvY0uF84awuzvE2WWZiCAXc/4= Subject key identifier: 5A:FE:25:EE:CD:4C:62:C7:E8:01:74:5A:03:EF:E8:30:5C:A9:12:31 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849B2AF62D9212F8437E2EA6840 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/24 maxlen: 24 158.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:62:d9:21:2f:84:37:e2:ea:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=6a828b1c-0734-4849-8dac-46c90ba7f2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:24:17:5a:69:ea:b9:2f:3f:63:ea:39:51: 2f:51:f3:25:3c:a9:f2:92:7f:fd:2a:cd:e3:1b:44: ae:d2:c9:ce:68:e3:c3:fa:da:ae:0d:5b:fe:b2:9e: 4d:dd:b7:0c:7e:45:67:2b:73:25:d9:4d:21:d9:46: e7:66:0b:a1:ab:4a:46:55:a2:94:4d:23:2f:2f:86: dd:4e:d8:c9:0b:f0:dc:bb:31:de:7c:24:9d:48:45: 6b:39:2b:49:0e:05:8a:f5:14:91:54:e1:07:60:90: 2c:e0:f2:77:ef:9f:fd:15:96:21:dd:10:72:52:2b: 37:02:5d:82:0c:ac:02:b1:0a:3c:4b:a0:d5:5a:f9: 0a:4e:8e:88:5a:82:e4:d6:85:57:9d:f7:8b:0c:7c: e7:91:cb:96:13:48:4e:67:42:8e:e8:79:61:b6:35: 28:38:2f:59:6c:f9:f9:91:c0:00:08:5e:5d:6a:26: 8f:eb:71:02:29:b3:0a:7c:97:8b:70:c4:06:a9:4f: 7a:35:b4:35:47:86:a1:b6:08:87:c6:bd:a1:a1:8c: 9d:8d:c1:c9:21:34:2a:1c:93:02:47:7b:cb:e4:d9: 86:92:19:fc:e2:c5:4a:27:76:c1:62:72:e3:cd:ea: 9d:66:4c:5d:bc:c0:27:3c:cd:4e:af:27:d3:52:84: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FE:25:EE:CD:4C:62:C7:E8:01:74:5A:03:EF:E8:30:5C:A9:12:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9f:2e:63:65:78:a3:c2:3a:4f:78:7c:06:d6:09:cf:c4:8d: 65:b9:d5:8e:5b:e9:31:1a:e9:35:d8:30:40:37:13:a0:58:68: 89:3e:7c:62:b8:8b:1a:3c:f7:2c:a4:ca:8e:cb:bb:b6:9c:a7: cf:8f:a0:79:50:3b:fc:db:70:ee:2f:95:f5:c3:70:cf:63:2b: 5e:cb:27:41:d9:a9:2c:d9:8b:63:cb:a1:e1:48:e0:03:2e:43: ef:7b:a6:43:95:c8:78:94:79:7e:b5:47:da:9f:b6:44:83:3e: b4:d8:7d:65:5e:32:01:14:82:3b:12:f7:85:69:46:b1:b2:80: 1c:67:d6:86:5c:bd:c0:64:1a:e2:93:0a:2b:ea:b1:78:c8:0c: 5b:2c:d2:95:b2:f3:21:bb:18:a5:80:f2:57:82:ba:46:01:a0: ed:83:b9:c2:58:2f:db:d4:f8:07:62:32:89:5a:6f:cf:33:06: 57:b4:e6:cb:59:ef:da:12:9c:f4:76:de:c0:a2:65:95:23:98: 59:cf:12:f8:30:92:8a:3a:a5:47:ad:21:1e:44:b0:b8:60:05: aa:d3:80:ab:a7:24:1c:b2:38:15:f4:91:3e:5f:d4:5c:cb:c4: 28:50:ec:e1:35:76:f3:1f:f3:11:bf:be:50:dc:a3:bb:09:8b: aa:c1:65:3a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmyr2LZIS+EN+LqaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk NmE4MjhiMWMtMDczNC00ODQ5LThkYWMtNDZjOTBiYTdmMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY4kF1pp6rkvP2PqOVEvUfMlPKnykn/9Ks3j G0Su0snOaOPD+tquDVv+sp5N3bcMfkVnK3Ml2U0h2UbnZguhq0pGVaKUTSMvL4bd TtjJC/DcuzHefCSdSEVrOStJDgWK9RSRVOEHYJAs4PJ375/9FZYh3RByUis3Al2C DKwCsQo8S6DVWvkKTo6IWoLk1oVXnfeLDHznkcuWE0hOZ0KO6HlhtjUoOC9ZbPn5 kcAACF5daiaP63ECKbMKfJeLcMQGqU96NbQ1R4ahtgiHxr2hoYydjcHJITQqHJMC R3vL5NmGkhn84sVKJ3bBYnLjzeqdZkxdvMAnPM1OryfTUoQmRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFr+Je7NTGLH6AF0WgPv6DBcqRIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2FlNWFmZDEtNGIyOC0z ODU1LWFlNmItOWJhNzE5MTU4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIqfLmNleKPCOk94fAbWCc/EjWW51Y5b6TEa6TXYMEA3E6BY aIk+fGK4ixo89yykyo7Lu7acp8+PoHlQO/zbcO4vlfXDcM9jK17LJ0HZqSzZi2PL oeFI4AMuQ+97pkOVyHiUeX61R9qftkSDPrTYfWVeMgEUgjsS94VpRrGygBxn1oZc vcBkGuKTCivqsXjIDFss0pWy8yG7GKWA8leCukYBoO2DucJYL9vU+AdiMolab88z Ble05stZ79oSnPR23sCiZZUjmFnPEvgwkoo6pUetIR5EsLhgBarTgKunJByyOBX0 kT5f1FzLxChQ7OE1dvMf8xG/vlDco7sJi6rBZTo= -----END CERTIFICATE-----Generated at Wed May 7 09:04:49 2025 by rpki-client