$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7caa4bab-53f4-3e32-b0f8-2780afdb9f02.roa File: 7caa4bab-53f4-3e32-b0f8-2780afdb9f02.roa (raw, json) Hash identifier: YX0eO2DzEnoN4EKXBYRFsJi8ayH0OM9b1alIOA+na0k= Subject key identifier: 1F:AD:2D:01:6C:A0:65:7C:82:40:61:D3:51:D4:2C:B9:7E:91:DC:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C2665F6BD38F162F7EC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7caa4bab-53f4-3e32-b0f8-2780afdb9f02.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 24.98.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:26:65:f6:bd:38:f1:62:f7:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=a6407f43-374e-4d61-a490-29c4e96cece2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:f1:aa:c6:18:50:ee:74:aa:00:02:cb:2c: d5:e3:33:f2:c1:df:65:d3:26:36:df:23:f3:5a:66: 35:8f:4b:99:83:68:28:0d:4b:6c:7a:6e:a8:df:60: c4:a4:39:08:05:59:0b:ec:05:a1:56:1a:32:0d:ce: 85:82:a7:9c:44:84:41:6f:e8:89:ab:8e:a8:bb:8a: 50:b3:0d:b5:d0:39:ce:b0:a3:98:b4:34:30:91:32: d2:a0:9a:ca:95:8b:76:bd:27:ed:f9:ce:6a:a3:1e: fc:45:4f:4e:f4:86:fe:62:e3:86:e8:fe:3e:10:e2: 96:85:86:88:a7:84:45:0c:e7:b3:3c:85:fe:64:53: f7:1f:5a:01:6a:9a:92:0b:63:25:1d:65:1d:80:be: 7d:b5:cc:80:83:6f:f7:57:f3:a8:c8:a4:39:ee:9c: 75:6a:bb:19:45:95:ae:2e:cb:2f:92:5d:1f:42:10: 6d:02:84:d9:ee:37:7d:2f:da:fa:3e:fd:03:6e:52: 99:60:86:d9:ff:1a:9b:67:5c:00:00:34:10:04:ee: 46:18:40:0c:a8:18:80:4f:0c:57:3f:1d:79:03:c5: d5:af:06:fc:ad:a7:63:be:f4:6a:f2:c9:cb:da:b3: 55:e4:59:fc:63:f9:c5:44:8f:fe:0e:91:b6:12:04: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AD:2D:01:6C:A0:65:7C:82:40:61:D3:51:D4:2C:B9:7E:91:DC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7caa4bab-53f4-3e32-b0f8-2780afdb9f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.98.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:91:ef:ba:25:ee:65:d9:b9:4e:42:7d:00:0e:3e:de:ec:b9: 42:2c:41:71:52:87:ac:a1:5a:8e:12:94:f5:b2:b1:56:42:99: 32:57:87:cc:c0:1e:1e:65:97:8c:9e:63:fd:2b:2a:15:86:64: c5:64:96:92:11:5f:96:eb:e2:a1:b4:39:93:36:cc:35:f5:08: 82:d4:6a:7f:a7:48:a6:a9:8f:04:be:1d:3c:1b:de:05:5a:a4: 1b:9f:36:c4:73:12:d7:1d:8d:c4:75:7b:0d:7b:05:bc:31:55: bf:41:35:fe:69:4b:a9:6e:5e:4a:17:4e:17:b8:da:03:87:c8: 63:45:bd:60:45:fb:b2:1a:80:b3:89:7b:9d:8a:9b:19:07:d8: 48:0e:33:34:e8:25:b7:40:85:ed:3d:4f:5a:65:d5:62:13:81: c1:b0:75:c2:ee:f0:56:ea:6f:6c:bc:c7:f4:b2:15:3c:41:57: a9:bc:bd:ae:a7:84:d5:d6:e9:f7:2b:be:6f:dc:1f:98:c2:3e: bf:70:db:d9:2a:6e:97:ad:97:37:05:a0:78:b7:b1:a8:8b:90: 6f:f3:9b:00:39:cc:23:1a:fc:07:36:23:cf:22:78:1f:b8:89: 1d:1c:2d:f6:2b:7b:7f:ca:d5:5e:27:c9:f4:c6:b0:e6:2e:be: c2:85:61:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPCZl9r048WL37AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YTY0MDdmNDMtMzc0ZS00ZDYxLWE0OTAtMjljNGU5NmNlY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlzxqsYYUO50qgACyyzV4zPywd9l0yY23yPz WmY1j0uZg2goDUtsem6o32DEpDkIBVkL7AWhVhoyDc6FgqecRIRBb+iJq46ou4pQ sw210DnOsKOYtDQwkTLSoJrKlYt2vSft+c5qox78RU9O9Ib+YuOG6P4+EOKWhYaI p4RFDOezPIX+ZFP3H1oBapqSC2MlHWUdgL59tcyAg2/3V/OoyKQ57px1arsZRZWu Lssvkl0fQhBtAoTZ7jd9L9r6Pv0DblKZYIbZ/xqbZ1wAADQQBO5GGEAMqBiATwxX Px15A8XVrwb8radjvvRq8snL2rNV5Fn8Y/nFRI/+DpG2EgTZ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+tLQFsoGV8gkBh01HULLl+kdxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2NhYTRiYWItNTNmNC0z ZTMyLWIwZjgtMjc4MGFmZGI5ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGKVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2R77ol7mXZuU5CfQAOPt7suUIsQXFSh6yhWo4SlPWysVZCmTJXh8zA Hh5ll4yeY/0rKhWGZMVklpIRX5br4qG0OZM2zDX1CILUan+nSKapjwS+HTwb3gVa pBufNsRzEtcdjcR1ew17BbwxVb9BNf5pS6luXkoXThe42gOHyGNFvWBF+7IagLOJ e52KmxkH2EgOMzToJbdAhe09T1pl1WITgcGwdcLu8Fbqb2y8x/SyFTxBV6m8va6n hNXW6fcrvm/cH5jCPr9w29kqbpetlzcFoHi3saiLkG/zmwA5zCMa/Ac2I88ieB+4 iR0cLfYre3/K1V4nyfTGsOYuvsKFYYo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:55:52 2025 by rpki-client