$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa File: 8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa (raw, json) Hash identifier: 2Jjxz3lx8QZ/T4bhnGWYXuyF7qHQlHKqdzDprMfPGWY= Subject key identifier: 72:87:6A:14:0F:C8:78:4E:C3:1B:DB:C7:61:19:40:4D:BA:C5:D6:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF2FF8F18F0DD5DD221980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 24.13.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:2f:f8:f1:8f:0d:d5:dd:22:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=6a0b0bdc-457c-442b-8b27-9b7b12e3a067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:fb:7a:11:b4:1e:e9:f8:61:85:54:bf:46: 30:e9:b9:1a:67:c8:68:f7:78:54:42:df:45:82:ef: b8:6f:01:9e:8a:7e:46:fa:da:ef:33:09:7c:26:86: a6:c2:ea:c5:8f:ec:67:2e:09:3a:ac:df:5e:63:90: aa:c3:a5:47:22:22:8e:b1:85:dc:57:ed:24:80:2d: dd:90:3d:af:a7:be:24:8b:ff:f2:30:44:46:f9:d1: 38:75:c5:b3:61:eb:e4:df:60:1d:42:1a:9b:0f:41: 85:64:33:fb:97:4f:24:c1:c3:08:9b:50:1c:0d:c9: 47:3d:0d:c1:37:26:1b:72:4d:1a:ac:bb:e4:27:fb: bd:36:b1:ec:bb:29:7c:fa:93:41:5b:7c:9d:8d:0c: 28:30:e4:84:9f:28:54:b6:d4:3d:77:75:0a:e5:2b: f0:27:ce:41:8e:31:84:de:6f:46:6d:62:35:3a:fe: 73:13:c7:0a:54:f5:d0:8d:55:70:66:76:eb:6a:c3: 6b:fc:e3:c5:a3:ef:95:10:fa:c8:54:8c:ea:57:16: ae:55:b6:5b:f3:a9:ad:e4:6d:70:7c:5c:49:16:66: 13:cd:ce:ec:33:44:d3:54:6f:c8:3c:48:98:5b:ed: 5c:cb:7a:a4:9b:c2:a3:80:27:46:ec:53:8e:52:01: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:87:6A:14:0F:C8:78:4E:C3:1B:DB:C7:61:19:40:4D:BA:C5:D6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.13.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cf:f3:fe:7b:5e:55:2a:72:c5:e2:65:cf:9f:50:10:f2:12: 35:25:f7:c9:8b:81:23:bf:49:26:d5:0d:ed:e6:d2:7d:d1:3b: f0:3b:8d:7a:88:4f:a2:b5:df:a8:53:9c:7c:a0:f8:1e:29:f8: 00:83:dc:41:d2:b3:99:b0:3d:da:a1:ce:22:c0:5e:b3:26:56: c7:f5:b5:20:45:db:98:e6:07:98:1e:49:f4:cc:65:4a:2a:a6: 39:63:1b:6d:a8:68:ba:5a:80:fe:80:4e:8d:f2:46:94:18:0c: 5b:17:4b:1e:d1:fb:0b:00:02:96:00:e5:9c:af:bd:4b:ff:ad: f7:e3:da:c7:3f:2a:ce:38:17:5f:04:04:62:8e:67:aa:cc:a6: 49:d2:e8:8b:6a:20:ba:eb:4b:39:9f:9a:d8:04:1d:c6:6d:08: 4c:45:a6:18:ea:be:5d:0d:3c:7a:e8:ef:39:c4:89:d9:93:dd: 97:24:9b:60:a1:a5:6e:07:43:56:79:e6:18:d3:5c:65:c5:62: 6e:11:4e:bd:00:f5:97:f8:69:cf:c2:58:22:50:9e:6f:61:a8: f1:77:86:7d:eb:3e:ce:48:40:e8:c8:3c:c1:16:e8:33:09:20: b4:4f:73:ae:99:24:4f:fb:c0:77:f9:87:a2:4b:80:a5:89:e7: f4:af:20:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksry/48Y8N1d0iGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NmEwYjBiZGMtNDU3Yy00NDJiLThiMjctOWI3YjEyZTNhMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlP7ehG0Hun4YYVUv0Yw6bkaZ8ho93hUQt9F gu+4bwGein5G+trvMwl8JoamwurFj+xnLgk6rN9eY5Cqw6VHIiKOsYXcV+0kgC3d kD2vp74ki//yMERG+dE4dcWzYevk32AdQhqbD0GFZDP7l08kwcMIm1AcDclHPQ3B NyYbck0arLvkJ/u9NrHsuyl8+pNBW3ydjQwoMOSEnyhUttQ9d3UK5SvwJ85BjjGE 3m9GbWI1Ov5zE8cKVPXQjVVwZnbrasNr/OPFo++VEPrIVIzqVxauVbZb86mt5G1w fFxJFmYTzc7sM0TTVG/IPEiYW+1cy3qkm8KjgCdG7FOOUgH2bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKHahQPyHhOwxvbx2EZQE26xdY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ4ZDIyYjktY2Y1Ny0z ZjJmLWE4YTMtYzhlOGVjYjYyNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfP8/57XlUqcsXiZc+fUBDyEjUl98mLgSO/SSbVDe3m0n3RO/A7jXqI T6K136hTnHyg+B4p+ACD3EHSs5mwPdqhziLAXrMmVsf1tSBF25jmB5geSfTMZUoq pjljG22oaLpagP6ATo3yRpQYDFsXSx7R+wsAApYA5ZyvvUv/rffj2sc/Ks44F18E BGKOZ6rMpknS6ItqILrrSzmfmtgEHcZtCExFphjqvl0NPHro7znEidmT3Zckm2Ch pW4HQ1Z55hjTXGXFYm4RTr0A9Zf4ac/CWCJQnm9hqPF3hn3rPs5IQOjIPMEW6DMJ ILRPc66ZJE/7wHf5h6JLgKWJ5/SvIGc= -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:44 2025 by rpki-client