$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fac667f-9af9-380f-a312-c7ad98feb9f4.roa File: 8fac667f-9af9-380f-a312-c7ad98feb9f4.roa (raw, json) Hash identifier: nM8g+SEQyIVRLoYmXoBfpOkRd0Y4pWusQDsSA26qa3Q= Subject key identifier: 49:81:45:6E:B0:0C:5B:9C:C7:1F:E0:2C:93:F5:64:7A:71:F2:BC:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992948A4726153AD6894FD380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fac667f-9af9-380f-a312-c7ad98feb9f4.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33651 IP address blocks: 24.23.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:8a:47:26:15:3a:d6:89:4f:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=39a02b75-8171-4a3b-b356-67e9099d5b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:ac:83:e3:19:eb:f3:a5:61:51:80:94:5d: b9:a7:be:9f:2c:ec:cf:c3:58:f8:a7:4f:ce:90:b3: 37:98:a5:60:db:fd:c9:0b:82:4b:c1:59:4a:d4:3c: 16:38:78:f8:dd:8a:de:b4:2f:81:ad:3f:a0:34:c7: 6d:4a:44:30:26:e9:92:93:b7:42:97:9e:e8:6b:3e: a0:05:14:57:e5:75:8b:59:22:d4:ba:ae:4c:3f:94: ea:42:f4:4e:ce:7e:15:28:23:c5:ce:13:ad:5b:0e: ec:38:91:7f:83:2b:96:c0:c9:31:a5:d9:ef:5b:28: f2:14:61:13:11:42:01:c2:23:fa:06:47:4c:50:5d: 12:fe:bd:6d:05:41:f8:c2:0f:e7:07:53:54:92:b4: ea:4c:1b:91:fc:bc:46:88:5c:19:05:d9:fb:33:e9: c9:2a:49:a2:1c:b3:a9:66:7b:41:af:7e:c1:3e:a1: bb:f3:c5:41:6e:06:94:df:62:c6:bd:a4:0b:19:9a: e0:f4:69:f2:59:ca:78:97:8b:f2:ab:ab:e1:07:2c: a9:ed:3d:bd:f8:bd:0c:ca:8c:39:b0:04:1f:ab:2c: 0e:32:a4:14:54:b2:8f:7c:e0:e3:29:77:d1:39:07: 5f:d4:ab:74:a1:9b:c4:1d:8e:c1:54:c8:03:57:22: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:81:45:6E:B0:0C:5B:9C:C7:1F:E0:2C:93:F5:64:7A:71:F2:BC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fac667f-9af9-380f-a312-c7ad98feb9f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.23.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bb:5e:9e:9b:5d:f7:89:10:b3:2f:e0:d1:e9:53:95:0c:0e: 59:17:3a:f3:fb:4e:ad:78:92:0b:d3:63:46:69:8f:03:bb:95: 5b:c2:2f:f9:ee:78:3a:5b:c6:0f:1d:28:93:bf:af:fa:8e:b0: d1:ea:ad:11:6d:52:66:16:09:61:95:b9:ef:ee:ff:72:02:a2: 1b:df:f0:fe:bd:1f:24:11:e8:a4:fb:c2:73:01:04:5a:53:d6: e7:e2:ec:4e:51:09:41:d5:94:d6:4e:72:3f:67:51:22:fd:c9: 94:44:6d:b0:f9:03:3c:74:26:25:cf:6b:a2:e3:78:e3:b0:82: c1:4e:5e:4b:6c:55:d2:40:6b:16:71:ae:8d:ea:07:d5:d9:d0: 42:8c:b1:27:d4:b1:e1:67:2a:ee:a2:8e:db:8e:db:33:e5:7c: e6:87:89:8e:b8:2b:14:cb:d3:b3:ac:79:c7:0f:14:ae:60:a2: 56:c8:98:6d:d2:0c:25:01:7a:b8:74:2c:67:f1:1f:33:49:30: 44:f8:68:55:ed:78:64:32:ed:7c:6a:aa:2a:86:31:dd:60:de: 5f:f4:a7:f8:f6:c6:20:cc:cf:cc:5b:b0:4d:69:fd:dd:69:77: 97:24:b9:75:9c:ad:82:36:d0:d8:cd:d3:fa:8e:53:3f:b0:28: 86:46:d3:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIpHJhU61olP04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MzlhMDJiNzUtODE3MS00YTNiLWIzNTYtNjdlOTA5OWQ1YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs2sg+MZ6/OlYVGAlF25p76fLOzPw1j4p0/O kLM3mKVg2/3JC4JLwVlK1DwWOHj43YretC+BrT+gNMdtSkQwJumSk7dCl57oaz6g BRRX5XWLWSLUuq5MP5TqQvROzn4VKCPFzhOtWw7sOJF/gyuWwMkxpdnvWyjyFGET EUIBwiP6BkdMUF0S/r1tBUH4wg/nB1NUkrTqTBuR/LxGiFwZBdn7M+nJKkmiHLOp ZntBr37BPqG788VBbgaU32LGvaQLGZrg9GnyWcp4l4vyq6vhByyp7T29+L0Myow5 sAQfqywOMqQUVLKPfODjKXfROQdf1Kt0oZvEHY7BVMgDVyJTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmBRW6wDFucxx/gLJP1ZHpx8rwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGZhYzY2N2YtOWFmOS0z ODBmLWEzMTItYzdhZDk4ZmViOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG7Xp6bXfeJELMv4NHpU5UMDlkXOvP7Tq14kgvTY0ZpjwO7lVvCL/nu eDpbxg8dKJO/r/qOsNHqrRFtUmYWCWGVue/u/3ICohvf8P69HyQR6KT7wnMBBFpT 1ufi7E5RCUHVlNZOcj9nUSL9yZREbbD5Azx0JiXPa6LjeOOwgsFOXktsVdJAaxZx ro3qB9XZ0EKMsSfUseFnKu6ijtuO2zPlfOaHiY64KxTL07OseccPFK5golbImG3S DCUBerh0LGfxHzNJMET4aFXteGQy7XxqqiqGMd1g3l/0p/j2xiDMz8xbsE1p/d1p d5ckuXWcrYI20NjN0/qOUz+wKIZG04U= -----END CERTIFICATE-----Generated at Sun Apr 27 11:41:53 2025 by rpki-client