$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be9e086c-b884-3f26-9017-d5b28e43ca3e.roa File: be9e086c-b884-3f26-9017-d5b28e43ca3e.roa (raw, json) Hash identifier: 2ylpVmu4Kq3/DDVKngT2TTo8s4z7SpseOI9QqAV8ASI= Subject key identifier: 51:7B:69:02:18:B0:4F:15:00:CD:28:A5:3D:03:C2:CC:53:F2:68:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5292B4D93BEEDB2123940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be9e086c-b884-3f26-9017-d5b28e43ca3e.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 24.118.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:29:2b:4d:93:be:ed:b2:12:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5e23412f-2cd6-4ebd-81e0-5155b7918659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:b7:a6:af:b0:1c:83:35:7c:a8:8d:2c:5d: 64:f4:40:4a:16:18:8c:5e:c0:ed:fb:50:ec:1b:0d: 0b:f7:7c:39:5f:0e:00:f2:ec:88:60:17:33:8e:d1: 51:2f:bf:94:c8:d3:43:23:7d:f9:5c:d7:d4:ee:9a: 18:79:b2:f7:ea:87:95:09:13:91:92:02:1b:f6:66: b7:a8:78:8a:e2:b3:dd:be:a6:f3:e7:08:ca:34:bb: 0e:f6:8d:9e:b1:03:aa:db:ed:74:6c:b6:51:60:d0: 1a:60:b6:db:7d:7b:8a:bc:fd:70:19:f1:14:20:8a: 01:15:a0:f9:60:47:26:d6:32:47:e0:64:b0:cd:63: 37:35:71:a5:77:63:4f:cd:f5:96:2c:38:cb:89:6e: 22:63:e1:ef:b2:35:24:ef:c1:7e:f6:c3:87:87:a2: c6:93:2f:fc:f2:63:e1:2a:8b:8a:dd:28:06:ec:f2: 97:f9:67:b7:f9:80:f9:a4:51:0e:c9:e3:ef:bb:db: ec:96:1a:86:33:58:30:fa:dc:ba:69:bb:0a:52:22: ac:22:ec:3f:97:b1:89:a0:9c:31:24:ce:fd:1d:41: 5b:21:56:b2:79:a8:6b:ee:98:3f:bc:79:10:2c:14: 81:06:62:84:9f:0e:86:1d:62:0e:22:8f:b1:20:48: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:69:02:18:B0:4F:15:00:CD:28:A5:3D:03:C2:CC:53:F2:68:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be9e086c-b884-3f26-9017-d5b28e43ca3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:e1:78:4e:df:25:02:46:60:fa:81:92:ca:99:9b:76:e0:9a: 68:a1:07:e4:3b:ee:3e:62:b6:8f:29:5c:fc:d8:92:b5:d6:96: 75:25:39:6b:88:6e:7d:d3:87:9c:39:c4:8f:37:a5:06:9e:c5: 93:1f:92:da:b2:0d:f4:78:58:ae:0f:6a:bf:b2:21:09:80:dc: 4d:90:4f:f9:cb:9d:29:8c:66:f9:ce:48:00:5c:53:30:50:c5: 33:a6:27:08:57:4a:41:77:c0:d9:f5:ee:10:aa:02:c2:c4:79: 90:49:66:cd:10:01:50:cd:81:39:21:58:e8:83:91:0f:14:f1: e9:5c:ba:75:bb:2f:08:36:2b:04:e4:9e:b7:9c:64:f0:89:f1: 1f:42:31:b0:ad:2b:18:8c:ca:5d:3a:1c:c4:cc:5e:89:15:08: e7:4f:64:62:c4:05:6c:e7:a7:81:75:1c:26:9e:10:29:42:ac: f0:92:a9:66:f0:9d:cb:92:46:71:2f:9a:eb:c6:fb:47:ca:ff: c8:6f:e8:bb:05:22:6f:3f:74:b2:52:7d:09:65:d2:f6:1a:02: 21:ac:bd:a3:90:63:f1:7e:69:fb:aa:eb:e5:a6:e0:3e:ac:8e: e1:2f:71:b5:92:87:c0:67:d9:0e:63:5a:86:f9:92:2e:d2:94: 4c:b9:fe:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pSkrTZO+7bISOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWUyMzQxMmYtMmNkNi00ZWJkLTgxZTAtNTE1NWI3OTE4NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsve3pq+wHIM1fKiNLF1k9EBKFhiMXsDt+1Ds Gw0L93w5Xw4A8uyIYBczjtFRL7+UyNNDI335XNfU7poYebL36oeVCRORkgIb9ma3 qHiK4rPdvqbz5wjKNLsO9o2esQOq2+10bLZRYNAaYLbbfXuKvP1wGfEUIIoBFaD5 YEcm1jJH4GSwzWM3NXGld2NPzfWWLDjLiW4iY+HvsjUk78F+9sOHh6LGky/88mPh KouK3SgG7PKX+We3+YD5pFEOyePvu9vslhqGM1gw+ty6absKUiKsIuw/l7GJoJwx JM79HUFbIVayeahr7pg/vHkQLBSBBmKEnw6GHWIOIo+xIEg6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF7aQIYsE8VAM0opT0DwsxT8mi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU5ZTA4NmMtYjg4NC0z ZjI2LTkwMTctZDViMjhlNDNjYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPheE7fJQJGYPqBksqZm3bgmmihB+Q77j5ito8pXPzYkrXWlnUlOWuI bn3Th5w5xI83pQaexZMfktqyDfR4WK4Par+yIQmA3E2QT/nLnSmMZvnOSABcUzBQ xTOmJwhXSkF3wNn17hCqAsLEeZBJZs0QAVDNgTkhWOiDkQ8U8elcunW7Lwg2KwTk nrecZPCJ8R9CMbCtKxiMyl06HMTMXokVCOdPZGLEBWznp4F1HCaeEClCrPCSqWbw ncuSRnEvmuvG+0fK/8hv6LsFIm8/dLJSfQll0vYaAiGsvaOQY/F+afuq6+Wm4D6s juEvcbWSh8Bn2Q5jWob5ki7SlEy5/hA= -----END CERTIFICATE-----Generated at Sun Apr 27 23:06:17 2025 by rpki-client