$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7f4bd8b-a11c-3303-86d3-c2f3f1f1d6d0.roa File: c7f4bd8b-a11c-3303-86d3-c2f3f1f1d6d0.roa (raw, json) Hash identifier: 1OqDTdE4Z59utOTfKP62d+vodTrmHTpczl9KeOtsB1E= Subject key identifier: 84:F1:AC:A9:11:E0:BD:92:2F:84:0E:F7:95:A9:71:0D:83:8E:B3:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6AD22BD8037F51F942E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7f4bd8b-a11c-3303-86d3-c2f3f1f1d6d0.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 24.20.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:ad:22:bd:80:37:f5:1f:94:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a96591f8-37a7-4502-accb-cd9d4c91e6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b9:4d:36:fe:75:10:90:0d:83:92:9b:96:9b: 5c:2a:23:94:20:5f:3c:5c:df:34:6f:57:f5:18:f2: af:e5:73:00:72:52:0b:e4:29:37:ae:b8:c8:ca:3e: 65:73:12:88:d3:5b:36:78:7e:d6:ad:6b:3a:32:cf: ad:e8:ce:8a:6c:eb:f3:27:b4:4d:bd:d9:a7:2d:f8: ab:62:c7:9b:c8:b5:98:5e:1f:78:6a:4e:c2:91:2d: 90:f7:4f:03:8e:8b:ea:03:00:58:eb:ea:87:f7:1b: 3b:85:ef:1b:87:67:1e:a5:bf:96:7f:bc:fc:28:9c: 1a:c2:ea:7f:9a:91:44:32:cb:1c:16:0f:ce:3e:95: ae:08:7c:0b:c7:a4:b9:13:e6:4b:3f:b0:50:89:e1: e9:bb:8f:44:55:51:18:d8:d5:e1:5b:d7:2a:37:c2: 93:5a:aa:a9:77:99:d1:b8:e3:2d:5d:aa:dd:dd:af: db:53:6c:25:47:b5:d1:4b:fc:8a:b5:be:06:f5:fc: 5e:d1:e9:cd:bd:8c:af:6e:3d:81:4a:3a:f0:17:a2: c5:e3:f0:a9:04:7d:fc:bd:02:c3:a0:36:37:91:fb: b8:f7:7e:14:72:4f:45:3d:18:73:c0:a2:fb:2b:a9: 84:d6:a2:ce:6f:4e:87:b0:af:37:42:1a:48:b5:ab: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F1:AC:A9:11:E0:BD:92:2F:84:0E:F7:95:A9:71:0D:83:8E:B3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7f4bd8b-a11c-3303-86d3-c2f3f1f1d6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:38:84:d2:21:81:ae:cd:84:00:b0:0b:09:e7:11:ab:a7:2e: f9:fa:6a:80:27:06:be:1d:d6:a4:69:97:53:25:7f:c5:f9:c7: 9b:00:0d:db:9b:60:95:8a:28:8a:50:6b:4b:9b:1d:fb:59:89: bf:24:01:e0:0f:fd:21:88:47:76:c8:82:6f:55:12:13:99:0c: 50:c8:ed:c8:65:f9:a5:de:e2:97:e2:ab:ab:1a:fb:f0:d8:71: 96:ec:d9:29:55:73:75:56:ec:42:cf:cf:b1:d9:79:f8:60:2d: 58:c2:f5:19:ed:54:d3:4a:65:ec:52:9f:41:4c:df:cb:e9:63: ab:f1:6b:39:ad:ba:25:81:1b:f4:2a:9e:72:21:53:2d:bf:30: 7d:6d:f2:52:ed:5f:8d:fd:89:0d:5b:73:c4:4d:3d:3f:3e:8c: a8:02:51:40:66:c8:9a:05:ce:97:47:cc:06:32:ff:fd:92:bb: 5c:73:be:37:35:d1:f0:d5:73:53:92:1f:ca:85:ff:7a:27:69: 17:c2:d5:38:dc:18:b6:79:71:8e:c4:4b:74:06:e6:57:dc:50: 17:49:6b:35:90:69:85:02:00:8b:15:05:31:36:d1:fe:bc:68: 66:ee:59:e3:67:47:90:9f:a6:c1:82:01:0a:c5:84:25:e8:c1: b0:44:52:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09q0ivYA39R+ULgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTk2NTkxZjgtMzdhNy00NTAyLWFjY2ItY2Q5ZDRjOTFlNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LlNNv51EJANg5KblptcKiOUIF88XN80b1f1 GPKv5XMAclIL5Ck3rrjIyj5lcxKI01s2eH7WrWs6Ms+t6M6KbOvzJ7RNvdmnLfir YsebyLWYXh94ak7CkS2Q908DjovqAwBY6+qH9xs7he8bh2cepb+Wf7z8KJwawup/ mpFEMsscFg/OPpWuCHwLx6S5E+ZLP7BQieHpu49EVVEY2NXhW9cqN8KTWqqpd5nR uOMtXard3a/bU2wlR7XRS/yKtb4G9fxe0enNvYyvbj2BSjrwF6LF4/CpBH38vQLD oDY3kfu4934Uck9FPRhzwKL7K6mE1qLOb06HsK83QhpItav6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITxrKkR4L2SL4QO95WpcQ2DjrO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzdmNGJkOGItYTExYy0z MzAzLTg2ZDMtYzJmM2YxZjFkNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ4hNIhga7NhACwCwnnEaunLvn6aoAnBr4d1qRpl1Mlf8X5x5sADdub YJWKKIpQa0ubHftZib8kAeAP/SGIR3bIgm9VEhOZDFDI7chl+aXe4pfiq6sa+/DY cZbs2SlVc3VW7ELPz7HZefhgLVjC9RntVNNKZexSn0FM38vpY6vxazmtuiWBG/Qq nnIhUy2/MH1t8lLtX439iQ1bc8RNPT8+jKgCUUBmyJoFzpdHzAYy//2Su1xzvjc1 0fDVc1OSH8qF/3onaRfC1TjcGLZ5cY7ES3QG5lfcUBdJazWQaYUCAIsVBTE20f68 aGbuWeNnR5CfpsGCAQrFhCXowbBEUqg= -----END CERTIFICATE-----Generated at Mon Apr 28 12:40:13 2025 by rpki-client