$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa File: 0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa (raw, json) Hash identifier: Yv6AYGNMe2tbKtB8P+V9IKgcZVYPlSwFGcOJ8hPPnKM= Subject key identifier: B7:F6:1D:2C:56:7A:2D:10:3E:8A:E0:DB:B3:1C:79:BD:41:63:7D:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431E4D08B19205CC0EDA7C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 24.127.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:e4:d0:8b:19:20:5c:c0:ed:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=1968f9bd-d5ef-4b6d-9162-089ef9e6282b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:d8:39:84:c1:6f:57:3d:60:de:d7:18:46: 73:15:9b:51:05:6f:5f:91:3e:00:fa:e6:01:de:a5: 15:22:d0:52:fb:17:1d:ce:ab:8e:f6:59:dd:d0:8b: 65:69:37:6b:56:2d:67:e9:d0:57:34:97:15:c1:43: de:4c:94:03:33:55:5d:7e:93:20:d0:00:ee:40:44: be:8b:ba:5b:5b:29:23:ca:98:97:65:02:b1:dd:47: c3:25:63:d0:99:e9:24:aa:19:09:c5:50:69:a9:44: 04:d7:d6:86:f5:a6:cc:22:64:98:75:1d:e3:6b:80: b5:08:00:99:a8:70:2b:ea:06:ae:b6:5f:a5:04:97: 78:eb:d2:30:3c:b4:8e:1d:d0:93:db:00:0c:87:4e: 09:31:d0:80:b2:bf:60:36:a0:a1:fc:1f:33:ce:b8: 5e:b9:b4:d2:c1:aa:1d:2e:2a:f4:9f:01:c1:8c:4d: 78:ea:39:e8:22:42:9e:85:20:60:7e:d1:77:66:f8: b2:75:82:8d:4d:dd:2e:a5:1a:d6:79:63:21:c7:9c: 8a:40:07:4b:28:be:97:9d:1a:c6:ce:16:3b:05:af: 9e:27:59:47:22:03:cc:54:ae:ef:2f:1b:f4:48:01: 08:b7:a1:2a:bb:6e:5e:37:50:8e:28:a5:cc:a4:e4: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F6:1D:2C:56:7A:2D:10:3E:8A:E0:DB:B3:1C:79:BD:41:63:7D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd3a6ae-d038-3a74-ae58-dd1928bfc4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a2:a4:fd:a5:a9:2a:25:e3:3e:c5:50:25:a9:a7:7e:60:0b: 7e:1c:73:24:f0:21:b7:a3:fc:dc:2c:2e:6b:97:c5:14:93:1a: 5e:07:c6:bf:37:8c:03:38:45:49:81:96:f0:38:25:85:da:8d: 4b:6d:91:8b:84:27:1c:32:23:ae:36:14:4c:30:ea:5b:48:ee: b5:62:ca:c8:df:60:b5:ff:9d:57:45:cd:d2:2b:06:a3:5f:bb: 3b:55:05:d1:5e:1f:a1:7d:53:7e:42:83:d7:b2:5b:38:ef:7f: 26:c9:30:03:fc:c0:58:9e:c5:95:1e:cf:80:6e:e0:11:45:77: 17:30:cf:e2:cf:e1:1a:e5:d6:e8:e6:0f:13:bd:c9:84:a5:a6: b8:5d:f5:d1:3c:e6:53:52:27:16:58:aa:ef:7c:c7:ff:b1:dc: e3:44:66:bf:0f:aa:ba:2a:fb:5c:be:5b:5f:f7:a7:8a:fb:76: 5d:de:9f:e4:b5:ec:62:e9:7b:9f:7d:60:d0:7f:a3:73:81:b3: 7e:38:2d:a5:8c:1c:8f:47:80:fd:a6:6e:ae:f5:ca:80:76:9e: d4:4f:05:94:33:c9:06:56:8e:95:10:da:1e:d2:c6:23:5c:15: b3:74:61:12:18:ef:fe:2b:2c:18:6b:3d:e5:ef:3d:26:54:44: 8a:c2:bf:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMeTQixkgXMDtp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTk2OGY5YmQtZDVlZi00YjZkLTkxNjItMDg5ZWY5ZTYyODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GXYOYTBb1c9YN7XGEZzFZtRBW9fkT4A+uYB 3qUVItBS+xcdzquO9lnd0ItlaTdrVi1n6dBXNJcVwUPeTJQDM1VdfpMg0ADuQES+ i7pbWykjypiXZQKx3UfDJWPQmekkqhkJxVBpqUQE19aG9abMImSYdR3ja4C1CACZ qHAr6gautl+lBJd469IwPLSOHdCT2wAMh04JMdCAsr9gNqCh/B8zzrheubTSwaod Lir0nwHBjE146jnoIkKehSBgftF3ZviydYKNTd0upRrWeWMhx5yKQAdLKL6XnRrG zhY7Ba+eJ1lHIgPMVK7vLxv0SAEIt6Equ25eN1COKKXMpOQO8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf2HSxWei0QPorg27Mceb1BY30DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZkM2E2YWUtZDAzOC0z YTc0LWFlNTgtZGQxOTI4YmZjNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCipP2lqSol4z7FUCWpp35gC34ccyTwIbej/NwsLmuXxRSTGl4Hxr83 jAM4RUmBlvA4JYXajUttkYuEJxwyI642FEww6ltI7rViysjfYLX/nVdFzdIrBqNf uztVBdFeH6F9U35Cg9eyWzjvfybJMAP8wFiexZUez4Bu4BFFdxcwz+LP4Rrl1ujm DxO9yYSlprhd9dE85lNSJxZYqu98x/+x3ONEZr8Pqroq+1y+W1/3p4r7dl3en+S1 7GLpe599YNB/o3OBs344LaWMHI9HgP2mbq71yoB2ntRPBZQzyQZWjpUQ2h7SxiNc FbN0YRIY7/4rLBhrPeXvPSZURIrCv2w= -----END CERTIFICATE-----Generated at Mon Jun 30 09:36:43 2025 by rpki-client