$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa File: 5aa89212-3d33-3052-97d6-991ea1d1130d.roa (raw, json) Hash identifier: rHyfAnchRMMlxHRcuL2RgMt3LAbJsnFk8Cr1cBoE/vk= Subject key identifier: 5A:90:D4:AB:61:22:B9:9D:25:E6:6C:3B:4B:96:1A:DE:0D:D6:71:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF2C7E3DF3E960F5EA08A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 24.1.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:2c:7e:3d:f3:e9:60:f5:ea:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=68c31431-3695-4b2b-b70c-e290e79744ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:36:18:60:3c:ba:11:72:c6:20:7e:96:36: 25:71:99:49:0c:55:71:0b:4e:9b:cb:f8:5d:e2:4f: 23:1c:87:f5:57:6e:73:c1:39:13:0c:88:3c:71:4c: db:f5:63:3b:d5:3f:d0:d0:52:1d:a0:9f:64:91:7e: da:42:7e:ef:51:ae:61:e2:74:d8:44:dc:4b:18:cf: 10:be:45:ea:67:31:4e:e6:5a:98:3d:b8:ac:ba:ee: 37:d3:a1:55:5b:7d:3b:55:9c:d1:07:df:06:8f:a1: 8b:f0:5b:cb:17:be:d1:ce:af:df:63:e6:18:a7:72: f3:c8:b4:cb:4e:81:6b:43:d3:e8:26:14:89:3e:26: 9a:92:d3:ff:19:b0:c2:99:55:55:8f:34:99:d4:44: 61:0d:08:58:79:da:cc:cb:34:53:a8:b0:4e:45:09: a9:53:6f:56:6c:39:d6:75:1c:9f:63:28:46:4d:d8: 0a:93:8f:62:d2:5e:e7:72:fc:87:a8:d0:b1:29:78: f6:2b:05:85:23:22:d0:0d:12:99:b7:2d:49:43:c3: a9:fa:3e:7e:1f:84:e4:0c:9c:fc:d6:04:78:82:fe: c4:d7:65:ee:5f:a7:df:70:36:4a:8a:1f:b3:81:56: c4:fd:1a:84:81:3d:a2:9c:91:cb:ff:3f:0e:c0:e4: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:D4:AB:61:22:B9:9D:25:E6:6C:3B:4B:96:1A:DE:0D:D6:71:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.1.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4d:54:a8:54:b5:57:b2:63:79:99:24:01:f6:14:76:40:80: 84:55:97:19:68:24:6e:bd:3c:8e:1f:0a:ba:9a:74:59:45:9d: 71:3d:51:cf:bb:29:af:5e:a3:a1:98:b5:76:ec:86:46:37:df: 2b:c2:e4:eb:11:35:e3:19:bb:b1:a7:18:59:97:d1:e8:bf:f6: 91:f1:e2:98:bd:30:2e:e3:aa:09:bc:3f:41:7d:94:69:ef:2d: 48:b7:a3:56:67:95:39:55:a8:f3:b9:a4:40:ec:88:e0:df:17: ee:8c:0e:92:24:4b:e5:78:0f:87:bd:c7:21:06:82:1b:e4:59: 84:08:0b:5e:b4:11:bf:2f:ee:ac:a4:64:f2:41:ce:04:55:00: 33:89:44:3b:b5:dd:5d:a9:9a:6a:90:ad:1e:3d:e3:44:cf:0a: f6:1c:93:9a:d8:f4:35:2f:6f:4b:df:d3:20:3c:5c:12:25:51: 06:45:fa:66:da:35:72:97:22:70:9a:e6:df:c9:0f:4f:10:f7: 45:5e:42:3c:05:dc:0f:55:22:0f:47:c4:b4:95:6f:38:f8:1d: f0:79:06:c2:37:d5:b4:c8:0d:ab:6e:5d:8b:ff:8d:e6:67:e6: 15:e2:7e:a5:31:df:a6:bd:d9:cc:d0:8e:fe:d7:41:ed:ef:ae: 65:19:e8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksryx+PfPpYPXqCKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjhjMzE0MzEtMzY5NS00YjJiLWI3MGMtZTI5MGU3OTc0NGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld42GGA8uhFyxiB+ljYlcZlJDFVxC06by/hd 4k8jHIf1V25zwTkTDIg8cUzb9WM71T/Q0FIdoJ9kkX7aQn7vUa5h4nTYRNxLGM8Q vkXqZzFO5lqYPbisuu4306FVW307VZzRB98Gj6GL8FvLF77Rzq/fY+YYp3LzyLTL ToFrQ9PoJhSJPiaaktP/GbDCmVVVjzSZ1ERhDQhYedrMyzRTqLBORQmpU29WbDnW dRyfYyhGTdgKk49i0l7ncvyHqNCxKXj2KwWFIyLQDRKZty1JQ8Op+j5+H4TkDJz8 1gR4gv7E12XuX6ffcDZKih+zgVbE/RqEgT2inJHL/z8OwOTMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqQ1KthIrmdJeZsO0uWGt4N1nG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFhODkyMTItM2QzMy0z MDUyLTk3ZDYtOTkxZWExZDExMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARNVKhUtVeyY3mZJAH2FHZAgIRVlxloJG69PI4fCrqadFlFnXE9Uc+7 Ka9eo6GYtXbshkY33yvC5OsRNeMZu7GnGFmX0ei/9pHx4pi9MC7jqgm8P0F9lGnv LUi3o1ZnlTlVqPO5pEDsiODfF+6MDpIkS+V4D4e9xyEGghvkWYQIC160Eb8v7qyk ZPJBzgRVADOJRDu13V2pmmqQrR4940TPCvYck5rY9DUvb0vf0yA8XBIlUQZF+mba NXKXInCa5t/JD08Q90VeQjwF3A9VIg9HxLSVbzj4HfB5BsI31bTIDatuXYv/jeZn 5hXifqUx36a92czQjv7XQe3vrmUZ6HI= -----END CERTIFICATE-----Generated at Sun May 11 12:44:29 2025 by rpki-client