$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09e6ab65-7dc9-3d1f-b93b-4e44950c5a32.roa File: 09e6ab65-7dc9-3d1f-b93b-4e44950c5a32.roa (raw, json) Hash identifier: eo9mJh/U48DmvslpM9HaJ9ap1kmXjDxCBpsFWcodtpo= Subject key identifier: B0:B2:90:FC:66:B2:B5:AD:1E:A1:77:CF:C5:80:4B:28:E9:14:15:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FF997BBFD6D9E5D411F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09e6ab65-7dc9-3d1f-b93b-4e44950c5a32.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 24.147.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:f9:97:bb:fd:6d:9e:5d:41:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=70b6f806-dc67-46a6-b179-30ad183b3428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:2e:3d:39:7c:46:d9:35:62:83:44:14:76: a8:ed:1f:8b:da:ea:3d:40:22:89:b2:e5:57:66:74: f5:81:39:42:a6:da:c1:ca:59:aa:7b:90:27:f1:07: 3a:05:1c:97:5b:40:75:a4:a0:9a:26:13:bd:23:b1: b8:ea:cf:71:d2:c6:3c:f9:17:1c:8d:08:0c:3c:10: 6d:23:7d:07:e1:66:05:ff:b0:7f:15:2b:8b:32:e9: a1:a7:8a:9c:09:9c:7d:9f:02:4b:b2:a4:7a:bf:cd: ab:f0:fe:77:7b:c2:cb:7b:3b:e9:e5:f1:69:71:24: 56:ab:b3:6f:b0:18:93:4a:de:25:b0:f8:ce:9a:c4: ed:6f:85:ac:39:8b:c7:d2:74:b5:05:7e:f1:3a:77: 32:d3:84:82:05:7d:f9:56:53:f3:1a:f2:88:0d:f7: c7:df:3c:db:83:40:82:b9:11:18:7a:cc:fc:4c:9f: cb:ed:bd:59:e7:e8:a8:40:6d:e5:a5:5c:e2:22:26: b3:4d:af:1f:29:38:e3:fb:a6:21:b0:13:e4:11:c7: 0b:99:12:c7:b7:70:ef:b6:2c:2b:58:c0:84:b7:d8: ed:83:3d:7b:1f:0e:72:05:43:d9:27:51:6d:a4:05: cf:a4:92:67:d4:ed:f8:38:13:fb:04:41:a6:80:07: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B2:90:FC:66:B2:B5:AD:1E:A1:77:CF:C5:80:4B:28:E9:14:15:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09e6ab65-7dc9-3d1f-b93b-4e44950c5a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.147.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f3:44:60:dd:77:c8:91:aa:4a:04:54:12:16:48:f5:c4:89: 1d:79:64:3b:64:de:48:74:2a:22:e1:4a:16:17:44:22:1b:d1: 97:c1:9c:ea:0c:e2:91:85:00:5d:eb:36:4e:1c:6e:26:9f:90: 33:85:4d:51:46:15:79:43:59:bd:d8:23:30:c5:08:97:10:80: 28:88:01:70:0b:12:dc:57:3b:a8:4d:80:d6:f2:52:7a:0d:9f: bc:2a:f5:2c:27:b0:d9:da:d7:6c:5c:79:36:94:73:c8:c4:e5: 98:74:8d:70:c4:5b:87:d8:e9:06:f8:e1:a3:d3:c0:a9:b4:3d: c7:c3:a5:b7:45:3c:09:bd:38:aa:93:38:59:14:b7:bf:94:45: 84:67:8d:b9:e2:87:90:9d:ea:1c:77:ea:87:cb:01:27:29:e6: 9f:aa:4e:de:44:2f:b0:fb:09:17:92:a9:db:a0:64:83:bc:ca: 78:93:92:a9:1b:9c:d6:de:a1:2d:4c:aa:c4:f5:79:66:04:8b: ff:a9:52:71:e3:10:62:0d:2a:e0:6c:d0:ee:6c:7e:d7:4a:1f: b9:eb:1e:b1:40:6f:5b:7a:3b:d4:86:5b:36:e2:ce:29:0a:79: 1a:aa:21:a3:2c:19:61:a1:79:2a:ed:25:3c:bf:b1:96:9b:61: 2d:cf:73:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/mXu/1tnl1BHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzBiNmY4MDYtZGM2Ny00NmE2LWIxNzktMzBhZDE4M2IzNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn8uPTl8Rtk1YoNEFHao7R+L2uo9QCKJsuVX ZnT1gTlCptrBylmqe5An8Qc6BRyXW0B1pKCaJhO9I7G46s9x0sY8+RccjQgMPBBt I30H4WYF/7B/FSuLMumhp4qcCZx9nwJLsqR6v82r8P53e8LLezvp5fFpcSRWq7Nv sBiTSt4lsPjOmsTtb4WsOYvH0nS1BX7xOncy04SCBX35VlPzGvKIDffH3zzbg0CC uREYesz8TJ/L7b1Z5+ioQG3lpVziIiazTa8fKTjj+6YhsBPkEccLmRLHt3Dvtiwr WMCEt9jtgz17Hw5yBUPZJ1FtpAXPpJJn1O34OBP7BEGmgAf19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCykPxmsrWtHqF3z8WASyjpFBWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDllNmFiNjUtN2RjOS0z ZDFmLWI5M2ItNGU0NDk1MGM1YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDzRGDdd8iRqkoEVBIWSPXEiR15ZDtk3kh0KiLhShYXRCIb0ZfBnOoM 4pGFAF3rNk4cbiafkDOFTVFGFXlDWb3YIzDFCJcQgCiIAXALEtxXO6hNgNbyUnoN n7wq9SwnsNna12xceTaUc8jE5Zh0jXDEW4fY6Qb44aPTwKm0PcfDpbdFPAm9OKqT OFkUt7+URYRnjbnih5Cd6hx36ofLAScp5p+qTt5EL7D7CReSqdugZIO8yniTkqkb nNbeoS1MqsT1eWYEi/+pUnHjEGINKuBs0O5sftdKH7nrHrFAb1t6O9SGWzbizikK eRqqIaMsGWGheSrtJTy/sZabYS3Pc7Y= -----END CERTIFICATE-----Generated at Wed Jun 4 23:07:08 2025 by rpki-client