$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1861f6a5-d48c-33ae-9e95-c3852fd7d4ef.roa File: 1861f6a5-d48c-33ae-9e95-c3852fd7d4ef.roa (raw, json) Hash identifier: UUYjbGGFoT0M4QXlczVreT5ViVc925A5XNfPmzAbgUA= Subject key identifier: 0A:E2:86:35:AB:06:4C:02:A7:FB:F2:6C:86:E1:0D:F4:D8:43:03:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C0C4A3C2D9A4F02E053C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1861f6a5-d48c-33ae-9e95-c3852fd7d4ef.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33660 IP address blocks: 24.11.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:0c:4a:3c:2d:9a:4f:02:e0:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9db70431-ed4b-4962-935f-400272357936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:67:4b:83:37:52:df:eb:39:a0:fc:39:05: 12:d8:70:00:a1:fa:41:6a:4b:5b:48:b0:1c:c1:e4: fc:15:64:af:76:f6:f0:d4:ad:bd:e6:1a:65:c4:4c: de:e5:03:cf:0b:11:24:10:77:a3:7d:b8:78:b3:2e: f3:ff:e1:5c:dc:63:8d:ee:5f:a8:98:76:54:74:3d: 58:d0:f9:4a:14:f8:1c:49:dc:1a:ce:ff:3b:b1:7f: e0:32:77:b8:5d:c4:d6:b9:81:35:4e:0d:ec:fa:9f: 0e:a0:f5:35:33:9e:a8:4d:fc:ef:2a:9f:d9:4d:49: 14:c5:4b:b1:a5:4f:29:0f:84:01:71:dc:bd:1e:44: bf:68:60:e5:31:4a:51:54:6f:d7:d7:96:3f:48:04: 60:01:a8:3b:d1:26:34:5b:c4:3c:ea:f7:65:f3:1a: f7:db:67:d9:56:9e:38:25:ed:ed:da:ce:4b:34:e8: 67:c7:c0:98:5d:d3:96:60:cf:34:78:96:3f:89:1e: f6:99:1f:87:20:b7:a2:93:2e:7f:9e:c1:2a:f4:8a: 06:7d:73:a4:97:f5:d0:ee:54:61:89:f8:72:e3:51: a4:50:cf:0a:a5:00:fb:45:f4:0b:96:af:2b:01:4d: c0:42:27:fa:a1:63:c2:6b:0d:04:63:71:80:cf:38: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:86:35:AB:06:4C:02:A7:FB:F2:6C:86:E1:0D:F4:D8:43:03:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1861f6a5-d48c-33ae-9e95-c3852fd7d4ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6f:bb:74:96:b7:49:59:49:21:4f:bb:b5:5e:5e:2b:71:01: a4:28:1f:7a:be:02:4a:52:80:58:50:62:cc:90:9f:5b:91:4e: 04:80:82:cd:db:0b:8a:5d:0c:ec:2d:e1:86:c9:71:31:37:7b: 0e:34:1e:43:d2:3a:9a:ac:ab:0b:f4:78:6d:cd:6d:40:fe:4e: 46:75:0b:cb:db:46:5d:fb:c1:eb:a4:da:a7:70:93:c3:3c:4e: 43:23:2e:78:f6:a4:b6:e0:16:5a:4d:27:e7:b1:fd:09:14:c6: a3:7c:f6:6d:db:91:87:66:44:54:8d:57:c7:76:ce:99:f4:49: f1:3f:25:1e:2b:96:6f:22:12:8a:3e:b4:e5:65:e3:59:d6:fa: fb:c1:af:b0:b5:52:36:34:32:f5:4b:1d:60:7e:0f:ff:83:0f: 8f:8a:1a:2e:c4:fc:12:8c:72:8d:5a:9b:32:3a:e4:fe:45:14: 68:4c:c9:02:05:a5:21:28:ba:f2:b3:da:31:7e:d9:11:39:d4: 39:e8:44:67:35:81:5d:d5:ec:89:a6:6f:46:2b:5f:3b:cb:45: f6:e2:ce:b3:cc:73:86:2c:9c:cb:35:e1:d5:1b:5d:ee:7c:f8: 08:cf:93:33:5b:b9:3c:a3:4a:3b:10:ca:3b:62:7e:b6:8e:57: 5d:57:7b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebAxKPC2aTwLgU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWRiNzA0MzEtZWQ0Yi00OTYyLTkzNWYtNDAwMjcyMzU3OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKpnS4M3Ut/rOaD8OQUS2HAAofpBaktbSLAc weT8FWSvdvbw1K295hplxEze5QPPCxEkEHejfbh4sy7z/+Fc3GON7l+omHZUdD1Y 0PlKFPgcSdwazv87sX/gMne4XcTWuYE1Tg3s+p8OoPU1M56oTfzvKp/ZTUkUxUux pU8pD4QBcdy9HkS/aGDlMUpRVG/X15Y/SARgAag70SY0W8Q86vdl8xr322fZVp44 Je3t2s5LNOhnx8CYXdOWYM80eJY/iR72mR+HILeiky5/nsEq9IoGfXOkl/XQ7lRh ifhy41GkUM8KpQD7RfQLlq8rAU3AQif6oWPCaw0EY3GAzzh6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArihjWrBkwCp/vybIbhDfTYQwPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTg2MWY2YTUtZDQ4Yy0z M2FlLTllOTUtYzM4NTJmZDdkNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGAsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9vu3SWt0lZSSFPu7VeXitxAaQoH3q+AkpSgFhQYsyQn1uRTgSAgs3b C4pdDOwt4YbJcTE3ew40HkPSOpqsqwv0eG3NbUD+TkZ1C8vbRl37weuk2qdwk8M8 TkMjLnj2pLbgFlpNJ+ex/QkUxqN89m3bkYdmRFSNV8d2zpn0SfE/JR4rlm8iEoo+ tOVl41nW+vvBr7C1UjY0MvVLHWB+D/+DD4+KGi7E/BKMco1amzI65P5FFGhMyQIF pSEouvKz2jF+2RE51DnoRGc1gV3V7Immb0YrXzvLRfbizrPMc4YsnMs14dUbXe58 +AjPkzNbuTyjSjsQyjtifraOV11Xexo= -----END CERTIFICATE-----Generated at Mon Apr 7 06:12:26 2025 by rpki-client