$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b4224a-4ef7-3b0b-939e-fc4efa44b2df.roa File: 19b4224a-4ef7-3b0b-939e-fc4efa44b2df.roa (raw, json) Hash identifier: bWSzbEVdKxfA2ARRkosDc5sE1oKGfSRb22nceHSAPo0= Subject key identifier: BF:34:44:85:6E:95:56:6A:DC:93:4D:A2:C6:91:24:F2:F9:E9:BA:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C191F5FDE04DB65AE7C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b4224a-4ef7-3b0b-939e-fc4efa44b2df.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 24.104.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:19:1f:5f:de:04:db:65:ae:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=89a561c2-6445-4cba-becb-978631e3ffae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:f1:8d:1c:86:b4:32:46:5f:a0:fb:89:f8: 08:da:39:ab:6d:44:62:b3:ab:84:6f:9c:0f:ee:37: 91:75:3f:7c:24:1c:6d:d2:55:34:fa:34:a1:5d:f8: 83:b5:12:f8:2f:51:33:5b:c6:16:ad:bf:6c:1e:70: f3:8f:a8:ae:09:9e:5f:ff:80:76:38:b4:65:6e:49: 94:30:d5:1b:53:61:31:e1:b3:52:b5:c2:17:40:c4: 19:ee:13:93:25:af:3e:de:2a:4c:e7:7f:a1:dd:61: 7f:bc:1d:06:74:1c:0e:ed:84:0f:94:a9:b2:b6:80: 9f:6a:84:d5:b4:d9:5f:15:87:bf:75:75:de:62:60: 73:54:60:ee:a5:85:37:de:51:ef:32:3b:d5:c0:43: cf:67:fe:01:d6:8d:52:22:08:79:24:fb:56:a7:3e: 30:b1:3f:6c:8c:f0:25:60:83:18:19:ed:7b:7b:23: d7:3d:d9:c5:36:6a:27:b9:3e:b1:8a:0b:9f:5b:5a: b2:db:12:f5:22:a0:e6:55:32:63:98:6d:27:b2:9a: 67:eb:59:4d:66:ec:bc:16:5b:aa:7a:1c:2b:68:94: 8b:e9:4e:d7:e0:a0:48:3f:bf:71:92:be:35:09:68: 86:fb:91:98:c7:c1:5a:8e:18:f8:6c:28:85:ed:df: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:44:85:6E:95:56:6A:DC:93:4D:A2:C6:91:24:F2:F9:E9:BA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b4224a-4ef7-3b0b-939e-fc4efa44b2df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.104.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a5:5b:fc:04:42:56:a7:ed:9a:54:6f:48:ba:46:4a:aa:06: 0e:30:44:f2:fd:96:ac:24:7b:4c:5d:c0:f5:84:f3:d9:e2:5a: 40:a9:1c:be:be:40:d1:1b:4a:13:48:aa:1e:99:d4:7b:b1:70: ad:9a:e1:54:2c:c5:5e:94:ff:4e:03:6d:0a:0d:c8:44:0b:87: 19:5d:d9:81:af:b8:84:ac:81:26:d4:b7:74:25:40:9b:53:c3: 78:de:4e:61:7a:db:65:f8:f2:50:cf:22:27:8e:1f:68:d1:19: 4d:a5:a4:a0:c3:16:0d:50:1e:8d:6e:e5:a5:1a:52:84:0e:1f: c8:7d:21:43:9a:0e:72:f7:0d:71:73:d7:e3:fe:5c:9f:b1:04: a9:81:85:8a:e9:53:f1:98:53:cb:a6:bb:05:ff:a7:ef:75:7c: 0b:41:fa:ea:89:d6:d3:2a:25:21:9f:03:ec:34:1c:a9:1a:1e: f5:96:14:23:5b:7b:27:72:51:ac:8f:43:d9:ae:53:f8:32:e6: 9a:ad:b4:5f:4d:a3:3c:f0:b8:57:a6:30:4f:f0:06:71:c7:2e: 34:29:b5:ea:25:41:87:b2:f3:34:93:85:d4:2b:03:a3:2b:0c: 08:74:dd:92:2c:2c:c6:e4:79:33:d6:8b:a3:3d:45:d6:f4:db: c2:9c:47:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebBkfX94E22WufIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ODlhNTYxYzItNjQ0NS00Y2JhLWJlY2ItOTc4NjMxZTNmZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOrxjRyGtDJGX6D7ifgI2jmrbURis6uEb5wP 7jeRdT98JBxt0lU0+jShXfiDtRL4L1EzW8YWrb9sHnDzj6iuCZ5f/4B2OLRlbkmU MNUbU2Ex4bNStcIXQMQZ7hOTJa8+3ipM53+h3WF/vB0GdBwO7YQPlKmytoCfaoTV tNlfFYe/dXXeYmBzVGDupYU33lHvMjvVwEPPZ/4B1o1SIgh5JPtWpz4wsT9sjPAl YIMYGe17eyPXPdnFNmonuT6xigufW1qy2xL1IqDmVTJjmG0nsppn61lNZuy8Fluq ehwraJSL6U7X4KBIP79xkr41CWiG+5GYx8Fajhj4bCiF7d/IEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL80RIVulVZq3JNNosaRJPL56bpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTliNDIyNGEtNGVmNy0z YjBiLTkzOWUtZmM0ZWZhNDRiMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSlW/wEQlan7ZpUb0i6RkqqBg4wRPL9lqwke0xdwPWE89niWkCpHL6+ QNEbShNIqh6Z1HuxcK2a4VQsxV6U/04DbQoNyEQLhxld2YGvuISsgSbUt3QlQJtT w3jeTmF622X48lDPIieOH2jRGU2lpKDDFg1QHo1u5aUaUoQOH8h9IUOaDnL3DXFz 1+P+XJ+xBKmBhYrpU/GYU8umuwX/p+91fAtB+uqJ1tMqJSGfA+w0HKkaHvWWFCNb eydyUayPQ9muU/gy5pqttF9NozzwuFemME/wBnHHLjQpteolQYey8zSThdQrA6Mr DAh03ZIsLMbkeTPWi6M9Rdb028KcR3o= -----END CERTIFICATE-----Generated at Mon Apr 7 06:03:45 2025 by rpki-client