$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e698789-7504-336a-b742-d631575640e2.roa File: 1e698789-7504-336a-b742-d631575640e2.roa (raw, json) Hash identifier: 9u+hYjbqNLJvEKaVXo2XBD5OtYYI8v1UKKqUhKGqLjA= Subject key identifier: A1:B5:DF:3C:D9:82:DA:47:AC:52:AD:63:D3:CC:6E:6D:27:DE:45:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FBDC92A064C0E336E5BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e698789-7504-336a-b742-d631575640e2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 24.21.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:bd:c9:2a:06:4c:0e:33:6e:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=88a25bd0-80a8-4d72-a080-2d01c4dbf0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:e1:1c:51:13:0e:d8:ed:53:da:e3:3a:78: 52:2d:18:26:46:64:3f:1d:e6:45:51:73:6a:70:c5: 43:9f:61:b8:0d:66:07:00:0d:64:bf:ef:44:13:71: c8:e2:48:f5:c0:85:e5:90:fd:6d:ca:6b:2d:97:9e: b2:5b:1f:e2:78:ca:5f:10:b9:7d:ce:38:1d:84:52: 50:4d:98:1b:8b:5a:10:f6:0a:c7:da:fa:2f:7b:e7: d6:31:89:6e:a7:94:61:25:0e:c0:3c:b1:29:a8:72: 13:df:e0:a7:ed:f8:60:c3:28:cc:3f:78:80:8d:90: 75:5a:37:be:3e:f7:db:b7:35:e9:c9:67:eb:e5:b7: 93:dd:15:85:3d:93:c0:27:77:4b:d8:8f:b4:64:26: f4:ed:ee:6d:2f:14:2f:f2:bb:24:cc:f8:01:a2:19: 0d:9d:ef:5d:ea:2c:d3:bc:fa:b0:91:5d:10:1e:79: de:f0:32:b8:db:c2:16:6f:78:44:12:ef:fe:00:25: 86:86:42:c4:0f:5e:b4:28:3a:9d:2b:21:20:02:f1: 11:e1:f8:52:35:d1:3f:0c:bd:25:13:01:20:06:81: 12:7e:ea:70:a6:97:ed:28:84:8a:39:b5:fe:3f:86: 8f:88:c4:1e:91:f4:a3:7e:0d:37:6c:cb:84:24:b8: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B5:DF:3C:D9:82:DA:47:AC:52:AD:63:D3:CC:6E:6D:27:DE:45:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e698789-7504-336a-b742-d631575640e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:76:80:27:3d:dd:31:40:41:90:11:55:56:e7:b1:ce:a8:f8: 7e:0c:99:16:b6:93:3d:25:5c:bc:ac:46:4f:26:7f:c5:f1:ce: ff:c5:ad:44:25:c9:8a:11:3e:2a:5c:c2:f6:e4:91:89:b8:67: 1a:3e:1f:af:c6:f4:80:6d:65:41:f1:a3:33:98:c0:1d:19:ab: 16:1c:49:48:94:9a:0c:b0:29:20:e1:a4:45:d3:55:3d:9a:ed: df:be:4b:27:39:8e:dd:6f:63:78:ff:4e:44:06:a2:cd:b4:5b: 02:62:ed:99:06:54:14:d2:71:c8:46:32:69:06:a8:b8:13:2d: 2f:49:c3:91:0b:01:4c:b6:0d:83:90:fb:e3:bc:c2:43:71:f3: f4:dd:40:f1:20:4c:02:70:86:8e:dd:67:45:c7:96:40:ec:0e: b3:5f:c2:b0:be:83:cf:3d:5f:1c:e7:a2:5f:2b:97:5b:f2:f4: 5a:19:0c:c7:4a:2e:fd:bf:d1:d5:3d:68:29:c2:3f:59:15:a9: d1:d0:7e:e4:8a:d6:80:f0:e1:cb:d2:16:52:09:ee:70:34:fe: 13:bb:ac:81:d6:03:47:a1:b0:73:f2:8f:7f:60:e4:94:b1:e1: 61:0b:ca:92:32:9b:16:8f:e9:81:d2:ce:68:d5:04:97:49:28: eb:84:4a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL73JKgZMDjNuW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODhhMjViZDAtODBhOC00ZDcyLWEwODAtMmQwMWM0ZGJmMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3jhHFETDtjtU9rjOnhSLRgmRmQ/HeZFUXNq cMVDn2G4DWYHAA1kv+9EE3HI4kj1wIXlkP1tymstl56yWx/ieMpfELl9zjgdhFJQ TZgbi1oQ9grH2vove+fWMYlup5RhJQ7APLEpqHIT3+Cn7fhgwyjMP3iAjZB1Wje+ PvfbtzXpyWfr5beT3RWFPZPAJ3dL2I+0ZCb07e5tLxQv8rskzPgBohkNne9d6izT vPqwkV0QHnne8DK428IWb3hEEu/+ACWGhkLED160KDqdKyEgAvER4fhSNdE/DL0l EwEgBoESfupwppftKISKObX+P4aPiMQekfSjfg03bMuEJLhjQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG13zzZgtpHrFKtY9PMbm0n3kUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWU2OTg3ODktNzUwNC0z MzZhLWI3NDItZDYzMTU3NTY0MGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANN2gCc93TFAQZARVVbnsc6o+H4MmRa2kz0lXLysRk8mf8Xxzv/FrUQl yYoRPipcwvbkkYm4Zxo+H6/G9IBtZUHxozOYwB0ZqxYcSUiUmgywKSDhpEXTVT2a 7d++Syc5jt1vY3j/TkQGos20WwJi7ZkGVBTScchGMmkGqLgTLS9Jw5ELAUy2DYOQ ++O8wkNx8/TdQPEgTAJwho7dZ0XHlkDsDrNfwrC+g889Xxznol8rl1vy9FoZDMdK Lv2/0dU9aCnCP1kVqdHQfuSK1oDw4cvSFlIJ7nA0/hO7rIHWA0ehsHPyj39g5JSx 4WELypIymxaP6YHSzmjVBJdJKOuESiM= -----END CERTIFICATE-----Generated at Tue Jun 3 07:59:51 2025 by rpki-client