$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa File: 21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa (raw, json) Hash identifier: +gdKfbkV9K6EyElwizsxDUTxAiHKE2uM45JXGAGj7iM= Subject key identifier: B9:1B:F3:91:08:0D:69:E7:44:45:BD:2C:B2:96:99:FD:9E:59:E4:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6EEEB1CE525594BE03B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.2.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:ee:eb:1c:e5:25:59:4b:e0:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9f38d5b2-a2c3-4a4e-8873-817621561fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:c7:69:71:1e:a0:44:af:b8:73:d1:22:e7: d9:55:97:33:76:46:c4:ad:2b:30:47:a1:cc:4b:f7: 30:44:39:0e:3e:18:93:e8:13:0b:b1:1e:51:2a:b5: 2f:41:7a:38:0e:5b:dc:42:32:a5:d2:72:d0:eb:b7: 18:a9:81:d8:5d:b7:62:f3:c9:fc:0c:b7:42:ff:35: bc:6f:da:ed:3c:2c:c7:98:ea:47:ae:7a:06:03:75: 6e:7a:9e:f2:2d:a0:df:d4:41:03:0d:07:da:75:0d: a9:38:01:57:f6:14:57:2f:05:dd:76:c8:89:83:74: 5d:de:bf:15:04:d9:84:b3:34:37:b7:b8:1b:e7:a5: 15:4b:8d:cd:e6:27:9a:3d:27:f0:27:fb:dc:7e:f9: c4:18:1f:df:c5:5f:77:bd:70:ed:88:d7:ee:61:d0: 45:78:e6:53:87:2e:16:d2:65:3c:28:21:aa:bb:45: cb:26:1e:e7:d1:85:61:fa:5a:aa:99:87:ff:6b:23: eb:96:ac:ca:60:54:67:30:1d:9a:8e:e2:dd:bf:dd: 27:2c:a0:b9:4a:0e:14:df:4f:20:10:a7:a3:73:71: 93:b2:7b:62:5c:0b:27:05:55:f6:38:85:fd:5f:b3: ad:13:4b:59:f0:b3:03:70:ad:d9:38:05:1a:52:06: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1B:F3:91:08:0D:69:E7:44:45:BD:2C:B2:96:99:FD:9E:59:E4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.2.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b2:cc:1a:10:24:b0:93:66:27:7d:2a:53:c4:b9:4d:1f:62: 35:7e:a0:2f:a9:a6:c8:8b:fe:d0:df:35:84:a3:75:b2:91:03: 7e:40:11:9b:c2:41:65:97:de:66:b2:73:58:7c:d6:09:e0:fd: c6:0d:e5:23:5a:28:ec:f6:d6:dc:e0:97:19:8c:9f:3e:2d:e7: 29:87:b6:88:4f:b8:54:70:07:16:fe:2b:1f:d3:77:23:b3:e0: 02:c5:6f:84:fa:93:2b:73:32:bf:79:16:2e:a8:1c:6e:9f:3f: a2:53:c9:ee:f6:09:fa:1c:0e:d7:12:bd:c3:20:35:fc:0d:fc: e9:b0:a3:1e:c0:4c:98:6a:d5:33:df:0e:e0:05:da:30:b7:47: 05:b6:3f:d7:62:47:4a:23:a2:85:69:0e:62:4c:75:66:ee:f2: a9:33:88:32:ae:22:d1:32:a1:9d:2c:64:96:04:8c:a4:c2:aa: 73:13:10:15:3e:aa:77:c6:cd:81:8f:65:46:fc:32:f4:ba:37: 0c:93:dd:51:ce:fe:20:c0:42:d4:37:ef:3f:de:1d:b1:8d:7d: 20:3e:76:86:45:52:e1:2a:0a:69:dc:90:6b:0a:c4:89:0c:eb: 44:46:ab:93:73:2c:e2:4e:a1:e9:5b:ab:31:21:f4:c9:6b:68: 8d:64:b5:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09u7rHOUlWUvgOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWYzOGQ1YjItYTJjMy00YTRlLTg4NzMtODE3NjIxNTYxZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsjHaXEeoESvuHPRIufZVZczdkbErSswR6HM S/cwRDkOPhiT6BMLsR5RKrUvQXo4DlvcQjKl0nLQ67cYqYHYXbdi88n8DLdC/zW8 b9rtPCzHmOpHrnoGA3Vuep7yLaDf1EEDDQfadQ2pOAFX9hRXLwXddsiJg3Rd3r8V BNmEszQ3t7gb56UVS43N5ieaPSfwJ/vcfvnEGB/fxV93vXDtiNfuYdBFeOZThy4W 0mU8KCGqu0XLJh7n0YVh+lqqmYf/ayPrlqzKYFRnMB2ajuLdv90nLKC5Sg4U308g EKejc3GTsntiXAsnBVX2OIX9X7OtE0tZ8LMDcK3ZOAUaUgZ7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkb85EIDWnnREW9LLKWmf2eWeR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFhNDc0YWMtMzJkZC0z MmUxLThiZDktNjhjNGIxOWUzZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGALQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmyzBoQJLCTZid9KlPEuU0fYjV+oC+ppsiL/tDfNYSjdbKRA35AEZvC QWWX3mayc1h81gng/cYN5SNaKOz21tzglxmMnz4t5ymHtohPuFRwBxb+Kx/TdyOz 4ALFb4T6kytzMr95Fi6oHG6fP6JTye72CfocDtcSvcMgNfwN/Omwox7ATJhq1TPf DuAF2jC3RwW2P9diR0ojooVpDmJMdWbu8qkziDKuItEyoZ0sZJYEjKTCqnMTEBU+ qnfGzYGPZUb8MvS6NwyT3VHO/iDAQtQ37z/eHbGNfSA+doZFUuEqCmnckGsKxIkM 60RGq5NzLOJOoelbqzEh9MlraI1ktW4= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:52 2025 by rpki-client