$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/252658e2-ee2e-304e-9b9f-8a958aeea8c5.roa File: 252658e2-ee2e-304e-9b9f-8a958aeea8c5.roa (raw, json) Hash identifier: w2rvYo/AWW6wKtlW6Q7WNBzg/+ngXksvmy1MVpv5tm8= Subject key identifier: 0C:48:55:A5:A3:39:A6:CE:22:98:D1:5C:A5:C9:1D:2B:BC:7B:54:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6EEF70A16087B6115BE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/252658e2-ee2e-304e-9b9f-8a958aeea8c5.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.2.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:ee:f7:0a:16:08:7b:61:15:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=76429daf-8ae1-46f8-9b57-80a521b0ddb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:1b:93:a8:a7:ce:59:56:7c:92:df:64:21: 23:63:dd:2f:dd:55:56:fa:a7:5e:33:b7:67:4c:3a: 88:d5:44:ab:a7:70:d8:e1:4f:58:e7:b0:4a:79:e8: ff:f0:bb:08:2e:36:2a:96:d6:17:2b:f0:ad:6b:67: b0:29:8c:4c:c0:79:a4:e4:55:76:99:28:74:24:b1: 31:0e:84:92:22:a4:76:32:44:e6:74:28:5f:88:5f: 73:43:c5:35:e2:b1:ef:81:6a:c2:c4:41:3a:c9:c4: 4e:16:7f:6e:b2:ed:35:94:b1:f9:fb:16:18:0b:1e: ce:5c:4b:65:28:bb:e9:3e:81:1e:6b:4a:0c:38:e8: d5:12:02:d7:e8:b2:3d:11:80:e0:3c:f8:9e:22:00: 4e:5f:e6:4c:99:37:5c:44:9c:3f:7a:90:f9:f8:e1: 21:9e:dc:cb:8b:3d:99:62:54:bd:1b:65:19:15:ee: 26:7d:26:2b:bd:ca:1a:fa:7f:b3:b9:40:e0:d2:7e: dc:19:40:1d:2f:1e:51:7e:09:ee:1e:fe:af:5c:79: fc:d6:d2:b2:a5:d8:1c:13:9d:0b:4f:40:2d:05:76: 41:25:e8:83:94:5d:a6:28:ce:d7:07:09:46:29:dc: 37:2c:d2:74:e8:f4:c5:c1:af:75:e2:21:ee:85:cf: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:48:55:A5:A3:39:A6:CE:22:98:D1:5C:A5:C9:1D:2B:BC:7B:54:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/252658e2-ee2e-304e-9b9f-8a958aeea8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.2.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:cf:22:12:9a:c6:e3:a9:72:8a:47:b0:92:65:82:27:3c:a9: 89:bf:56:8e:7c:f4:61:00:a7:3a:2b:7e:a1:7f:70:ce:f6:12: 06:ee:ae:43:21:52:43:23:96:de:de:c9:c0:71:51:d6:4c:36: e5:5f:93:24:8c:ea:6a:61:6d:73:f5:25:f2:e6:19:04:9e:b7: d1:bb:0a:d9:29:ce:9e:6e:d8:8b:46:27:81:b0:02:7f:da:75: e5:a6:a7:e7:61:59:33:2f:10:ce:da:3d:7c:5b:ce:13:93:42: 92:56:f7:c2:f7:37:0d:fc:cf:a5:fa:56:1f:0d:75:f7:6f:6a: 2a:2d:3b:d3:98:ac:0c:c4:f5:b4:9a:56:e2:5f:9d:32:ea:a5: 7b:f7:fc:9c:5e:71:1b:fe:ec:00:52:b1:74:43:fb:50:15:ca: 6e:28:6c:2e:6a:99:d2:17:dd:6d:ae:1c:f8:09:8e:72:88:08: 7e:cb:76:93:86:36:2c:61:e0:4d:39:83:63:18:e1:2d:2c:8e: d0:c5:a4:5c:45:87:b7:2d:dd:a5:13:bd:32:6b:df:60:d7:46: 39:40:b3:4e:b4:7e:6f:18:45:cd:45:d8:a9:42:d0:8e:ad:72: 11:07:72:d2:11:10:d8:9b:30:94:fc:19:59:0c:48:c7:0b:3f: 29:71:91:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09u73ChYIe2EVvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NzY0MjlkYWYtOGFlMS00NmY4LTliNTctODBhNTIxYjBkZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPYbk6inzllWfJLfZCEjY90v3VVW+qdeM7dn TDqI1USrp3DY4U9Y57BKeej/8LsILjYqltYXK/Cta2ewKYxMwHmk5FV2mSh0JLEx DoSSIqR2MkTmdChfiF9zQ8U14rHvgWrCxEE6ycROFn9usu01lLH5+xYYCx7OXEtl KLvpPoEea0oMOOjVEgLX6LI9EYDgPPieIgBOX+ZMmTdcRJw/epD5+OEhntzLiz2Z YlS9G2UZFe4mfSYrvcoa+n+zuUDg0n7cGUAdLx5RfgnuHv6vXHn81tKypdgcE50L T0AtBXZBJeiDlF2mKM7XBwlGKdw3LNJ06PTFwa914iHuhc9qWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxIVaWjOabOIpjRXKXJHSu8e1SLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUyNjU4ZTItZWUyZS0z MDRlLTliOWYtOGE5NThhZWVhOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGALgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTPIhKaxuOpcopHsJJlgic8qYm/Vo589GEApzorfqF/cM72EgburkMh UkMjlt7eycBxUdZMNuVfkySM6mphbXP1JfLmGQSet9G7Ctkpzp5u2ItGJ4GwAn/a deWmp+dhWTMvEM7aPXxbzhOTQpJW98L3Nw38z6X6Vh8NdfdvaiotO9OYrAzE9bSa VuJfnTLqpXv3/JxecRv+7ABSsXRD+1AVym4obC5qmdIX3W2uHPgJjnKICH7LdpOG Nixh4E05g2MY4S0sjtDFpFxFh7ct3aUTvTJr32DXRjlAs060fm8YRc1F2KlC0I6t chEHctIRENibMJT8GVkMSMcLPylxkTI= -----END CERTIFICATE-----Generated at Sun Apr 6 09:43:26 2025 by rpki-client