$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c433872-cf01-39e2-b679-9b86b97d5600.roa File: 2c433872-cf01-39e2-b679-9b86b97d5600.roa (raw, json) Hash identifier: KNyKbRvmZ1LW1uSLkyk9hKRKVEhLNiVpsDcJp4bC1JI= Subject key identifier: 58:32:60:DF:30:31:EC:84:65:0D:9D:99:85:09:F9:76:57:F4:22:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431E4AE62115DA85442E400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c433872-cf01-39e2-b679-9b86b97d5600.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 24.127.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:e4:ae:62:11:5d:a8:54:42:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e21620f4-890a-4d87-83f0-14d4b29925f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:9a:52:32:96:95:c4:21:97:2d:eb:fb:e5: 2a:15:c8:70:98:e8:04:c5:51:fe:2f:f0:73:38:ad: 60:1d:4d:b6:a0:de:71:41:e8:ef:f0:78:1f:3a:68: 23:9c:9d:bd:2d:71:c7:63:da:b5:f5:67:e5:54:a4: 36:a4:62:e1:32:c3:e6:f2:65:2b:3b:8a:a0:14:07: ed:e9:83:bf:d6:94:8a:27:28:a2:a2:ab:bd:b1:e2: 3a:70:8d:d5:a4:b0:8a:f9:36:96:e9:e4:c7:0b:41: aa:73:12:42:d1:3f:c8:d1:4d:20:bd:a6:a2:06:b4: 56:9c:6a:ba:10:ce:37:85:a6:ba:b0:bb:5d:7c:b9: df:1b:60:13:42:51:ad:e4:5d:ca:ba:84:2f:56:1f: 09:43:9d:ac:9d:f7:78:f9:a7:db:9a:49:60:a4:f5: 5b:5b:8e:23:dc:8c:3f:56:cf:c6:86:0a:70:f7:80: 7f:06:82:90:42:1c:ec:08:21:cd:48:b7:2b:fd:86: 18:1f:cb:de:f6:ef:b2:92:47:ab:8f:c2:2c:8e:10: 70:a7:10:77:d7:f2:b9:ed:32:2a:c6:b8:6b:a1:f3: 28:b7:72:21:19:53:17:e1:1e:e2:ac:1d:d1:3c:80: 75:41:74:f6:4e:75:fc:06:54:53:ca:7e:61:e6:45: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:60:DF:30:31:EC:84:65:0D:9D:99:85:09:F9:76:57:F4:22:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c433872-cf01-39e2-b679-9b86b97d5600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.127.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:98:b7:71:f6:1d:26:68:c7:af:6c:57:6e:14:98:db:71: be:8c:81:e2:85:c9:dd:44:16:23:1d:7e:23:b7:0c:7a:61:d2: 26:e1:bd:2a:21:b2:86:23:26:c1:b1:db:80:5c:de:ec:ba:ac: 62:af:85:89:c5:a8:a5:71:14:6a:91:37:2c:96:77:3e:c3:05: bb:6f:56:a2:7d:e9:3e:cf:66:6a:df:d8:f8:6c:95:24:d4:7d: 07:87:a0:78:1c:6a:56:48:7a:ec:ab:97:9c:96:16:f5:86:54: e2:95:65:c8:94:15:dd:58:03:2f:76:29:01:91:1f:b6:44:fa: 0e:61:a1:cf:3e:16:55:bd:f1:e1:c7:11:d5:33:67:3e:ac:d2: ac:4c:95:ab:b6:6d:bd:b7:0f:c4:32:63:64:da:ec:97:dc:71: f3:6a:25:b3:24:30:f1:ae:6c:71:a8:c2:1b:ef:08:36:fd:fa: ce:10:e1:2f:1e:c7:fc:e5:1c:43:dc:bd:4b:fd:66:07:a5:14: 53:c8:65:ce:e1:94:9d:52:aa:96:ba:79:98:8d:ca:06:58:ee: 58:d1:b3:70:eb:c8:4d:67:39:69:35:cf:ce:97:0a:65:85:78: a7:31:01:4e:51:6e:f1:77:1d:0c:5d:8a:2e:62:f0:5b:7b:58: 30:ef:e8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMeSuYhFdqFRC5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTIxNjIwZjQtODkwYS00ZDg3LTgzZjAtMTRkNGIyOTkyNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0+aUjKWlcQhly3r++UqFchwmOgExVH+L/Bz OK1gHU22oN5xQejv8HgfOmgjnJ29LXHHY9q19WflVKQ2pGLhMsPm8mUrO4qgFAft 6YO/1pSKJyiioqu9seI6cI3VpLCK+TaW6eTHC0GqcxJC0T/I0U0gvaaiBrRWnGq6 EM43haa6sLtdfLnfG2ATQlGt5F3KuoQvVh8JQ52snfd4+afbmklgpPVbW44j3Iw/ Vs/Ghgpw94B/BoKQQhzsCCHNSLcr/YYYH8ve9u+ykkerj8IsjhBwpxB31/K57TIq xrhrofMot3IhGVMX4R7irB3RPIB1QXT2TnX8BlRTyn5h5kXL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgyYN8wMeyEZQ2dmYUJ+XZX9CJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM0MzM4NzItY2YwMS0z OWUyLWI2NzktOWI4NmI5N2Q1NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK0mLdx9h0maMevbFduFJjbcb6MgeKFyd1EFiMdfiO3DHph0ibhvSoh soYjJsGx24Bc3uy6rGKvhYnFqKVxFGqRNyyWdz7DBbtvVqJ96T7PZmrf2PhslSTU fQeHoHgcalZIeuyrl5yWFvWGVOKVZciUFd1YAy92KQGRH7ZE+g5hoc8+FlW98eHH EdUzZz6s0qxMlau2bb23D8QyY2Ta7JfccfNqJbMkMPGubHGowhvvCDb9+s4Q4S8e x/zlHEPcvUv9ZgelFFPIZc7hlJ1Sqpa6eZiNygZY7ljRs3DryE1nOWk1z86XCmWF eKcxAU5RbvF3HQxdii5i8Ft7WDDv6PI= -----END CERTIFICATE-----Generated at Wed Jun 4 23:42:03 2025 by rpki-client