$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa File: 4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa (raw, json) Hash identifier: JOPdIFkNPLgl5VTjrX2KmjDWS+mUL8+L+GGdFQ2m764= Subject key identifier: 38:91:AA:DF:58:93:33:B6:EE:23:64:FF:E5:19:04:2C:C2:A8:45:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C441243076697BC99FD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 24.118.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:44:12:43:07:66:97:bc:99:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=fedda0c6-970a-4152-abbc-94f98ff42fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:9a:3f:e1:b9:57:89:0a:d0:5e:f3:ca:85: f2:2d:5c:8f:61:f4:16:ea:2e:25:8d:53:64:cb:0e: 3d:2f:60:8b:c6:3b:12:4d:c2:12:63:80:58:c2:0a: dc:57:b8:cd:2c:e7:dc:82:2b:b6:b4:c6:6b:81:6d: 50:67:03:f6:34:50:a0:28:d9:67:3e:40:20:1f:69: 63:c0:cd:e2:0f:7f:5c:98:93:d9:3a:a8:50:81:1d: 2b:54:2e:4e:09:d7:01:66:1d:92:12:eb:5a:9f:25: 31:b2:90:dc:2f:f5:b7:9b:45:de:6e:d6:30:5f:24: 21:b0:79:d3:25:73:b3:bf:30:4c:6d:40:e5:23:9c: ca:0a:ae:1e:b4:c7:61:07:0e:cb:2e:70:0a:48:b0: c7:b8:d2:a9:81:a1:d4:d9:d7:dc:f2:f6:40:e3:da: 68:f8:21:86:6a:d1:74:6e:0e:8b:b0:9d:af:fc:66: dc:39:38:65:70:e1:59:da:51:95:36:f0:e4:fc:da: 15:7b:3c:c5:b8:07:92:13:9d:4a:ae:6a:26:29:70: fc:e6:60:8c:97:ce:21:05:34:f1:37:2a:f2:33:60: 39:a7:1b:c1:99:e2:b6:b3:55:5f:c5:8b:09:04:1b: ac:cd:d4:9e:68:c5:5b:7a:28:76:1d:5c:7e:b1:99: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:91:AA:DF:58:93:33:B6:EE:23:64:FF:E5:19:04:2C:C2:A8:45:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4373144f-71fa-3885-9f33-99ecc6ed8ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f1:65:03:8d:f7:5d:b6:99:57:8e:bf:0b:e6:a5:15:07:bd: de:be:7c:78:e2:ae:c8:80:20:32:51:8c:2f:d4:67:5b:8e:86: c0:92:6e:17:bc:a0:a8:ec:5e:37:9e:3a:b9:86:6f:0c:c5:06: 96:40:3a:58:3a:1d:f8:b0:53:77:c6:3b:9e:aa:bb:4c:4a:af: 0e:90:e8:3d:32:eb:5d:e2:cc:c1:c9:92:cf:27:22:b7:bd:25: 5d:4f:2a:45:2f:c3:fe:ae:f7:25:18:62:bc:b6:28:68:fb:5c: 0a:3d:d5:19:4e:47:16:50:b8:f9:78:2f:1f:d0:18:96:39:76: cc:74:64:8c:35:ef:56:02:9d:7f:0f:e2:52:bd:2b:f3:53:f0: 5a:42:a2:3b:da:d3:27:7d:3a:50:5e:c9:aa:92:8c:4a:ea:40: 21:d4:d7:aa:86:ed:ec:41:05:49:6f:83:69:0d:fb:88:90:b7: f3:04:c9:a6:51:03:91:98:52:a0:c2:18:0e:77:c4:24:51:4d: 49:ec:79:c0:0f:5d:23:65:6a:eb:29:11:44:5a:f4:ad:ad:85: 48:11:bb:68:ee:93:c2:72:b2:c3:af:5e:e0:b6:a7:8b:a6:3b: cc:cd:16:32:27:50:72:08:3b:98:36:4a:80:9c:75:f4:23:e6: d5:c4:dc:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebEQSQwdml7yZ/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmVkZGEwYzYtOTcwYS00MTUyLWFiYmMtOTRmOThmZjQyZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1maP+G5V4kK0F7zyoXyLVyPYfQW6i4ljVNk yw49L2CLxjsSTcISY4BYwgrcV7jNLOfcgiu2tMZrgW1QZwP2NFCgKNlnPkAgH2lj wM3iD39cmJPZOqhQgR0rVC5OCdcBZh2SEutanyUxspDcL/W3m0XebtYwXyQhsHnT JXOzvzBMbUDlI5zKCq4etMdhBw7LLnAKSLDHuNKpgaHU2dfc8vZA49po+CGGatF0 bg6LsJ2v/GbcOThlcOFZ2lGVNvDk/NoVezzFuAeSE51KrmomKXD85mCMl84hBTTx NyryM2A5pxvBmeK2s1VfxYsJBBuszdSeaMVbeih2HVx+sZkPvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiRqt9YkzO27iNk/+UZBCzCqEUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM3MzE0NGYtNzFmYS0z ODg1LTlmMzMtOTllY2M2ZWQ4YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTxZQON9122mVeOvwvmpRUHvd6+fHjirsiAIDJRjC/UZ1uOhsCSbhe8 oKjsXjeeOrmGbwzFBpZAOlg6HfiwU3fGO56qu0xKrw6Q6D0y613izMHJks8nIre9 JV1PKkUvw/6u9yUYYry2KGj7XAo91RlORxZQuPl4Lx/QGJY5dsx0ZIw171YCnX8P 4lK9K/NT8FpCojva0yd9OlBeyaqSjErqQCHU16qG7exBBUlvg2kN+4iQt/MEyaZR A5GYUqDCGA53xCRRTUnsecAPXSNlauspEURa9K2thUgRu2juk8JyssOvXuC2p4um O8zNFjInUHIIO5g2SoCcdfQj5tXE3Ek= -----END CERTIFICATE-----Generated at Mon Apr 7 09:45:29 2025 by rpki-client