$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4600d455-c07c-33c9-9a17-2132f467c11f.roa File: 4600d455-c07c-33c9-9a17-2132f467c11f.roa (raw, json) Hash identifier: mSzZAeNNTjpAMoaIvBpFZO5hYr5PiFgc9XCjjpOJitE= Subject key identifier: 4D:BF:0E:5C:A4:E0:D0:EB:58:9E:6C:CB:3B:D3:F6:DB:14:5B:49:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CB6B8B2C5D14A13FEB680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4600d455-c07c-33c9-9a17-2132f467c11f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 23.24.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:b6:b8:b2:c5:d1:4a:13:fe:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3d196105-d12c-4a5a-961c-c7fd086ca3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:35:b9:4d:da:d0:96:11:b6:ac:65:b3:9b: 80:5b:e5:e7:a6:80:26:92:1e:56:48:48:fb:e7:6d: 1f:d7:51:8b:0b:3e:86:ea:fe:79:a8:7c:a9:13:e3: cc:3e:6e:17:66:f4:6e:83:57:e2:ce:4c:8d:f7:95: 25:06:67:14:03:f3:12:46:97:c2:78:f8:c5:4b:bf: 73:29:a8:18:49:d0:83:e2:07:c8:8d:73:57:26:95: 29:22:12:c9:5f:08:56:53:4b:d5:98:df:88:49:a8: 3c:fa:0d:13:a9:de:6f:4b:c5:07:e3:38:ec:82:fd: 19:5b:6a:8e:22:fe:04:32:a6:0c:76:a6:43:53:45: f9:66:2a:93:06:84:d9:cb:39:5e:10:68:5c:58:17: 89:0e:90:5a:87:b9:e2:b9:a1:be:9d:75:94:cf:96: 2f:6f:58:f5:68:2d:e5:73:1d:f5:89:08:2a:fb:67: 98:31:34:d5:ce:25:57:0c:90:08:ae:05:08:12:7d: 76:a0:d7:cc:5a:fc:02:be:e8:10:97:b3:27:c4:ca: 56:08:4e:c7:08:bf:d7:df:4e:bb:fa:41:e8:25:fc: cf:7f:10:1b:c8:c3:66:ae:c9:cb:01:f0:67:84:ec: e6:f1:9b:51:6e:7a:55:64:81:c5:03:ea:e5:ba:b9: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:0E:5C:A4:E0:D0:EB:58:9E:6C:CB:3B:D3:F6:DB:14:5B:49:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4600d455-c07c-33c9-9a17-2132f467c11f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 23.24.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:1d:d8:78:b5:1e:8b:70:66:25:11:6a:45:86:6c:7d:ca:fd: 7f:0f:33:f8:31:3c:d5:eb:39:67:70:9f:7b:30:7b:b0:f7:9f: 70:2d:a3:eb:51:4e:f0:2f:b0:c2:5a:0b:f9:3e:7c:e6:3c:f9: 75:19:8d:d3:55:c8:9a:68:69:fd:dc:06:76:00:e1:9e:bb:36: da:f5:72:60:ee:af:2b:b3:15:b8:b0:1e:89:24:55:39:6a:cb: dd:22:34:24:d9:ef:42:1a:fc:14:df:b0:d6:02:63:eb:fd:95: 6e:52:11:4e:0a:3a:a9:c5:83:ec:bd:a1:8a:f7:0e:59:34:e4: 8f:8c:49:fb:f5:c8:d1:0f:de:44:70:cd:34:66:8a:f8:1a:3f: ed:b2:d6:02:b4:2d:83:34:9b:cd:2d:52:65:8f:69:c7:27:f8: 9a:1e:71:45:9f:cb:29:17:f7:33:86:4e:e7:83:61:49:0e:bf: 98:eb:ed:0b:66:32:cd:bf:86:59:c4:9e:0e:8c:dd:27:57:a5: d7:6c:6a:dc:33:55:9d:02:3e:93:37:a4:06:07:f9:8b:95:d4: aa:a0:16:08:88:34:f2:27:4a:73:57:65:c0:b1:35:90:36:dd: 60:8d:5e:e4:ec:c3:32:36:b4:97:1d:72:6f:d0:e0:5d:57:1e: 12:f8:65:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebLa4ssXRShP+toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2QxOTYxMDUtZDEyYy00YTVhLTk2MWMtYzdmZDA4NmNhM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8I1uU3a0JYRtqxls5uAW+XnpoAmkh5WSEj7 520f11GLCz6G6v55qHypE+PMPm4XZvRug1fizkyN95UlBmcUA/MSRpfCePjFS79z KagYSdCD4gfIjXNXJpUpIhLJXwhWU0vVmN+ISag8+g0Tqd5vS8UH4zjsgv0ZW2qO Iv4EMqYMdqZDU0X5ZiqTBoTZyzleEGhcWBeJDpBah7niuaG+nXWUz5Yvb1j1aC3l cx31iQgq+2eYMTTVziVXDJAIrgUIEn12oNfMWvwCvugQl7MnxMpWCE7HCL/X3067 +kHoJfzPfxAbyMNmrsnLAfBnhOzm8ZtRbnpVZIHFA+rlurkP1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2/Dlyk4NDrWJ5syzvT9tsUW0nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDYwMGQ0NTUtYzA3Yy0z M2M5LTlhMTctMjEzMmY0NjdjMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFxhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAd2Hi1HotwZiURakWGbH3K/X8PM/gxPNXrOWdwn3swe7D3n3Ato+tR TvAvsMJaC/k+fOY8+XUZjdNVyJpoaf3cBnYA4Z67Ntr1cmDuryuzFbiwHokkVTlq y90iNCTZ70Ia/BTfsNYCY+v9lW5SEU4KOqnFg+y9oYr3Dlk05I+MSfv1yNEP3kRw zTRmivgaP+2y1gK0LYM0m80tUmWPaccn+JoecUWfyykX9zOGTueDYUkOv5jr7Qtm Ms2/hlnEng6M3SdXpddsatwzVZ0CPpM3pAYH+YuV1KqgFgiINPInSnNXZcCxNZA2 3WCNXuTswzI2tJcdcm/Q4F1XHhL4ZUo= -----END CERTIFICATE-----Generated at Sun Apr 6 20:27:26 2025 by rpki-client