$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539a9797-6be8-3aa6-8d7a-39d114da200a.roa File: 539a9797-6be8-3aa6-8d7a-39d114da200a.roa (raw, json) Hash identifier: qCdPcu2TdbB9Pd87O0KDj5VJYUSIkAoXNxBkLKhypvE= Subject key identifier: EC:A8:E1:3C:BC:35:FA:44:29:E3:32:A1:8A:B8:91:31:F4:77:5E:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0BB14D75AC42BB0C46BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539a9797-6be8-3aa6-8d7a-39d114da200a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 24.12.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:bb:14:d7:5a:c4:2b:b0:c4:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=78495fd6-748e-4e06-824d-58f8acdb8c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:63:40:63:07:54:05:0e:f3:e0:ba:dd:59: ac:96:91:9a:6a:33:18:92:3d:4b:38:30:ce:fa:8b: 25:66:38:65:2d:29:ca:49:24:f9:c9:90:27:a1:6a: b4:75:0d:96:56:76:c2:5a:01:44:86:f3:31:9c:bf: e5:e4:8f:0e:8e:52:d5:c0:5c:93:6a:d7:45:70:46: 66:3a:66:50:a8:e1:b2:15:c1:50:8c:22:b7:da:52: 1d:a8:7c:4e:12:e9:ed:2b:cb:10:e3:59:6f:df:27: 0f:99:a2:18:a7:b1:5f:8a:29:fe:db:40:ea:7c:73: 34:d5:f1:a1:f7:42:91:e3:2d:63:6a:82:6e:ce:9a: 17:d9:c9:5a:ed:ed:c9:f6:1f:3a:c4:5a:41:2f:af: d6:4e:61:60:c6:cc:6d:26:8f:7b:35:3e:34:07:58: 62:88:2a:9b:9f:96:ec:f2:8c:7a:e1:56:2a:d3:ef: ea:55:71:2a:f7:fe:b8:56:c1:e0:7e:fc:8f:9a:82: 1d:37:91:ea:7f:2b:b5:26:95:96:96:7d:04:e6:f9: c0:9f:f3:0b:44:8a:ef:d8:e1:de:20:5d:47:33:0b: e8:71:c3:23:3f:1c:9d:58:7b:22:e5:90:2e:c1:3d: 16:3f:bc:01:3c:99:ab:98:cf:da:31:9b:d1:d1:e7: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A8:E1:3C:BC:35:FA:44:29:E3:32:A1:8A:B8:91:31:F4:77:5E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539a9797-6be8-3aa6-8d7a-39d114da200a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b9:15:a0:fc:79:e4:a9:d6:c0:ba:f3:53:7e:09:f3:94:13: fd:42:c8:0e:31:3f:12:c2:7d:ae:67:f2:8f:7c:70:67:35:d3: b1:47:10:87:3b:b0:ff:0f:ec:6e:81:fd:b9:a9:94:d3:2d:69: 97:13:1e:fd:7f:38:6f:13:b9:93:3c:59:6e:56:68:0c:29:92: 53:36:d8:f6:e3:52:fc:61:41:c9:96:6f:07:5b:49:12:27:14: ca:ce:1d:7d:50:e0:cc:45:36:9e:94:e0:de:1a:5e:6b:dd:c1: d1:16:04:3e:04:df:da:de:b8:61:0d:8e:7b:42:62:94:34:0f: 69:3a:fc:ee:e2:82:86:a2:ad:9a:3d:75:97:3c:5d:36:0b:8d: 8b:60:4e:73:b2:f5:22:f7:07:ee:8d:0c:f7:38:95:22:f9:a7: 27:6d:b4:5c:f4:81:1d:81:6b:e2:9e:2a:79:1c:f2:13:a6:e6: 9a:f6:cc:fc:aa:d5:05:e7:b1:f8:e3:cc:ee:2d:23:69:89:c5: c6:b2:1f:7c:c1:fa:63:81:d1:ee:44:eb:cd:68:dc:11:04:94: 0c:b0:d4:8d:90:6f:ef:1b:b4:8a:e9:eb:41:1f:2f:03:57:ca: e2:48:b8:6d:a3:32:36:2f:e2:77:95:3e:59:02:83:4a:4e:89: ad:65:9a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssLsU11rEK7DEa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Nzg0OTVmZDYtNzQ4ZS00ZTA2LTgyNGQtNThmOGFjZGI4YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlVjQGMHVAUO8+C63VmslpGaajMYkj1LODDO +oslZjhlLSnKSST5yZAnoWq0dQ2WVnbCWgFEhvMxnL/l5I8OjlLVwFyTatdFcEZm OmZQqOGyFcFQjCK32lIdqHxOEuntK8sQ41lv3ycPmaIYp7Ffiin+20DqfHM01fGh 90KR4y1jaoJuzpoX2cla7e3J9h86xFpBL6/WTmFgxsxtJo97NT40B1hiiCqbn5bs 8ox64VYq0+/qVXEq9/64VsHgfvyPmoIdN5Hqfyu1JpWWln0E5vnAn/MLRIrv2OHe IF1HMwvoccMjPxydWHsi5ZAuwT0WP7wBPJmrmM/aMZvR0ee6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyo4Ty8NfpEKeMyoYq4kTH0d16LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM5YTk3OTctNmJlOC0z YWE2LThkN2EtMzlkMTE0ZGEyMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC5FaD8eeSp1sC681N+CfOUE/1CyA4xPxLCfa5n8o98cGc107FHEIc7 sP8P7G6B/bmplNMtaZcTHv1/OG8TuZM8WW5WaAwpklM22PbjUvxhQcmWbwdbSRIn FMrOHX1Q4MxFNp6U4N4aXmvdwdEWBD4E39reuGENjntCYpQ0D2k6/O7igoairZo9 dZc8XTYLjYtgTnOy9SL3B+6NDPc4lSL5pydttFz0gR2Ba+KeKnkc8hOm5pr2zPyq 1QXnsfjjzO4tI2mJxcayH3zB+mOB0e5E681o3BEElAyw1I2Qb+8btIrp60EfLwNX yuJIuG2jMjYv4neVPlkCg0pOia1lmoI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:50 2025 by rpki-client