$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a0eac3e-ca03-3445-9560-502b81935ea9.roa File: 5a0eac3e-ca03-3445-9560-502b81935ea9.roa (raw, json) Hash identifier: Ah0b5EVyvzCNvYpn1JZHywZZDVWkU/uK9rCwlqbtKuo= Subject key identifier: 5B:C6:1B:AB:BB:1E:E2:39:6F:47:33:D3:45:76:BA:4C:A8:EF:9A:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6F30E61D9B01A0440C980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a0eac3e-ca03-3445-9560-502b81935ea9.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.60.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:f3:0e:61:d9:b0:1a:04:40:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=e8ac01d7-907d-48e5-a192-70a706d8b545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:0b:b7:c4:68:65:ac:49:68:df:54:87:1c: d7:e9:7d:cb:01:22:9a:bb:2e:3b:8c:fc:92:83:43: 17:87:92:ec:19:3f:42:52:95:c1:f7:62:cd:9a:b3: ec:c0:6e:38:35:06:3c:ee:66:0b:e2:d1:0b:d0:16: 5c:a9:15:37:76:91:a6:6f:88:a5:08:17:c1:b6:e1: fd:e2:fd:03:2d:9b:ee:44:bd:d4:3c:ec:a2:d4:ce: c2:59:75:f3:3e:ff:20:f3:42:a4:ae:de:be:39:88: 52:29:29:fe:80:2c:1e:a2:8c:20:a6:2e:f8:4a:7c: 21:2f:89:da:e4:e0:7c:10:64:5d:f4:c0:19:eb:b8: 48:6e:46:44:e5:38:d6:51:8a:e5:17:b0:10:4e:4a: 90:70:8e:c2:3c:c1:88:79:30:19:74:6e:fc:86:7d: a7:95:1d:2f:98:3c:32:92:44:9b:d1:b5:4c:3a:28: a7:c6:44:bc:f1:db:e8:50:bb:f9:91:a8:72:36:91: e2:ce:ab:8a:1b:7f:2f:be:59:bb:32:db:1e:cf:c4: 7a:51:6c:b8:dd:d6:3f:30:32:38:a2:35:8e:a3:d9: 3a:3a:8c:21:6f:c7:a5:e1:d9:de:e0:06:13:62:c2: be:40:90:1f:fa:82:48:19:e0:70:69:7e:66:06:90: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:1B:AB:BB:1E:E2:39:6F:47:33:D3:45:76:BA:4C:A8:EF:9A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a0eac3e-ca03-3445-9560-502b81935ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.60.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a7:92:29:a4:81:93:1b:8a:1c:f0:28:fa:0c:0f:b7:0e:0b: 7c:10:66:df:a4:d9:11:89:fc:c9:14:9e:5b:2c:e9:5c:f6:96: 05:30:98:0d:b8:06:08:a6:89:0a:13:cf:27:19:0d:19:fc:18: f8:f4:fc:65:59:73:8d:13:de:eb:33:6d:22:bd:d0:fb:b8:a7: 0a:7e:c2:7e:12:55:fa:78:dd:1b:5d:7c:84:22:fd:10:79:3a: 82:61:0b:a6:86:cc:ee:f1:07:ba:9e:3c:f9:6c:da:ed:b2:c1: 46:e6:13:1e:c8:02:0d:2f:f8:65:92:e9:a0:58:83:a1:28:90: b3:b0:21:55:f6:39:06:ed:0a:2a:22:b0:53:9f:da:49:87:2c: 06:37:7d:ad:18:a5:ae:03:d7:86:3f:17:e5:78:31:c2:ee:dc: 03:3e:b3:a3:86:c6:d5:ba:63:97:eb:92:94:aa:37:22:60:28: 07:6d:80:57:6c:4a:9f:2d:1e:6b:0e:2b:57:9e:ca:d4:1c:4a: 87:46:1e:1d:ee:72:e1:d7:47:6a:87:cc:4c:29:5e:85:16:25: 28:ec:f9:2d:bd:11:1c:04:01:f0:fc:3d:f5:99:60:b2:0d:84: 62:a1:bd:20:b9:75:6e:74:26:9c:26:33:40:8f:d4:6c:cc:30: 4e:38:54:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09vMOYdmwGgRAyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZThhYzAxZDctOTA3ZC00OGU1LWExOTItNzBhNzA2ZDhiNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFkLt8RoZaxJaN9UhxzX6X3LASKauy47jPyS g0MXh5LsGT9CUpXB92LNmrPswG44NQY87mYL4tEL0BZcqRU3dpGmb4ilCBfBtuH9 4v0DLZvuRL3UPOyi1M7CWXXzPv8g80Kkrt6+OYhSKSn+gCweoowgpi74SnwhL4na 5OB8EGRd9MAZ67hIbkZE5TjWUYrlF7AQTkqQcI7CPMGIeTAZdG78hn2nlR0vmDwy kkSb0bVMOiinxkS88dvoULv5kahyNpHizquKG38vvlm7Mtsez8R6UWy43dY/MDI4 ojWOo9k6Oowhb8el4dne4AYTYsK+QJAf+oJIGeBwaX5mBpD+CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvGG6u7HuI5b0cz00V2ukyo75o9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEwZWFjM2UtY2EwMy0z NDQ1LTk1NjAtNTAyYjgxOTM1ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOnkimkgZMbihzwKPoMD7cOC3wQZt+k2RGJ/MkUnlss6Vz2lgUwmA24 BgimiQoTzycZDRn8GPj0/GVZc40T3uszbSK90Pu4pwp+wn4SVfp43RtdfIQi/RB5 OoJhC6aGzO7xB7qePPls2u2ywUbmEx7IAg0v+GWS6aBYg6EokLOwIVX2OQbtCioi sFOf2kmHLAY3fa0Ypa4D14Y/F+V4McLu3AM+s6OGxtW6Y5frkpSqNyJgKAdtgFds Sp8tHmsOK1eeytQcSodGHh3ucuHXR2qHzEwpXoUWJSjs+S29ERwEAfD8PfWZYLIN hGKhvSC5dW50JpwmM0CP1GzMME44VCY= -----END CERTIFICATE-----Generated at Sun Apr 6 13:51:23 2025 by rpki-client