$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a64ec32-f8c6-37e9-bb1a-888d58637fcb.roa File: 5a64ec32-f8c6-37e9-bb1a-888d58637fcb.roa (raw, json) Hash identifier: 01S4D/soY22UDUneYxjCvPIZT2fVa02g+Lv13dopGF0= Subject key identifier: FB:8F:3A:B8:BE:59:22:E3:B0:AE:DC:15:61:2E:9B:7E:B5:03:A7:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEA0CBD5192E55DCDE4990 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a64ec32-f8c6-37e9-bb1a-888d58637fcb.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 24.11.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:a0:cb:d5:19:2e:55:dc:de:49:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=664bb6d4-f85b-44e5-aef7-d4123a208f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:e5:67:d5:96:0b:91:88:e3:4e:ce:3f:75: 95:7d:5a:7b:48:f7:54:fc:44:41:ff:2b:90:17:28: 15:92:14:eb:75:45:83:80:2b:27:1b:60:f1:cf:6b: 89:93:3f:f0:24:89:08:b1:26:eb:6a:82:f5:0f:a7: c7:63:cf:31:4b:b7:fb:42:40:a1:4a:41:2f:ff:ee: f2:3e:bd:d5:7a:2c:35:71:65:24:af:7d:b9:2b:2e: 02:b3:07:ce:a6:4e:08:e6:3f:3c:5f:48:f9:04:3a: 99:31:4b:0a:a4:dc:3c:03:1e:55:b5:ad:3c:fe:ed: b4:1f:49:83:c5:f8:df:c7:ba:e3:9e:21:15:14:7c: a7:0f:c0:9c:d6:20:d6:01:4a:5b:42:e2:59:33:b8: 5b:8b:67:d5:05:db:50:02:0c:39:a4:f9:8d:a0:e0: e6:8b:64:d5:c1:70:8d:d1:e8:bb:63:68:51:70:22: ef:9c:dd:9c:8c:09:a9:5a:56:51:5d:c5:e7:9c:73: 4c:5c:32:a6:a1:f3:eb:6a:49:22:98:1b:31:4a:db: 68:f2:83:53:a5:17:fd:51:e6:6a:9d:e4:72:13:b3: 86:76:99:50:8a:54:90:fe:b8:63:e5:70:a7:7a:7f: 88:6b:2b:b4:ad:84:30:e4:b6:c8:96:a6:59:24:96: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:3A:B8:BE:59:22:E3:B0:AE:DC:15:61:2E:9B:7E:B5:03:A7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a64ec32-f8c6-37e9-bb1a-888d58637fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d1:fa:e1:66:08:aa:25:68:0e:df:09:4f:13:ea:5c:a9:5b: 19:30:4a:82:af:19:6b:73:c1:3d:15:93:18:f8:d3:45:eb:e8: 12:0b:e8:b5:34:7c:60:e6:f0:4d:64:4b:8e:6f:f0:84:63:c8: d7:8c:06:6f:6c:66:bc:5e:f8:b0:f6:50:e8:aa:45:85:2d:30: 8a:d5:d9:36:0a:67:d3:4e:35:90:66:8e:12:8d:ab:84:a0:1b: 53:60:31:e7:a7:d6:74:14:48:09:08:11:5e:29:ef:20:9c:2b: 50:34:10:bb:26:d8:06:8b:79:50:15:7a:5a:dd:69:f1:28:56: ea:d7:97:35:89:28:b3:20:76:d0:d1:3b:98:ea:b9:40:f2:33: 0f:4e:3e:1e:12:50:7c:02:ca:88:64:2d:60:3d:80:62:7e:e7: e9:a1:1e:8b:b5:e3:67:ca:f2:c9:6c:30:5f:cb:12:00:c4:65: 68:9c:bc:a0:f5:49:a0:37:a4:a1:63:cb:8e:b2:63:af:da:2b: 91:dd:b9:e4:e4:48:39:39:7c:76:d3:4f:84:9f:ae:70:f0:4e: e7:01:91:dc:aa:f1:6d:7b:70:f2:e8:1b:9a:0f:f6:0b:de:45: 43:ac:3b:cc:ae:f8:f5:ad:3a:9e:d7:40:f3:da:84:34:37:dd: ad:f8:3c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqDL1RkuVdzeSZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjY0YmI2ZDQtZjg1Yi00NGU1LWFlZjctZDQxMjNhMjA4ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUzlZ9WWC5GI407OP3WVfVp7SPdU/ERB/yuQ FygVkhTrdUWDgCsnG2Dxz2uJkz/wJIkIsSbraoL1D6fHY88xS7f7QkChSkEv/+7y Pr3Veiw1cWUkr325Ky4CswfOpk4I5j88X0j5BDqZMUsKpNw8Ax5Vta08/u20H0mD xfjfx7rjniEVFHynD8Cc1iDWAUpbQuJZM7hbi2fVBdtQAgw5pPmNoODmi2TVwXCN 0ei7Y2hRcCLvnN2cjAmpWlZRXcXnnHNMXDKmofPrakkimBsxStto8oNTpRf9UeZq neRyE7OGdplQilSQ/rhj5XCnen+Iayu0rYQw5LbIlqZZJJZ02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuPOri+WSLjsK7cFWEum361A6foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE2NGVjMzItZjhjNi0z N2U5LWJiMWEtODg4ZDU4NjM3ZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHR+uFmCKolaA7fCU8T6lypWxkwSoKvGWtzwT0Vkxj400Xr6BIL6LU0 fGDm8E1kS45v8IRjyNeMBm9sZrxe+LD2UOiqRYUtMIrV2TYKZ9NONZBmjhKNq4Sg G1NgMeen1nQUSAkIEV4p7yCcK1A0ELsm2AaLeVAVelrdafEoVurXlzWJKLMgdtDR O5jquUDyMw9OPh4SUHwCyohkLWA9gGJ+5+mhHou142fK8slsMF/LEgDEZWicvKD1 SaA3pKFjy46yY6/aK5HdueTkSDk5fHbTT4SfrnDwTucBkdyq8W17cPLoG5oP9gve RUOsO8yu+PWtOp7XQPPahDQ33a34PNM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:27 2025 by rpki-client