$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6495fe96-5dac-36a8-8565-f18be87005f3.roa File: 6495fe96-5dac-36a8-8565-f18be87005f3.roa (raw, json) Hash identifier: +Vxpq2xHgdBImjaGz6RwuX+P3kXIJTx+WJpmwCcGA3g= Subject key identifier: F9:28:C8:FE:F0:0C:87:A8:7C:EC:C6:87:B2:E1:8B:4A:1F:AD:B4:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FFB64879C750FF85A1C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6495fe96-5dac-36a8-8565-f18be87005f3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 24.218.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:fb:64:87:9c:75:0f:f8:5a:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=821f9f19-3aac-4e7d-be8b-7af87abc034b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:48:e7:6f:bc:1d:3e:b9:c6:6f:af:59:9a: 98:df:1b:ee:d1:c2:83:f2:a5:af:41:10:a9:ef:c5: 27:99:fd:5c:13:a3:2c:af:c0:72:df:9b:50:07:8b: 1c:9c:ea:a6:47:c4:1f:62:8b:25:bf:93:b1:98:c4: fe:b5:21:f5:ad:f0:e0:c8:c6:e4:bb:96:74:5d:fc: fb:81:b7:4c:c5:2d:f0:8d:ed:f0:20:4a:e8:8e:bf: 16:19:55:a8:26:5f:ed:c2:aa:ed:96:55:8d:86:13: 93:9f:31:3c:7e:83:0d:6e:70:6d:f5:6f:cf:1d:9e: 0f:f9:08:14:a8:19:85:58:0c:52:ee:74:27:d7:29: 58:e9:89:fa:50:00:fe:8b:53:ee:29:0e:3f:05:a5: 97:e8:4a:b8:a2:f9:54:aa:94:5d:f2:72:9a:ce:e5: 4f:58:f8:a6:b9:33:02:e9:5d:1d:33:96:ab:b6:90: d8:38:ea:96:d5:ed:e7:89:53:b2:cf:62:cc:0f:22: 44:8c:41:9d:af:ae:15:48:a6:7e:09:a4:14:21:77: e4:7d:51:9f:45:7d:70:b6:4b:02:a6:77:e6:29:80: be:07:b2:62:20:a2:c5:8a:28:3f:2f:0e:c4:33:0d: 2b:b9:7f:3b:78:c8:ba:f6:08:8f:df:bf:48:5f:ea: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:28:C8:FE:F0:0C:87:A8:7C:EC:C6:87:B2:E1:8B:4A:1F:AD:B4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6495fe96-5dac-36a8-8565-f18be87005f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.218.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f6:38:6f:62:3b:a6:1c:f7:8f:8a:8f:6b:49:2f:77:02:37: c4:59:c6:61:11:9a:7e:b5:d3:60:f5:41:14:95:48:fc:62:28: c3:7e:00:c0:5a:5b:d3:ab:dd:d7:b1:33:0f:dd:27:8a:1e:96: 7c:e4:73:5d:f3:61:32:16:4c:fc:ad:ad:da:37:37:64:01:4c: ec:d1:65:2c:b8:fe:49:c4:1d:e3:1c:8d:3d:63:ba:78:d0:5b: 01:77:6e:5b:66:a1:8a:7d:e9:6e:0b:35:c4:2a:92:3b:77:cb: f4:9e:79:2f:4f:18:13:7a:ba:bf:b7:e3:72:1d:0a:40:d9:50: ec:92:33:51:d0:91:b2:92:74:52:b1:2e:1f:b0:23:1f:3c:9e: e0:ce:da:cf:8a:1b:bf:a1:83:8f:96:78:6e:72:7e:00:62:13: 8e:b5:72:a8:41:80:7d:a9:85:8e:19:f6:12:99:9f:c6:4a:8a: d6:77:19:15:05:fa:51:cf:9f:2a:d3:ea:81:36:d7:93:48:ab: 5d:25:74:58:a9:4c:ea:64:16:18:9e:c8:3a:f1:83:0c:d0:cd: 4c:ee:af:5a:1a:62:4c:8e:76:e1:4c:0d:41:00:db:36:16:a5: da:41:c3:13:73:ff:69:41:67:78:97:09:b9:dc:c1:e0:93:39: 87:e4:de:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/tkh5x1D/haHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODIxZjlmMTktM2FhYy00ZTdkLWJlOGItN2FmODdhYmMwMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7hI52+8HT65xm+vWZqY3xvu0cKD8qWvQRCp 78Unmf1cE6Msr8By35tQB4scnOqmR8QfYoslv5OxmMT+tSH1rfDgyMbku5Z0Xfz7 gbdMxS3wje3wIErojr8WGVWoJl/twqrtllWNhhOTnzE8foMNbnBt9W/PHZ4P+QgU qBmFWAxS7nQn1ylY6Yn6UAD+i1PuKQ4/BaWX6Eq4ovlUqpRd8nKazuVPWPimuTMC 6V0dM5artpDYOOqW1e3niVOyz2LMDyJEjEGdr64VSKZ+CaQUIXfkfVGfRX1wtksC pnfmKYC+B7JiIKLFiig/Lw7EMw0ruX87eMi69giP379IX+pPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkoyP7wDIeofOzGh7Lhi0ofrbRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ5NWZlOTYtNWRhYy0z NmE4LTg1NjUtZjE4YmU4NzAwNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr2OG9iO6Yc94+Kj2tJL3cCN8RZxmERmn6102D1QRSVSPxiKMN+AMBa W9Or3dexMw/dJ4oelnzkc13zYTIWTPytrdo3N2QBTOzRZSy4/knEHeMcjT1junjQ WwF3bltmoYp96W4LNcQqkjt3y/SeeS9PGBN6ur+343IdCkDZUOySM1HQkbKSdFKx Lh+wIx88nuDO2s+KG7+hg4+WeG5yfgBiE461cqhBgH2phY4Z9hKZn8ZKitZ3GRUF +lHPnyrT6oE215NIq10ldFipTOpkFhieyDrxgwzQzUzur1oaYkyOduFMDUEA2zYW pdpBwxNz/2lBZ3iXCbncweCTOYfk3vY= -----END CERTIFICATE-----Generated at Tue Jun 3 07:03:57 2025 by rpki-client