$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/685f7fa0-b38c-3938-86ad-eed3bf9f23d9.roa File: 685f7fa0-b38c-3938-86ad-eed3bf9f23d9.roa (raw, json) Hash identifier: GGfrOUgiz2Z+w72O0wNdCACwalZF2Bh7Lu+625V77T8= Subject key identifier: F2:C5:8B:79:F6:01:F3:ED:EC:54:BD:B7:A3:59:C8:8E:85:56:F1:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0BE9FC77EAB9122646220 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/685f7fa0-b38c-3938-86ad-eed3bf9f23d9.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 24.14.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:be:9f:c7:7e:ab:91:22:64:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=cd9d8d87-f8f6-4f61-8883-b53aa050776f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:14:65:71:0e:ee:b3:b1:e7:f1:bc:88:67: 97:3b:e5:d2:8c:98:ce:03:2e:8b:f3:5b:9f:ce:43: e0:bc:1f:89:ef:f3:64:72:fa:75:27:c4:9d:7a:24: 96:a2:86:6b:b1:80:f7:5b:e3:8b:74:70:bd:b3:46: be:08:64:ab:e2:4c:9e:c3:a1:d4:dd:51:1a:22:25: 52:6d:83:e2:89:4c:f3:d7:c9:f0:a2:e4:ee:13:2f: 5b:9b:f0:b5:5f:6b:cc:81:9b:b7:5d:f1:35:4a:ae: 3a:22:30:98:ab:7d:9e:98:30:99:4a:94:76:de:84: 45:16:cc:e5:af:e7:8c:de:90:3f:a7:d8:09:44:60: 66:da:dc:29:95:24:28:68:d4:85:1e:f6:14:1c:21: 16:2b:f4:f6:1d:b7:3c:13:46:20:6c:e4:b1:90:17: 93:fe:75:16:66:81:70:55:65:06:0d:08:5f:2b:29: 5b:c5:08:0b:6f:23:a7:fd:df:aa:8b:1f:a9:b2:fb: 77:7c:9f:8d:92:3a:3f:40:40:ea:9b:67:c5:0d:36: 8b:b8:f1:36:9f:d5:95:0a:7f:05:6c:8c:0e:34:c1: 39:bf:fa:3f:eb:60:28:db:4a:e9:ba:9e:e1:fc:95: 5b:67:ae:ae:65:79:3f:48:76:3b:a0:52:97:82:a8: 40:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:8B:79:F6:01:F3:ED:EC:54:BD:B7:A3:59:C8:8E:85:56:F1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/685f7fa0-b38c-3938-86ad-eed3bf9f23d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.14.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1e:86:e2:c4:6b:53:38:ee:d0:c4:2d:60:31:5a:89:b0:c5: 05:4f:a7:b2:05:33:d8:71:f0:ea:c0:12:24:f1:3a:1d:de:16: 4c:d6:42:aa:4e:f0:7e:73:0d:83:41:bb:fc:a4:7b:2b:3b:f4: 15:71:4c:2c:f3:05:99:bd:7b:9f:d5:a6:f1:83:a1:c6:0f:20: 45:d1:2b:02:62:f1:53:d9:d5:b4:a5:5d:70:12:3c:53:12:58: f9:46:30:47:b5:6d:28:92:73:dd:f6:32:8d:85:42:83:06:a5: 7e:36:b5:fb:22:b6:f6:b8:88:27:81:4a:eb:95:cd:10:76:77: 05:be:b3:0d:83:08:6d:73:ab:9d:86:f0:b6:e2:b2:df:3e:84: 28:15:54:f9:0f:16:81:72:c5:a4:8d:92:bd:13:75:46:55:d6: ff:cc:41:f5:6f:13:31:a5:90:a8:ea:3e:42:c4:78:c0:a6:c3: 80:bb:5f:e6:22:b3:dc:9c:e5:f4:af:13:c1:52:ca:7f:4b:1c: 71:04:88:e7:c6:73:48:17:27:be:1a:b3:7e:72:da:a1:e4:3c: 68:a0:c6:c0:95:e0:9b:b4:c6:e6:25:18:4a:e3:ec:94:a1:ee: b0:f7:96:ff:59:33:32:0a:d5:bc:af:fe:35:f5:f3:d7:31:33: f1:02:25:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssL6fx36rkSJkYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q5ZDhkODctZjhmNi00ZjYxLTg4ODMtYjUzYWEwNTA3NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2UUZXEO7rOx5/G8iGeXO+XSjJjOAy6L81uf zkPgvB+J7/Nkcvp1J8SdeiSWooZrsYD3W+OLdHC9s0a+CGSr4kyew6HU3VEaIiVS bYPiiUzz18nwouTuEy9bm/C1X2vMgZu3XfE1Sq46IjCYq32emDCZSpR23oRFFszl r+eM3pA/p9gJRGBm2twplSQoaNSFHvYUHCEWK/T2Hbc8E0YgbOSxkBeT/nUWZoFw VWUGDQhfKylbxQgLbyOn/d+qix+psvt3fJ+Nkjo/QEDqm2fFDTaLuPE2n9WVCn8F bIwONME5v/o/62Ao20rpup7h/JVbZ66uZXk/SHY7oFKXgqhAawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLFi3n2AfPt7FS9t6NZyI6FVvFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg1ZjdmYTAtYjM4Yy0z OTM4LTg2YWQtZWVkM2JmOWYyM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwehuLEa1M47tDELWAxWomwxQVPp7IFM9hx8OrAEiTxOh3eFkzWQqpO 8H5zDYNBu/ykeys79BVxTCzzBZm9e5/VpvGDocYPIEXRKwJi8VPZ1bSlXXASPFMS WPlGMEe1bSiSc932Mo2FQoMGpX42tfsitva4iCeBSuuVzRB2dwW+sw2DCG1zq52G 8Lbist8+hCgVVPkPFoFyxaSNkr0TdUZV1v/MQfVvEzGlkKjqPkLEeMCmw4C7X+Yi s9yc5fSvE8FSyn9LHHEEiOfGc0gXJ74as35y2qHkPGigxsCV4Ju0xuYlGErj7JSh 7rD3lv9ZMzIK1byv/jX189cxM/ECJWY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:02:34 2025 by rpki-client