$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83311e40-ab7f-3082-bb84-04c60f5a5389.roa File: 83311e40-ab7f-3082-bb84-04c60f5a5389.roa (raw, json) Hash identifier: wBKkCFZIg3LW06ceRBUEtyUjzmOJurcNbePWJ5lYnj0= Subject key identifier: 21:16:1F:B5:CA:35:7A:C2:BF:06:3C:77:9B:98:93:A9:B2:63:34:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8213FF560C546FABDBDDE Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83311e40-ab7f-3082-bb84-04c60f5a5389.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 24.20.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:21:3f:f5:60:c5:46:fa:bd:bd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b2e0f0cb-f6ca-4e97-afc4-2c04eb45716c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:55:c1:eb:06:45:99:10:a0:de:f4:9f:87: 06:2d:aa:77:7d:64:eb:33:31:30:13:79:d1:15:48: d1:6f:36:4e:51:49:e2:b4:fd:0f:f6:54:60:71:f0: d2:0b:62:05:fd:d4:ca:46:e3:09:99:69:71:b9:f3: eb:34:cd:35:69:35:80:7c:48:76:b5:1b:ca:bb:b1: 90:2a:d5:c4:41:ac:10:c2:14:8d:9b:9d:59:fd:8b: b3:3b:85:80:40:b6:55:40:6b:02:db:80:86:25:3c: 6b:42:b7:12:f8:59:28:db:e1:34:4c:3f:80:84:ff: eb:0b:a1:32:1f:e2:01:52:3c:84:f8:a6:23:bc:f6: 94:ed:48:54:e8:b6:e3:18:79:f6:d0:30:6e:45:2a: be:01:5f:1f:2e:b4:8e:cf:4e:b8:69:0e:f9:f8:e3: e8:ff:3c:a8:81:1d:f3:f7:e0:a9:3c:9c:8c:91:7f: 18:60:5c:4c:e7:6b:99:87:8e:f4:2f:81:f5:82:ee: 0d:09:cb:8c:c6:78:4f:93:69:85:68:74:6b:e4:f9: 15:bb:83:17:15:6d:cf:f1:16:a3:d0:fb:75:1a:96: 9b:0a:07:93:8a:18:fe:7a:5a:32:cd:75:93:26:80: 3f:f2:7c:5c:d0:6e:51:f0:a1:54:01:65:a2:29:22: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:1F:B5:CA:35:7A:C2:BF:06:3C:77:9B:98:93:A9:B2:63:34:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83311e40-ab7f-3082-bb84-04c60f5a5389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:5d:e8:e1:88:72:98:b7:b9:1f:26:45:4f:3d:29:bc:a4:d5: 9f:9c:b1:a8:f6:18:e7:89:5c:94:d1:fd:e5:60:f4:99:4d:ff: 7b:07:69:5e:46:1e:47:f5:c0:39:c1:61:4c:42:4f:6a:03:ba: 73:ff:e4:80:b3:54:a6:42:e8:2b:29:5f:5f:9c:8f:d6:8c:b9: 1f:6f:5d:aa:d2:cc:57:c4:81:93:98:6c:aa:e4:02:8b:92:d9: 53:76:51:01:fb:b2:24:d0:3e:c3:d8:d3:8f:1d:1c:af:0a:a8: a2:b2:70:11:29:e4:57:04:7b:06:92:bb:b5:65:48:cd:f1:68: 2b:d1:00:ff:d4:49:d7:38:66:a1:cd:99:ec:39:60:72:e4:a4: 01:dd:5d:68:6f:0a:23:e6:ca:99:36:a7:7b:e7:80:c0:de:38: 52:90:99:25:a0:87:b9:7f:28:ae:49:3b:3c:22:cb:4a:da:84: b7:ff:ce:3b:62:1a:16:07:30:be:db:a6:f5:6d:86:8f:a9:6e: 8d:e1:bd:e8:e8:cc:15:54:3c:95:f4:05:23:e5:8b:5b:01:99: ea:7d:08:21:c3:5c:21:a7:86:a7:e9:8e:90:0e:33:3a:5b:bf: 5c:a4:d6:ff:63:77:07:3c:28:1b:7e:09:c8:bc:76:75:49:50: 74:90:bf:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+CE/9WDFRvq9vd4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjJlMGYwY2ItZjZjYS00ZTk3LWFmYzQtMmMwNGViNDU3MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhotVwesGRZkQoN70n4cGLap3fWTrMzEwE3nR FUjRbzZOUUnitP0P9lRgcfDSC2IF/dTKRuMJmWlxufPrNM01aTWAfEh2tRvKu7GQ KtXEQawQwhSNm51Z/YuzO4WAQLZVQGsC24CGJTxrQrcS+Fko2+E0TD+AhP/rC6Ey H+IBUjyE+KYjvPaU7UhU6LbjGHn20DBuRSq+AV8fLrSOz064aQ75+OPo/zyogR3z 9+CpPJyMkX8YYFxM52uZh470L4H1gu4NCcuMxnhPk2mFaHRr5PkVu4MXFW3P8Raj 0Pt1GpabCgeTihj+eloyzXWTJoA/8nxc0G5R8KFUAWWiKSJDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEWH7XKNXrCvwY8d5uYk6myYzTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODMzMTFlNDAtYWI3Zi0z MDgyLWJiODQtMDRjNjBmNWE1Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJd6OGIcpi3uR8mRU89Kbyk1Z+csaj2GOeJXJTR/eVg9JlN/3sHaV5G Hkf1wDnBYUxCT2oDunP/5ICzVKZC6CspX1+cj9aMuR9vXarSzFfEgZOYbKrkAouS 2VN2UQH7siTQPsPY048dHK8KqKKycBEp5FcEewaSu7VlSM3xaCvRAP/USdc4ZqHN mew5YHLkpAHdXWhvCiPmypk2p3vngMDeOFKQmSWgh7l/KK5JOzwiy0rahLf/zjti GhYHML7bpvVtho+pbo3hvejozBVUPJX0BSPli1sBmep9CCHDXCGnhqfpjpAOMzpb v1yk1v9jdwc8KBt+Cci8dnVJUHSQv3Q= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:49 2025 by rpki-client