$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c9048f-a1e3-32af-8c02-fc4710fa0948.roa File: 86c9048f-a1e3-32af-8c02-fc4710fa0948.roa (raw, json) Hash identifier: cHGgi2ZrH0DGEDmJBYF7EWhUR1RNtnA+eb0ZzJPwwOI= Subject key identifier: 2C:BC:20:7C:E7:BE:D9:D0:98:E7:52:94:E6:EB:10:F1:FB:82:17:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F85BB98C9D9BB6B2EFEE20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c9048f-a1e3-32af-8c02-fc4710fa0948.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.63.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:5b:b9:8c:9d:9b:b6:b2:ef:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=55a40417-b382-4bca-901d-e8147a4d5a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:43:d8:ef:37:cd:1e:66:1f:f5:91:b6:c8: a0:c6:e4:a0:27:a9:18:f7:86:39:ba:9b:55:db:18: 3b:1d:ee:ae:5c:93:02:c3:f8:25:cc:db:64:e7:43: ae:30:35:9b:75:f9:66:17:24:30:5f:04:7d:c9:d9: 47:fd:ff:d4:47:db:56:33:c4:29:fc:8d:a8:1c:72: 9d:52:f9:e7:cd:3d:ed:05:2f:64:a8:4b:56:74:61: 8b:07:40:d6:d7:c5:66:7b:21:00:a3:46:42:cb:2c: 45:d3:80:69:4c:fc:bf:7d:1b:c0:76:b7:74:f6:fd: 54:1b:00:ba:2f:0b:6c:e9:b6:e2:81:26:4d:1e:63: 49:88:e0:c7:0b:35:62:93:0e:c8:dc:cb:8d:d9:7e: 48:b9:5e:0b:74:f3:0e:88:c1:df:f4:9e:16:e8:b1: 21:23:c3:07:8e:2a:8d:27:3f:35:45:9e:79:87:cc: 1b:6d:23:00:77:9a:bd:c7:54:c1:fe:72:fa:71:d6: c5:21:a2:37:a9:6b:ef:47:1e:84:b7:05:bb:aa:9b: 35:cd:f8:f2:4f:fe:8b:bd:1e:93:4d:ac:a2:50:7f: 0c:96:ae:32:54:ee:9c:fc:b4:83:f1:b6:88:79:59: 9b:ca:fc:90:d1:48:3f:c3:5d:07:40:81:17:4e:ea: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:20:7C:E7:BE:D9:D0:98:E7:52:94:E6:EB:10:F1:FB:82:17:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c9048f-a1e3-32af-8c02-fc4710fa0948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.63.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6b:eb:70:00:66:65:27:8b:86:78:a5:1e:7f:86:de:91:7c: da:a8:f3:23:e4:fe:96:01:b2:cb:ab:cc:7e:b1:d0:e8:0e:5c: a4:26:dd:25:f3:9d:e6:42:4f:f4:6f:71:b0:4a:82:74:38:26: d8:44:65:f3:0a:e0:33:6e:70:5b:a7:99:33:38:b1:b0:4b:23: 81:e3:b9:85:dd:38:cf:c1:0b:bc:d0:b5:86:65:51:fa:62:cf: f8:dc:30:60:87:fd:3b:a6:15:b5:4a:db:2b:06:3d:1a:60:08: 4e:54:f0:41:7b:44:7c:a3:43:a3:56:a8:20:5b:60:2c:ec:48: 1b:c3:97:cd:52:bf:ec:67:50:d0:da:96:25:bb:21:61:c5:d6: ff:cf:75:a4:f0:01:dd:9a:f5:37:6c:b6:15:6b:79:7c:84:52: 6c:3a:27:97:c8:ca:03:e0:72:49:6c:1d:58:12:57:2a:51:6d: 38:24:4f:bf:0e:22:a1:a4:70:e4:a4:8f:df:23:5c:84:05:a8: 59:8a:0b:dc:f9:fe:24:d2:69:1b:05:c6:16:5d:4e:53:e8:cb: 1f:58:ae:44:85:95:46:3d:65:38:db:3d:15:e7:3a:05:4c:bf: 44:86:69:7f:95:98:67:f4:8b:5f:82:08:9d:1d:a5:ca:30:8d: 47:cd:6d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Fu5jJ2btrLv7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTVhNDA0MTctYjM4Mi00YmNhLTkwMWQtZTgxNDdhNGQ1YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSBD2O83zR5mH/WRtsigxuSgJ6kY94Y5uptV 2xg7He6uXJMCw/glzNtk50OuMDWbdflmFyQwXwR9ydlH/f/UR9tWM8Qp/I2oHHKd UvnnzT3tBS9kqEtWdGGLB0DW18VmeyEAo0ZCyyxF04BpTPy/fRvAdrd09v1UGwC6 Lwts6bbigSZNHmNJiODHCzVikw7I3MuN2X5IuV4LdPMOiMHf9J4W6LEhI8MHjiqN Jz81RZ55h8wbbSMAd5q9x1TB/nL6cdbFIaI3qWvvRx6EtwW7qps1zfjyT/6LvR6T TayiUH8Mlq4yVO6c/LSD8baIeVmbyvyQ0Ug/w10HQIEXTuo6QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy8IHznvtnQmOdSlObrEPH7ghcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZjOTA0OGYtYTFlMy0z MmFmLThjMDItZmM0NzEwZmEwOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFr63AAZmUni4Z4pR5/ht6RfNqo8yPk/pYBssurzH6x0OgOXKQm3SXz neZCT/RvcbBKgnQ4JthEZfMK4DNucFunmTM4sbBLI4HjuYXdOM/BC7zQtYZlUfpi z/jcMGCH/TumFbVK2ysGPRpgCE5U8EF7RHyjQ6NWqCBbYCzsSBvDl81Sv+xnUNDa liW7IWHF1v/PdaTwAd2a9TdsthVreXyEUmw6J5fIygPgcklsHVgSVypRbTgkT78O IqGkcOSkj98jXIQFqFmKC9z5/iTSaRsFxhZdTlPoyx9YrkSFlUY9ZTjbPRXnOgVM v0SGaX+VmGf0i1+CCJ0dpcowjUfNbWs= -----END CERTIFICATE-----Generated at Sun Apr 6 12:08:31 2025 by rpki-client