$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa File: 872d3801-18da-32ef-9abb-8d04ecc2f908.roa (raw, json) Hash identifier: 3Ptkpq68NWOQOWr09yFjh/j+Gi132js9MDGkMeoF1iM= Subject key identifier: 70:41:9F:D6:C8:AE:39:2D:66:A5:9A:C8:FD:14:4C:70:85:0E:4B:8E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F85D8F0399D8E71CD7A1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.91.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:5d:8f:03:99:d8:e7:1c:d7:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=320fc5d1-4222-4226-8358-af2cc4f35d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:33:6b:9a:d8:dc:38:da:9b:c3:ab:65:2b: ed:16:cd:b5:81:e4:e1:76:93:e6:ab:63:95:22:a4: 54:81:3e:d8:1e:32:5a:dc:ab:e8:8c:dc:37:c3:db: f5:7a:f7:a6:b5:81:ec:08:93:db:96:b7:b2:cb:8d: fe:e4:6d:d4:c5:40:e7:44:f3:b0:46:3e:18:7b:f2: ab:eb:8a:99:06:12:38:f6:cd:44:ae:2d:57:cf:15: 30:f9:b8:db:ed:33:bc:c3:3f:6f:c6:86:0c:b8:08: d6:47:cb:72:36:9c:a9:21:ad:07:e6:54:09:74:88: 10:63:08:bf:b9:78:f6:81:71:b9:73:a5:c2:b9:43: cc:34:42:b1:ed:91:85:4b:1c:42:ef:f0:8d:68:de: 80:85:de:44:2b:4c:64:b8:3f:41:d6:b2:a9:6a:9a: 37:f5:cb:87:97:52:fb:ba:6f:91:c4:f7:7d:32:c5: cf:ca:a1:a8:a9:a0:c7:37:47:e9:18:6a:db:0c:bf: 39:9d:b8:9a:17:d9:f8:23:49:a7:3b:01:84:e6:15: 11:85:9c:0a:51:d6:38:f8:4c:63:ba:09:dc:c5:21: a1:95:49:09:a6:65:46:49:6e:a8:ae:a9:37:82:1c: 9d:99:b3:2b:6f:1e:c5:ca:8f:b5:7c:41:b9:92:e8: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:41:9F:D6:C8:AE:39:2D:66:A5:9A:C8:FD:14:4C:70:85:0E:4B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.91.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5c:8e:ac:b4:9a:28:62:20:3a:28:00:94:18:b6:51:26:90: cb:9b:d7:75:11:94:96:3f:6e:28:6a:ec:27:9a:cc:8f:01:d3: 05:2c:39:8a:6f:d6:e7:e8:a3:be:eb:43:e4:83:61:f6:cf:3d: 4a:e8:66:c0:9c:85:8d:06:ba:97:3a:f8:e7:a0:c1:6f:04:66: dc:36:97:f2:90:f8:86:4d:42:3b:ea:d1:ca:a5:1d:e8:85:b8: ca:42:e9:12:c1:3f:02:f0:a1:a8:c8:20:2c:47:47:5f:94:44: 86:a6:72:48:c1:71:98:e1:9b:ad:bd:c8:ba:84:1b:c4:65:4c: eb:ce:0b:58:da:aa:91:d7:45:53:7e:66:22:c0:0a:aa:63:4c: 43:40:0d:16:f6:e4:fc:d0:2f:27:73:83:69:eb:6f:f0:02:01: 58:2a:f9:5c:ac:85:ce:be:78:f0:6f:76:57:93:78:01:fb:fc: fb:a2:0f:22:98:6b:14:de:ef:a2:2e:29:03:e2:ae:8b:e7:4b: 71:8a:c1:bb:37:cb:40:e1:04:48:c1:f3:45:5c:b2:4e:d9:70: ef:8c:2f:e1:2b:84:15:4d:51:bf:f6:49:12:68:00:53:49:13: ec:f8:fa:fe:3e:c5:7f:12:b8:ca:8c:2e:55:17:09:33:aa:e7: 7b:af:39:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+F2PA5nY5xzXocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzIwZmM1ZDEtNDIyMi00MjI2LTgzNTgtYWYyY2M0ZjM1ZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfsza5rY3Djam8OrZSvtFs21geThdpPmq2OV IqRUgT7YHjJa3KvojNw3w9v1evemtYHsCJPblreyy43+5G3UxUDnRPOwRj4Ye/Kr 64qZBhI49s1Eri1XzxUw+bjb7TO8wz9vxoYMuAjWR8tyNpypIa0H5lQJdIgQYwi/ uXj2gXG5c6XCuUPMNEKx7ZGFSxxC7/CNaN6Ahd5EK0xkuD9B1rKpapo39cuHl1L7 um+RxPd9MsXPyqGoqaDHN0fpGGrbDL85nbiaF9n4I0mnOwGE5hURhZwKUdY4+Exj ugncxSGhlUkJpmVGSW6orqk3ghydmbMrbx7Fyo+1fEG5kuinLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBBn9bIrjktZqWayP0UTHCFDkuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcyZDM4MDEtMThkYS0z MmVmLTlhYmItOGQwNGVjYzJmOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZcjqy0mihiIDooAJQYtlEmkMub13URlJY/bihq7CeazI8B0wUsOYpv 1ufoo77rQ+SDYfbPPUroZsCchY0Gupc6+OegwW8EZtw2l/KQ+IZNQjvq0cqlHeiF uMpC6RLBPwLwoajIICxHR1+URIamckjBcZjhm629yLqEG8RlTOvOC1jaqpHXRVN+ ZiLACqpjTENADRb25PzQLydzg2nrb/ACAVgq+Vyshc6+ePBvdleTeAH7/PuiDyKY axTe76IuKQPirovnS3GKwbs3y0DhBEjB80Vcsk7ZcO+ML+ErhBVNUb/2SRJoAFNJ E+z4+v4+xX8SuMqMLlUXCTOq53uvORA= -----END CERTIFICATE-----Generated at Sun Apr 6 12:06:05 2025 by rpki-client