$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88c2655c-53c7-3155-88dc-79e19666f031.roa File: 88c2655c-53c7-3155-88dc-79e19666f031.roa (raw, json) Hash identifier: LCsDg6EOt5lvz74JTygDqsmYRUeCAwaUddwtTJgqFlk= Subject key identifier: 1E:21:CE:80:F5:86:83:6B:A6:4D:A2:0E:07:40:DC:62:80:2B:CC:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB04C4C52656CD3DCBBED00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88c2655c-53c7-3155-88dc-79e19666f031.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 24.0.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:4c:4c:52:65:6c:d3:dc:bb:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0a4e0f53-dc89-4a50-8b63-d1a1b1e92e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:92:8d:56:57:06:ba:fa:69:3c:e8:0b:c1:1d: f6:54:de:d5:fe:cd:d8:60:f3:09:3c:95:1e:72:5c: 2c:fc:62:8e:5c:eb:8f:0d:18:89:4a:ca:f1:e9:36: d6:30:d1:f5:e2:2c:e5:e8:d8:16:80:91:ae:a3:8f: 80:c4:fa:5c:7a:a4:27:30:31:84:30:f9:b1:26:b2: 3d:c0:cf:3e:11:8a:ba:16:a1:9c:c0:01:2e:0f:00: 28:cf:8f:93:79:94:7e:b7:a8:30:68:8e:b5:ad:c5: 68:f2:b8:35:34:8b:07:f0:93:33:ab:a0:c6:c0:45: d3:19:7d:5e:eb:01:6e:e1:26:cb:b4:c4:2e:24:3f: 3f:6c:77:27:0d:d9:72:12:47:88:b0:5e:c2:21:ef: c1:5e:9a:db:b0:11:aa:4e:bf:8c:aa:7a:8b:a3:74: 98:4e:e1:c0:3f:78:a5:95:13:e3:a2:7e:5a:17:3b: 02:53:00:78:00:61:3d:86:c4:3a:9e:87:c8:8c:23: b6:af:01:25:a4:02:50:f2:7e:93:a6:1b:36:2a:d9: 2d:b4:27:9c:b5:63:81:3a:90:ae:c3:7f:eb:5c:94: c5:f0:fa:67:f6:31:42:f9:e6:40:1d:f6:54:47:27: 58:21:57:0b:d0:8d:64:62:64:86:f2:b2:7a:a1:eb: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:21:CE:80:F5:86:83:6B:A6:4D:A2:0E:07:40:DC:62:80:2B:CC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88c2655c-53c7-3155-88dc-79e19666f031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.0.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b7:6f:af:af:9d:2d:ea:70:1e:8b:19:8e:b3:07:49:3e:31: 52:b5:eb:a7:ae:31:83:15:ce:43:d9:82:8e:52:25:49:ea:56: 47:6c:f4:4a:c2:12:1b:df:f0:3f:24:88:5f:c6:15:39:44:6b: af:8a:5b:93:a0:96:ed:9a:29:9c:77:4c:f4:32:de:33:ae:42: 9b:db:53:6f:e5:5a:5a:df:8c:17:74:fe:2a:dc:fc:12:09:e2: ab:60:02:34:93:15:41:f2:41:16:ef:ba:42:66:6e:44:f8:9a: 66:95:3a:7d:9f:86:55:9e:ed:67:1f:2d:5b:c5:f6:75:4f:1e: 0b:f0:72:c1:33:13:d8:5f:69:3a:40:69:06:67:94:8b:d4:8a: 1a:cb:0f:0b:a6:d4:57:a4:30:91:20:9a:4f:b5:59:d2:d6:6c: 3e:ca:bb:16:0c:4d:e7:bb:a5:ad:6d:f0:c9:68:4f:68:42:30: f2:9e:03:47:e8:de:b4:50:ef:e0:ca:88:c8:c2:74:25:a0:b9: 7a:c0:76:81:af:e8:43:ae:78:7a:d8:9d:70:a3:15:28:e9:d4: 4e:8c:7d:9b:a7:14:61:49:f6:57:dc:a9:1a:41:33:10:6d:4c: 2e:98:4d:15:0b:49:8b:cf:30:0d:31:97:9f:b5:91:f6:c7:99: 02:e3:6e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssExMUmVs09y77QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MGE0ZTBmNTMtZGM4OS00YTUwLThiNjMtZDFhMWIxZTkyZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZKNVlcGuvppPOgLwR32VN7V/s3YYPMJPJUe clws/GKOXOuPDRiJSsrx6TbWMNH14izl6NgWgJGuo4+AxPpceqQnMDGEMPmxJrI9 wM8+EYq6FqGcwAEuDwAoz4+TeZR+t6gwaI61rcVo8rg1NIsH8JMzq6DGwEXTGX1e 6wFu4SbLtMQuJD8/bHcnDdlyEkeIsF7CIe/BXprbsBGqTr+MqnqLo3SYTuHAP3il lRPjon5aFzsCUwB4AGE9hsQ6nofIjCO2rwElpAJQ8n6Tphs2KtkttCectWOBOpCu w3/rXJTF8Ppn9jFC+eZAHfZURydYIVcL0I1kYmSG8rJ6oes2GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4hzoD1hoNrpk2iDgdA3GKAK8ziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhjMjY1NWMtNTNjNy0z MTU1LTg4ZGMtNzllMTk2NjZmMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGACIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe3b6+vnS3qcB6LGY6zB0k+MVK166euMYMVzkPZgo5SJUnqVkds9ErC Ehvf8D8kiF/GFTlEa6+KW5Oglu2aKZx3TPQy3jOuQpvbU2/lWlrfjBd0/irc/BIJ 4qtgAjSTFUHyQRbvukJmbkT4mmaVOn2fhlWe7WcfLVvF9nVPHgvwcsEzE9hfaTpA aQZnlIvUihrLDwum1FekMJEgmk+1WdLWbD7KuxYMTee7pa1t8MloT2hCMPKeA0fo 3rRQ7+DKiMjCdCWguXrAdoGv6EOueHrYnXCjFSjp1E6MfZunFGFJ9lfcqRpBMxBt TC6YTRULSYvPMA0xl5+1kfbHmQLjbss= -----END CERTIFICATE-----Generated at Sun Apr 6 19:18:31 2025 by rpki-client