$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dcd7eff-6ab3-3c97-8214-6b4c2d68c434.roa File: 8dcd7eff-6ab3-3c97-8214-6b4c2d68c434.roa (raw, json) Hash identifier: QBYiVNs0us/2AEIV4N6bMW8nqIim1N0bttxvZnQHY1o= Subject key identifier: F5:11:90:20:2E:1A:8F:24:7E:80:F7:6A:67:DC:58:50:C5:5B:F3:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D5A207EA37AA737255B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dcd7eff-6ab3-3c97-8214-6b4c2d68c434.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33650 IP address blocks: 24.153.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:5a:20:7e:a3:7a:a7:37:25:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=717c2e4e-6e66-442e-8f22-4c0db51fc3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:c0:7f:dd:eb:21:25:11:b4:7d:96:57:83: ab:65:1f:d8:95:4d:1d:1a:64:d4:78:11:9d:ea:4e: f6:6a:69:ba:c6:c7:f7:94:a8:c7:96:fb:6a:0e:13: 78:02:e3:f9:80:cf:0b:50:92:d4:f3:86:1d:f9:ac: 84:76:61:25:be:26:03:9b:aa:d4:b4:ae:51:ed:c4: a9:08:9b:23:21:16:49:b1:2f:f5:a3:10:ce:13:e6: 76:dc:1d:a2:8d:f8:aa:c2:fe:f2:6c:bc:7d:55:22: b0:67:81:68:24:89:6a:04:2c:20:2b:0f:4d:71:c9: b4:38:f7:b9:f3:f3:22:98:68:c5:d6:c0:58:6f:77: 21:64:ab:7c:a3:20:a0:ce:a1:96:31:45:cb:89:57: 25:b6:2b:7a:ac:76:2d:8c:c9:4b:57:40:7f:aa:42: ac:c3:be:23:c5:8d:7c:1b:cd:95:94:4b:27:18:d3: 5d:d6:eb:01:86:0a:e7:05:39:1a:aa:2f:d0:21:19: 19:fb:f8:47:42:a4:35:61:1c:eb:92:5d:1b:4e:45: 64:ab:57:60:18:4e:e8:d5:6a:83:09:16:0f:19:2b: 71:cf:2d:a8:7f:71:2e:41:55:b9:56:10:cd:24:af: 7c:d5:b0:20:04:a5:c9:1e:61:5e:62:73:1b:77:ae: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:11:90:20:2E:1A:8F:24:7E:80:F7:6A:67:DC:58:50:C5:5B:F3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dcd7eff-6ab3-3c97-8214-6b4c2d68c434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.153.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:ea:19:fa:a6:e9:be:5e:f8:e5:6e:a1:17:9e:2f:c9:32:64: 5c:93:b6:b7:f3:7d:0c:55:88:d4:48:7a:f5:bf:7f:3c:c6:d1: a1:97:6e:c1:8c:7f:0e:d6:78:d4:5c:57:08:d1:c1:83:72:43: d2:5b:f2:35:4f:1f:e3:bc:70:a5:66:01:82:40:34:7c:bf:77: 6e:fc:3b:85:4b:02:21:a2:9c:09:95:9a:95:03:bc:e4:9f:5a: 9c:a0:f7:e8:ce:ce:4c:a6:da:47:53:27:3c:a1:9d:e2:10:da: 40:13:69:fc:aa:0c:4a:19:8f:aa:77:10:99:ba:49:06:ad:63: c3:88:b5:30:6e:ac:4c:3a:21:8d:dc:53:a6:0b:c0:db:24:38: 63:95:28:9c:15:33:70:21:d4:c7:25:71:cc:a0:ae:f2:d3:4f: 53:78:77:62:e9:43:f0:1c:20:5b:61:f2:01:f8:c3:08:61:1f: 9c:6e:52:f5:b2:c6:14:7e:62:c2:5f:fc:d5:ff:2b:fa:f0:12: 48:17:24:59:92:48:85:f0:c3:4e:ad:c4:43:74:55:52:79:dc: 28:f0:8a:c0:14:d1:6c:5d:34:ec:49:f7:b9:42:05:0d:4c:6a: ee:ed:47:2c:29:95:20:3b:fd:c5:d7:42:c0:0e:d8:aa:1f:11: 33:1b:d7:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebVogfqN6pzclWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzE3YzJlNGUtNmU2Ni00NDJlLThmMjItNGMwZGI1MWZjM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjAf93rISURtH2WV4OrZR/YlU0dGmTUeBGd 6k72amm6xsf3lKjHlvtqDhN4AuP5gM8LUJLU84Yd+ayEdmElviYDm6rUtK5R7cSp CJsjIRZJsS/1oxDOE+Z23B2ijfiqwv7ybLx9VSKwZ4FoJIlqBCwgKw9Nccm0OPe5 8/MimGjF1sBYb3chZKt8oyCgzqGWMUXLiVcltit6rHYtjMlLV0B/qkKsw74jxY18 G82VlEsnGNNd1usBhgrnBTkaqi/QIRkZ+/hHQqQ1YRzrkl0bTkVkq1dgGE7o1WqD CRYPGStxzy2of3EuQVW5VhDNJK981bAgBKXJHmFeYnMbd65MIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPURkCAuGo8kfoD3amfcWFDFW/MNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRjZDdlZmYtNmFiMy0z Yzk3LTgyMTQtNmI0YzJkNjhjNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANzqGfqm6b5e+OVuoReeL8kyZFyTtrfzfQxViNRIevW/fzzG0aGXbsGM fw7WeNRcVwjRwYNyQ9Jb8jVPH+O8cKVmAYJANHy/d278O4VLAiGinAmVmpUDvOSf Wpyg9+jOzkym2kdTJzyhneIQ2kATafyqDEoZj6p3EJm6SQatY8OItTBurEw6IY3c U6YLwNskOGOVKJwVM3Ah1MclccygrvLTT1N4d2LpQ/AcIFth8gH4wwhhH5xuUvWy xhR+YsJf/NX/K/rwEkgXJFmSSIXww06txEN0VVJ53CjwisAU0WxdNOxJ97lCBQ1M au7tRywplSA7/cXXQsAO2KofETMb17E= -----END CERTIFICATE-----Generated at Sun Apr 6 17:10:26 2025 by rpki-client