$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90dfc1f3-a431-347b-a8e0-25423258c6e2.roa File: 90dfc1f3-a431-347b-a8e0-25423258c6e2.roa (raw, json) Hash identifier: QGbkJmGoNJYVfjOj43emNnzDHCZz3ZUEvCWVwZobjfA= Subject key identifier: F3:FA:4F:26:EA:45:8A:CF:BE:77:AE:3D:39:2F:F6:3E:5B:85:2B:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4312E205FBDA1409CF72504 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90dfc1f3-a431-347b-a8e0-25423258c6e2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 24.20.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:2e:20:5f:bd:a1:40:9c:f7:25:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=87b38829-74ae-42a8-8035-79ac3ff8f4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:7c:ba:a8:b8:ba:eb:4f:1f:7d:01:52:b3: 3d:fd:cd:6f:68:48:07:67:0b:75:2c:f1:45:90:3a: 30:90:88:3b:61:ac:88:d7:d2:9f:36:de:7b:7f:d1: 4a:26:38:31:b5:8b:7d:53:08:4a:43:01:26:f6:27: 95:26:6b:5c:09:c4:dd:ee:e7:60:cb:74:0d:43:ab: 69:83:48:42:e4:57:f2:3a:40:ba:5e:b6:11:76:ca: 10:b8:e7:4d:b6:27:ff:f4:fc:ea:50:da:55:6c:57: ca:0f:da:1e:a1:f1:c6:b1:67:46:78:f6:71:e3:75: 50:b3:00:7b:5f:22:7a:a9:6d:f7:d3:63:3c:2b:49: 0c:be:85:ed:a6:08:33:7e:c4:cf:d1:7f:0c:d1:8d: fd:d5:3c:e7:97:ec:31:9e:a4:d4:cd:ea:22:0e:95: fe:fe:52:0d:7b:1a:36:1d:72:18:04:ee:77:46:08: 76:48:b3:b7:2d:ee:5c:17:e3:8e:b5:ad:b2:cd:c8: 89:3d:d2:a3:eb:22:5d:53:19:03:03:9b:a5:90:03: 27:68:b7:8c:a3:87:56:12:9b:1e:cf:45:2f:aa:0e: de:e7:c3:8c:c5:98:7d:08:b7:a9:8e:76:ea:9a:7a: 00:12:a2:6d:17:33:d4:43:f2:f0:8e:49:21:a8:17: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FA:4F:26:EA:45:8A:CF:BE:77:AE:3D:39:2F:F6:3E:5B:85:2B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90dfc1f3-a431-347b-a8e0-25423258c6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:26:e8:80:93:11:58:b8:7b:e3:6a:b4:2c:66:05:1c:30:13: ee:d1:63:11:b9:66:aa:47:d4:cd:33:f4:d2:7f:54:40:26:4c: 09:32:f0:12:c0:34:d3:01:af:4c:88:a6:36:a9:c0:f5:7c:59: 35:74:5f:d0:00:82:7b:ec:68:8f:18:9e:ab:74:9c:3f:c2:a0: fd:5a:7d:f4:b0:ed:ac:fc:29:0d:27:d3:c2:57:2f:bc:09:ed: cf:25:7b:13:ca:68:cd:f0:06:98:34:d9:d1:7e:a7:08:b4:aa: e4:02:e5:a3:59:8a:1e:14:9a:d3:9e:6a:84:65:75:c2:97:11: a8:2c:7c:2c:07:4b:c2:2a:02:f5:e1:e4:fb:c5:c9:25:f8:19: aa:fa:87:71:c2:04:50:bf:c2:da:a8:5e:b5:5c:f3:c9:d6:63: c9:52:59:d2:59:e8:60:7f:cc:27:17:7d:55:76:f1:26:d2:c7: 5b:95:b7:33:49:f8:22:79:7c:67:13:71:72:d0:fc:bd:b9:4c: b0:a8:fc:ce:47:e7:88:69:7c:61:1e:db:c7:fc:fd:48:01:47: 3d:8d:9c:82:08:15:5a:29:82:21:d2:91:fa:75:75:19:9d:1c: af:d9:4a:cd:95:df:a4:f9:02:04:5a:17:57:15:93:85:74:0c: 08:b0:16:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMS4gX72hQJz3JQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODdiMzg4MjktNzRhZS00MmE4LTgwMzUtNzlhYzNmZjhmNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sl8uqi4uutPH30BUrM9/c1vaEgHZwt1LPFF kDowkIg7YayI19KfNt57f9FKJjgxtYt9UwhKQwEm9ieVJmtcCcTd7udgy3QNQ6tp g0hC5FfyOkC6XrYRdsoQuOdNtif/9PzqUNpVbFfKD9oeofHGsWdGePZx43VQswB7 XyJ6qW3302M8K0kMvoXtpggzfsTP0X8M0Y391Tznl+wxnqTUzeoiDpX+/lINexo2 HXIYBO53Rgh2SLO3Le5cF+OOta2yzciJPdKj6yJdUxkDA5ulkAMnaLeMo4dWEpse z0Uvqg7e58OMxZh9CLepjnbqmnoAEqJtFzPUQ/LwjkkhqBcURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP6TybqRYrPvneuPTkv9j5bhStYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTBkZmMxZjMtYTQzMS0z NDdiLWE4ZTAtMjU0MjMyNThjNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwm6ICTEVi4e+NqtCxmBRwwE+7RYxG5ZqpH1M0z9NJ/VEAmTAky8BLA NNMBr0yIpjapwPV8WTV0X9AAgnvsaI8Ynqt0nD/CoP1affSw7az8KQ0n08JXL7wJ 7c8lexPKaM3wBpg02dF+pwi0quQC5aNZih4UmtOeaoRldcKXEagsfCwHS8IqAvXh 5PvFySX4Gar6h3HCBFC/wtqoXrVc88nWY8lSWdJZ6GB/zCcXfVV28SbSx1uVtzNJ +CJ5fGcTcXLQ/L25TLCo/M5H54hpfGEe28f8/UgBRz2NnIIIFVopgiHSkfp1dRmd HK/ZSs2V36T5AgRaF1cVk4V0DAiwFiY= -----END CERTIFICATE-----Generated at Tue Jun 3 05:46:01 2025 by rpki-client