$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e9ae2b-0f0e-33d9-88ca-9957adc91e1c.roa File: a0e9ae2b-0f0e-33d9-88ca-9957adc91e1c.roa (raw, json) Hash identifier: MSXkZygWajbOyfXg3iAAABiU8xxuJGiNYmH0cBTANxw= Subject key identifier: 30:E4:65:75:8C:52:53:EA:C4:5D:E9:9F:67:B3:A6:4B:48:4C:FC:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8C3C15DFD7F9E69160BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e9ae2b-0f0e-33d9-88ca-9957adc91e1c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 76.24.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:c3:c1:5d:fd:7f:9e:69:16:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f111fb5a-a404-4091-b1c9-f8dd27382fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:e4:a5:25:94:a5:12:81:82:d7:a2:e4:cb: f1:38:51:cd:ea:e0:b2:65:1c:1f:72:49:f5:00:17: c7:f0:e1:4b:4c:0e:4f:ec:6c:e7:c8:f3:3c:0b:83: 50:bc:1f:a6:14:0d:d3:b1:7e:be:6f:df:be:b8:60: e3:e6:2c:b3:8f:66:4b:08:7c:71:25:7d:b6:06:b4: c0:cf:a8:ee:7f:a1:46:47:b8:2b:c6:ca:f3:ae:89: cc:df:93:b9:66:11:e5:97:42:74:54:60:bd:63:65: 69:a5:df:7d:6e:eb:08:26:70:c0:7d:5b:41:45:c6: 74:99:3a:d0:6f:6f:45:80:8c:3c:ac:0e:7b:22:55: 23:11:54:7c:8f:b9:bd:96:63:70:7f:81:42:d0:67: 00:08:e8:c4:9a:db:e7:5a:33:61:c1:0d:e6:9b:63: de:03:21:a0:bd:73:80:7d:f6:d4:e9:18:2c:6b:e5: 51:ea:59:4c:8d:77:aa:f6:37:a3:51:0c:e4:a7:27: 22:88:c4:2c:8f:d9:11:73:e2:ee:b0:fa:1f:7b:2d: a2:5d:06:f0:93:c3:02:46:31:b1:b3:14:7d:0a:37: ee:b3:52:67:b8:83:d1:bb:39:5c:5f:d6:3e:56:fe: 5b:11:6f:dd:74:17:d4:11:33:bd:cf:7b:06:82:53: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E4:65:75:8C:52:53:EA:C4:5D:E9:9F:67:B3:A6:4B:48:4C:FC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e9ae2b-0f0e-33d9-88ca-9957adc91e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.24.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:d0:4a:54:51:3c:bc:bc:9f:d3:79:09:81:66:83:ca:2d:e2: bc:12:ab:63:20:39:4d:33:5f:be:79:3c:4a:68:a2:b1:38:ac: 05:b2:fb:7e:f3:d2:96:1d:3f:d1:a8:eb:3b:f4:ef:bf:ba:36: f2:3a:37:79:82:d0:be:79:54:95:c4:bf:e7:e4:1d:a1:8a:bf: 4a:71:23:ab:36:21:c7:51:0e:3a:6b:13:80:81:ae:26:a6:0a: ac:2a:65:f5:4c:b9:2c:05:24:70:6c:09:53:0a:30:5d:9d:6d: 59:ff:a0:cb:ef:cc:df:cc:95:7d:0d:45:47:b9:64:ff:bf:2c: 1e:7a:51:af:22:f4:73:c9:74:86:87:30:d2:6e:e3:40:3a:42: 39:51:2a:d5:2d:e8:25:82:7b:3e:be:0a:11:eb:47:a6:78:98: 52:6b:7c:3b:3e:c7:56:16:81:e6:e5:be:9d:8a:76:4e:9a:5e: 3a:c0:94:ce:b5:16:16:4e:d7:fb:80:85:4a:59:52:7c:3a:04: 81:03:d6:d6:0c:f0:7e:38:ff:fc:2e:01:e9:ef:a4:c3:64:2d: 4a:b1:2c:c7:e1:ae:ba:48:e4:1a:ce:8c:60:13:2a:64:59:88: 57:a7:d6:1a:4c:ea:3d:0a:2e:a1:aa:ec:d0:9a:02:dd:34:0e: b3:34:95:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+MPBXf1/nmkWC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjExMWZiNWEtYTQwNC00MDkxLWIxYzktZjhkZDI3MzgyZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliTkpSWUpRKBgtei5MvxOFHN6uCyZRwfckn1 ABfH8OFLTA5P7GznyPM8C4NQvB+mFA3TsX6+b9++uGDj5iyzj2ZLCHxxJX22BrTA z6juf6FGR7grxsrzronM35O5ZhHll0J0VGC9Y2Vppd99busIJnDAfVtBRcZ0mTrQ b29FgIw8rA57IlUjEVR8j7m9lmNwf4FC0GcACOjEmtvnWjNhwQ3mm2PeAyGgvXOA ffbU6Rgsa+VR6llMjXeq9jejUQzkpyciiMQsj9kRc+LusPofey2iXQbwk8MCRjGx sxR9Cjfus1JnuIPRuzlcX9Y+Vv5bEW/ddBfUETO9z3sGglOltQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDkZXWMUlPqxF3pn2ezpktITPz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBlOWFlMmItMGYwZS0z M2Q5LTg4Y2EtOTk1N2FkYzkxZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPQSlRRPLy8n9N5CYFmg8ot4rwSq2MgOU0zX755PEpoorE4rAWy+37z 0pYdP9Go6zv077+6NvI6N3mC0L55VJXEv+fkHaGKv0pxI6s2IcdRDjprE4CBriam CqwqZfVMuSwFJHBsCVMKMF2dbVn/oMvvzN/MlX0NRUe5ZP+/LB56Ua8i9HPJdIaH MNJu40A6QjlRKtUt6CWCez6+ChHrR6Z4mFJrfDs+x1YWgeblvp2Kdk6aXjrAlM61 FhZO1/uAhUpZUnw6BIED1tYM8H44//wuAenvpMNkLUqxLMfhrrpI5BrOjGATKmRZ iFen1hpM6j0KLqGq7NCaAt00DrM0lRA= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:11 2025 by rpki-client