$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2a70d5a-545f-32d1-81f0-bf04b07a8fa3.roa File: a2a70d5a-545f-32d1-81f0-bf04b07a8fa3.roa (raw, json) Hash identifier: 1NP4+jQ9BwaH3mLrWTquK9kS0y3GNzNoMaYG1wljbJo= Subject key identifier: 69:75:7C:C1:28:0F:DD:2B:77:F4:92:F5:75:A5:88:F8:7D:EF:92:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF7530C9F061A118C2F5B580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2a70d5a-545f-32d1-81f0-bf04b07a8fa3.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 24.99.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:30:c9:f0:61:a1:18:c2:f5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=ea20d41d-ab6d-4cbf-b472-f993955fd7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:0a:4b:be:45:e9:7c:0b:07:86:bb:79:4d: a0:83:b0:25:3b:94:1f:ec:2e:86:ae:f8:41:36:20: e6:bf:0b:47:2d:8d:19:ea:0c:31:ee:9c:06:2b:a1: 65:37:dd:2e:7d:be:81:2e:4f:4d:6c:89:b8:0d:6c: 04:e6:27:af:0e:0a:14:96:9e:b0:77:55:b0:9b:dc: 8b:f1:f1:31:99:d0:4b:5f:e3:a8:33:14:4c:40:52: d7:6e:8f:d3:70:f8:7c:1e:ef:55:78:e7:5e:89:a1: dc:4c:b6:25:f7:57:a6:d1:e4:b2:bb:63:e7:8c:6e: 29:d6:86:82:c9:e3:ec:dc:dd:07:f3:9d:36:8a:b1: 99:53:98:20:7f:f0:4f:9f:1e:73:ff:f8:75:de:29: be:37:5c:9f:d8:ba:7a:81:c5:e1:f9:59:56:81:fa: 2e:0e:6b:30:0a:50:8e:49:6c:8c:3e:aa:a7:1b:ae: 36:58:00:74:5a:5c:35:00:72:48:40:c2:c9:79:d7: d7:57:a6:85:ad:cd:05:cd:51:3b:ea:20:a3:ac:4e: f6:ce:8f:10:94:60:1d:99:cb:74:a8:cb:25:cb:b1: e7:69:5c:9e:84:44:31:3e:d7:10:06:16:de:c6:13: 32:5d:91:7f:5c:8b:a0:5b:25:af:bc:8d:78:b7:3a: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:75:7C:C1:28:0F:DD:2B:77:F4:92:F5:75:A5:88:F8:7D:EF:92:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2a70d5a-545f-32d1-81f0-bf04b07a8fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2e:5f:65:f1:86:23:1c:64:70:3e:f2:a5:19:42:2c:88:d6: 00:b7:b2:c0:4a:bf:e4:3d:bf:b4:46:fd:07:46:5e:db:ae:20: 5f:87:f3:ab:64:96:a8:85:a9:30:67:7c:da:43:c0:89:0c:16: 75:e1:68:3f:88:5e:0e:10:19:c4:e3:51:ec:ad:be:25:bd:63: 75:a8:7a:3b:f2:50:29:03:da:10:b4:df:81:19:00:90:ce:52: 4a:46:d2:5b:55:60:60:73:93:a7:75:86:1c:1e:15:1d:d0:b7: 4e:19:13:df:c1:fb:e3:20:b7:a1:3a:71:63:c6:fd:50:8b:15: 3e:50:20:f3:86:f2:b9:34:0a:53:68:1b:b6:ab:9d:39:af:71: 30:86:b5:3b:10:89:d9:91:b0:6d:ac:98:13:e2:dd:3f:52:5a: 89:49:c9:a6:29:31:4d:ee:c0:36:d9:c4:36:be:6f:ad:8f:ed: 2b:ca:7c:e7:82:8f:01:2e:98:5e:13:4c:74:7f:de:74:1f:03: b7:cb:3b:8e:23:07:2d:99:0b:ba:b7:11:d0:cd:28:bc:34:c6: 67:0c:0c:88:af:04:ae:81:11:77:b7:77:5f:3a:59:f2:25:a8: d3:30:ce:3a:86:82:02:36:dc:ee:00:4f:a1:1f:f6:01:56:bf: 0f:33:a5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dTDJ8GGhGML1tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZWEyMGQ0MWQtYWI2ZC00Y2JmLWI0NzItZjk5Mzk1NWZkN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPcKS75F6XwLB4a7eU2gg7AlO5Qf7C6GrvhB NiDmvwtHLY0Z6gwx7pwGK6FlN90ufb6BLk9NbIm4DWwE5ievDgoUlp6wd1Wwm9yL 8fExmdBLX+OoMxRMQFLXbo/TcPh8Hu9VeOdeiaHcTLYl91em0eSyu2PnjG4p1oaC yePs3N0H8502irGZU5ggf/BPnx5z//h13im+N1yf2Lp6gcXh+VlWgfouDmswClCO SWyMPqqnG642WAB0Wlw1AHJIQMLJedfXV6aFrc0FzVE76iCjrE72zo8QlGAdmct0 qMsly7HnaVyehEQxPtcQBhbexhMyXZF/XIugWyWvvI14tzpJWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl1fMEoD90rd/SS9XWliPh975KbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJhNzBkNWEtNTQ1Zi0z MmQxLTgxZjAtYmYwNGIwN2E4ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQuX2XxhiMcZHA+8qUZQiyI1gC3ssBKv+Q9v7RG/QdGXtuuIF+H86tk lqiFqTBnfNpDwIkMFnXhaD+IXg4QGcTjUeytviW9Y3WoejvyUCkD2hC034EZAJDO UkpG0ltVYGBzk6d1hhweFR3Qt04ZE9/B++Mgt6E6cWPG/VCLFT5QIPOG8rk0ClNo G7arnTmvcTCGtTsQidmRsG2smBPi3T9SWolJyaYpMU3uwDbZxDa+b62P7SvKfOeC jwEumF4TTHR/3nQfA7fLO44jBy2ZC7q3EdDNKLw0xmcMDIivBK6BEXe3d186WfIl qNMwzjqGggI23O4AT6Ef9gFWvw8zpQg= -----END CERTIFICATE-----Generated at Tue Jun 3 05:00:11 2025 by rpki-client