$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a35ea43d-eaff-3dfb-8806-9cdfe28c9b4b.roa File: a35ea43d-eaff-3dfb-8806-9cdfe28c9b4b.roa (raw, json) Hash identifier: E1PKJCDYoYxynJR/JfziVJaVkKLc+5TCROm0sR0olnw= Subject key identifier: 02:97:08:FB:5D:80:5C:3D:9A:2B:EE:BB:54:8C:21:FB:17:60:F2:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C057D5D16688AC52D57B080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a35ea43d-eaff-3dfb-8806-9cdfe28c9b4b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 24.11.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:7d:5d:16:68:8a:c5:2d:57:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=dccecf97-7371-4444-a98c-04eae5539286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:21:c6:5d:82:e0:3e:3c:f8:f0:18:72:9d: 60:65:01:a7:ce:08:5f:31:0e:ab:8e:d8:df:4f:3f: b4:7a:6a:87:5e:c1:6a:92:d2:ed:35:87:9b:bf:0b: e7:77:96:33:46:e0:30:4d:68:24:91:ab:eb:51:3e: 1b:05:75:12:25:73:af:d7:af:90:67:1e:20:41:54: c7:0e:37:1b:5f:4f:fc:34:91:37:f0:6f:b3:d0:2e: d7:1e:48:24:29:1b:96:b0:38:ae:8f:5e:99:63:18: 42:de:dd:9e:ec:cb:86:75:69:8a:86:31:70:79:7c: e6:bc:10:e7:3c:14:1e:d6:44:4d:26:b5:b3:1d:4d: 21:4a:4f:67:6b:69:6d:45:6a:dd:84:7b:59:f6:8c: 21:df:cf:60:0d:e0:2a:c9:10:c4:ae:7f:e6:91:f1: ac:c6:55:8e:5e:cb:5d:ff:f3:f7:4a:c0:74:e8:6d: 38:09:cc:79:df:b2:f3:e8:a0:30:7d:3e:73:29:be: b1:34:3e:16:c1:70:a1:f9:6b:67:3b:91:a5:6c:5f: 0f:26:d6:5e:66:d8:65:a5:93:07:fb:57:b0:b6:c3: 09:e2:5b:36:b4:17:87:6c:06:2b:c9:57:40:1d:1d: 77:09:db:d7:78:7b:5a:f8:0d:69:1b:16:be:03:93: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:08:FB:5D:80:5C:3D:9A:2B:EE:BB:54:8C:21:FB:17:60:F2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a35ea43d-eaff-3dfb-8806-9cdfe28c9b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:73:eb:33:97:09:d1:62:b7:54:83:82:c7:31:85:8b:46:a2: e2:8f:61:98:9c:39:ad:f9:44:91:01:cc:e3:c3:49:a6:28:a8: f8:14:74:ac:24:53:43:c9:0d:1f:c9:4b:db:fb:20:e5:ba:ad: eb:40:b3:69:70:23:38:71:14:c2:91:08:25:b8:58:b6:d2:ca: 14:90:b7:95:f2:54:db:ba:40:ec:e9:a5:75:ea:b5:fa:7d:39: a2:e8:0f:c6:06:eb:05:d0:83:90:b9:32:93:de:7a:4f:7e:32: 2d:a4:58:00:50:71:6c:9a:a7:58:93:0e:de:55:b9:d5:0f:2f: 4c:55:0e:a1:c7:e4:9b:df:ec:c6:77:38:92:11:f7:1d:8c:44: 4c:51:60:a6:da:b9:a9:2a:f6:c5:f0:da:d0:7a:eb:40:8f:c9: cb:f1:99:73:59:9d:1f:26:d9:ca:92:fb:a3:50:40:a4:04:cf: 6b:9d:28:ca:1a:84:de:4b:c6:ca:07:00:3f:ac:fd:5a:f9:00: 2e:e9:e3:ca:ce:c7:d8:ec:4e:4d:97:55:af:d7:ed:f7:0a:1e: 14:68:8b:09:eb:40:a1:ef:a7:86:00:26:62:27:b2:ec:48:07: 53:df:1b:04:75:d0:66:42:86:ac:ed:f2:a8:48:75:e0:d6:d8: d7:66:34:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBX1dFmiKxS1XsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGNjZWNmOTctNzM3MS00NDQ0LWE5OGMtMDRlYWU1NTM5Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqIhxl2C4D48+PAYcp1gZQGnzghfMQ6rjtjf Tz+0emqHXsFqktLtNYebvwvnd5YzRuAwTWgkkavrUT4bBXUSJXOv16+QZx4gQVTH DjcbX0/8NJE38G+z0C7XHkgkKRuWsDiuj16ZYxhC3t2e7MuGdWmKhjFweXzmvBDn PBQe1kRNJrWzHU0hSk9na2ltRWrdhHtZ9owh389gDeAqyRDErn/mkfGsxlWOXstd //P3SsB06G04Ccx537Lz6KAwfT5zKb6xND4WwXCh+WtnO5GlbF8PJtZeZthlpZMH +1ewtsMJ4ls2tBeHbAYryVdAHR13CdvXeHta+A1pGxa+A5NPowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKXCPtdgFw9mivuu1SMIfsXYPJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM1ZWE0M2QtZWFmZi0z ZGZiLTg4MDYtOWNkZmUyOGM5YjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlz6zOXCdFit1SDgscxhYtGouKPYZicOa35RJEBzOPDSaYoqPgUdKwk U0PJDR/JS9v7IOW6retAs2lwIzhxFMKRCCW4WLbSyhSQt5XyVNu6QOzppXXqtfp9 OaLoD8YG6wXQg5C5MpPeek9+Mi2kWABQcWyap1iTDt5VudUPL0xVDqHH5Jvf7MZ3 OJIR9x2MRExRYKbauakq9sXw2tB660CPycvxmXNZnR8m2cqS+6NQQKQEz2udKMoa hN5LxsoHAD+s/Vr5AC7p48rOx9jsTk2XVa/X7fcKHhRoiwnrQKHvp4YAJmInsuxI B1PfGwR10GZChqzt8qhIdeDW2NdmNOs= -----END CERTIFICATE-----Generated at Wed Jun 4 22:53:50 2025 by rpki-client