$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf77071-bfbb-3566-8db9-5e6a00378d4c.roa File: aaf77071-bfbb-3566-8db9-5e6a00378d4c.roa (raw, json) Hash identifier: 5VfbyY7IBGFYkxSLQjia5R4tTn/JkWDQruNq3ceS/X4= Subject key identifier: 9C:89:B5:14:57:45:EB:F9:EA:E7:AA:39:F7:5F:00:11:CF:75:D6:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430846BDFF5B41FB153EE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf77071-bfbb-3566-8db9-5e6a00378d4c.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 24.128.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:84:6b:df:f5:b4:1f:b1:53:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=60e470fd-5120-47cf-8056-db0d298665b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:e3:eb:3f:79:72:cf:f4:62:46:19:3d:38: 61:16:61:4a:98:0b:b6:a4:5c:62:49:ff:aa:5c:82: 1d:09:b3:3d:08:07:c6:5f:a5:9d:b2:be:4f:81:0d: c0:dd:8f:c1:f0:cb:06:70:29:b6:ab:7f:8d:63:b2: 65:1e:be:08:7f:ee:0b:37:03:ed:86:9c:ba:a3:1f: 62:c2:7f:e4:a8:59:c2:b1:1a:8a:9d:37:8a:77:1f: fd:26:67:a8:e1:66:3d:ba:49:51:7c:d5:35:29:13: 16:4e:fd:3f:28:10:85:ef:df:91:48:1d:c9:d9:00: 30:fd:45:49:e7:aa:fb:33:c0:4c:ad:91:e3:c0:1d: 9b:85:80:1a:d5:bb:74:9e:ba:ea:f3:8e:a9:be:c4: 16:62:d2:01:3a:46:a7:80:0b:53:93:fb:cd:c4:ab: 5f:05:82:69:01:d0:7d:59:85:f9:9b:8a:1a:5a:57: 4b:5f:38:05:2e:0a:80:60:11:88:f5:8b:cf:3b:46: 89:6f:08:5e:80:74:ed:80:e5:c0:eb:c0:4b:ac:d9: 2f:fe:d8:e2:3d:35:f0:b5:b1:17:8a:2f:b5:29:5b: 24:55:0a:bb:07:62:d3:41:b6:fd:73:6b:90:1d:6f: 0f:19:21:a8:46:96:5f:21:66:34:94:6f:97:ef:5f: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:B5:14:57:45:EB:F9:EA:E7:AA:39:F7:5F:00:11:CF:75:D6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf77071-bfbb-3566-8db9-5e6a00378d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.128.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2f:27:76:a9:23:61:8f:05:a2:36:77:08:87:e4:e8:7a:ca: 7d:fb:c7:2f:b6:c1:9a:13:33:22:8c:01:d5:91:f5:44:e0:2b: bd:61:b6:97:b5:d4:72:0c:f4:95:e2:27:91:1a:42:b2:55:8f: e4:52:cb:46:39:33:3f:88:6a:1d:8c:c3:7b:5d:65:4f:69:5e: a5:aa:a9:24:79:9f:b0:53:a1:4b:7f:7b:22:fa:93:79:15:ae: 64:f0:4f:55:7f:e7:b4:86:1f:68:8d:54:00:f5:6d:8d:06:49: 54:81:e9:bf:8f:69:ca:a3:19:0d:22:88:f2:38:b9:b2:1e:61: 49:c9:6c:49:26:73:06:06:4c:d4:33:3b:53:92:9f:1b:13:4e: ed:6c:77:3d:f7:63:da:1e:0f:dd:df:11:5a:38:1e:1a:5b:6f: 31:60:ad:25:1d:e9:5d:50:71:02:65:f3:f7:1a:79:74:0f:e1: 02:fc:38:32:d1:88:b5:75:56:fd:80:9b:10:0e:ef:40:27:6f: 46:90:6a:71:31:f9:9c:0e:fe:80:41:86:04:66:77:7c:37:1b: a7:cf:8b:90:e9:6d:aa:b0:a7:cd:be:f0:f9:c0:ca:ee:6c:e2: 18:e5:47:c2:89:8c:0c:1f:f8:d0:13:30:6b:65:a7:69:7e:95: 7d:88:03:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMIRr3/W0H7FT7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NjBlNDcwZmQtNTEyMC00N2NmLTgwNTYtZGIwZDI5ODY2NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn7j6z95cs/0YkYZPThhFmFKmAu2pFxiSf+q XIIdCbM9CAfGX6Wdsr5PgQ3A3Y/B8MsGcCm2q3+NY7JlHr4If+4LNwPthpy6ox9i wn/kqFnCsRqKnTeKdx/9Jmeo4WY9uklRfNU1KRMWTv0/KBCF79+RSB3J2QAw/UVJ 56r7M8BMrZHjwB2bhYAa1bt0nrrq846pvsQWYtIBOkangAtTk/vNxKtfBYJpAdB9 WYX5m4oaWldLXzgFLgqAYBGI9YvPO0aJbwhegHTtgOXA68BLrNkv/tjiPTXwtbEX ii+1KVskVQq7B2LTQbb9c2uQHW8PGSGoRpZfIWY0lG+X719VdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyJtRRXRev56ueqOfdfABHPddaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFmNzcwNzEtYmZiYi0z NTY2LThkYjktNWU2YTAwMzc4ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGIDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwvJ3apI2GPBaI2dwiH5Oh6yn37xy+2wZoTMyKMAdWR9UTgK71htpe1 1HIM9JXiJ5EaQrJVj+RSy0Y5Mz+Iah2Mw3tdZU9pXqWqqSR5n7BToUt/eyL6k3kV rmTwT1V/57SGH2iNVAD1bY0GSVSB6b+PacqjGQ0iiPI4ubIeYUnJbEkmcwYGTNQz O1OSnxsTTu1sdz33Y9oeD93fEVo4HhpbbzFgrSUd6V1QcQJl8/caeXQP4QL8ODLR iLV1Vv2AmxAO70Anb0aQanEx+ZwO/oBBhgRmd3w3G6fPi5Dpbaqwp82+8PnAyu5s 4hjlR8KJjAwf+NATMGtlp2l+lX2IA6I= -----END CERTIFICATE-----Generated at Tue Jun 3 06:36:30 2025 by rpki-client