$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa File: abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa (raw, json) Hash identifier: Nlw62wyTw/Fk98JD9H9OZ9Ci4qrPldxsVcb+r4WCG3s= Subject key identifier: 1E:78:E3:51:A4:56:7C:1A:1F:30:C5:24:65:8F:E6:7C:68:E9:A4:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FBD81A185D5611F745280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 24.21.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:bd:81:a1:85:d5:61:1f:74:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cc10b380-0e5a-4d1b-9769-55af8c26e5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:91:7a:66:cf:11:ba:22:22:77:b1:b9:5c: 40:46:b1:47:b3:8b:11:97:43:3b:74:4d:0a:a8:9c: ca:61:05:17:cc:cb:4a:cb:73:29:7b:13:d9:f0:ff: 67:d0:b8:5e:ca:79:18:06:a1:23:81:b0:07:da:84: 05:2a:37:23:73:a9:c7:ce:9d:19:f5:f9:52:ed:7a: 14:7a:47:fe:fc:16:2d:5a:3e:87:59:df:a1:97:9e: db:ec:f3:6e:db:86:6b:42:da:65:d1:d6:34:49:ff: ad:1e:81:1a:16:55:eb:5f:c6:03:d0:f8:9a:c7:07: 1f:75:91:a8:6b:91:b0:e4:d5:bf:80:a2:af:29:4b: 5d:18:9c:2f:28:20:c6:7d:0e:d6:7c:60:ae:22:7f: 19:76:42:d6:25:73:51:53:04:d2:7c:7b:0a:84:89: fd:42:28:61:ca:38:94:0e:d2:b5:04:11:fe:c0:43: f0:68:34:ef:00:73:e5:22:ff:fc:d5:9f:66:f1:ac: e4:b8:88:0d:36:93:03:45:c5:66:22:be:da:84:a6: 9c:6e:5e:02:3e:73:46:ae:32:6d:69:38:e7:7d:97: f1:6b:da:2f:b4:f1:26:a8:66:01:4c:2e:a6:25:8f: 98:c0:33:57:da:1f:92:20:d4:33:54:d2:3f:14:5a: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:78:E3:51:A4:56:7C:1A:1F:30:C5:24:65:8F:E6:7C:68:E9:A4:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abac5b99-a0df-3c9a-b10f-4d7e02693d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:48:37:07:26:13:f1:f5:42:79:d9:c0:49:ae:10:1b:f8:dc: f4:81:c0:91:41:eb:6b:ff:78:85:bf:95:d0:aa:24:02:66:ab: a3:2f:bf:34:64:72:b8:75:61:67:6b:5b:63:51:80:25:5c:8a: d8:26:54:6b:19:a7:e9:86:ad:42:81:a1:24:d1:48:83:98:f2: 93:c1:d3:ae:7b:b7:5a:71:d0:0a:8c:6b:de:05:c4:a0:81:00: 1d:7a:35:44:de:da:b9:32:75:ab:a2:4c:4f:da:46:11:57:c5: 68:6f:2a:31:e9:34:5d:9f:43:de:50:be:cf:6c:c0:8b:e1:82: 7b:27:9e:f9:77:c4:8e:5c:5f:40:cd:19:2f:10:f9:88:2d:3c: 9b:00:18:45:2a:5d:74:56:59:6c:4f:4a:3e:6a:81:48:03:4c: e5:98:d1:62:a7:4d:e0:4c:d6:7d:26:31:2f:37:5d:ec:7c:d4: a1:d5:df:05:6f:0b:6c:41:9a:37:36:d9:9c:39:ef:23:10:c6: ab:2e:91:35:65:fc:d7:dc:76:de:cf:e7:67:b2:a4:b9:12:ec: a0:5b:74:51:8a:19:30:3a:8c:ad:36:7b:e4:7d:3a:66:f4:1c: a2:81:fa:63:d2:88:27:cb:8a:19:09:1b:c3:04:2d:52:f9:c1: 2d:10:df:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL72BoYXVYR90UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2MxMGIzODAtMGU1YS00ZDFiLTk3NjktNTVhZjhjMjZlNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJyRembPEboiInexuVxARrFHs4sRl0M7dE0K qJzKYQUXzMtKy3MpexPZ8P9n0LheynkYBqEjgbAH2oQFKjcjc6nHzp0Z9flS7XoU ekf+/BYtWj6HWd+hl57b7PNu24ZrQtpl0dY0Sf+tHoEaFlXrX8YD0PiaxwcfdZGo a5Gw5NW/gKKvKUtdGJwvKCDGfQ7WfGCuIn8ZdkLWJXNRUwTSfHsKhIn9QihhyjiU DtK1BBH+wEPwaDTvAHPlIv/81Z9m8azkuIgNNpMDRcVmIr7ahKacbl4CPnNGrjJt aTjnfZfxa9ovtPEmqGYBTC6mJY+YwDNX2h+SINQzVNI/FFpuBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5441GkVnwaHzDFJGWP5nxo6aQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWJhYzViOTktYTBkZi0z YzlhLWIxMGYtNGQ3ZTAyNjkzZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdINwcmE/H1QnnZwEmuEBv43PSBwJFB62v/eIW/ldCqJAJmq6MvvzRk crh1YWdrW2NRgCVcitgmVGsZp+mGrUKBoSTRSIOY8pPB0657t1px0AqMa94FxKCB AB16NUTe2rkydauiTE/aRhFXxWhvKjHpNF2fQ95Qvs9swIvhgnsnnvl3xI5cX0DN GS8Q+YgtPJsAGEUqXXRWWWxPSj5qgUgDTOWY0WKnTeBM1n0mMS83Xex81KHV3wVv C2xBmjc22Zw57yMQxqsukTVl/Nfcdt7P52eypLkS7KBbdFGKGTA6jK02e+R9Omb0 HKKB+mPSiCfLihkJG8MELVL5wS0Q3/0= -----END CERTIFICATE-----Generated at Wed Jun 4 22:49:03 2025 by rpki-client