$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acada225-31b3-3f0f-9978-0ecd6b488210.roa File: acada225-31b3-3f0f-9978-0ecd6b488210.roa (raw, json) Hash identifier: bOzhRIcXgUFqBxBLk3wYnHNmih0rtHYbooiIPz4lNgU= Subject key identifier: 09:FC:25:4D:D3:B3:90:18:04:77:33:1E:5B:0C:AD:1B:CC:F2:A5:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0B975130360BBF8A6FD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acada225-31b3-3f0f-9978-0ecd6b488210.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 24.12.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:b9:75:13:03:60:bb:f8:a6:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=fca47a97-3036-49ce-8798-54b95ad78fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:df:60:0e:f4:e5:e4:68:23:fd:43:b3:5a: 83:6a:fc:0a:11:6d:48:18:33:a2:e2:6b:6b:97:55: 0d:ab:ea:4d:0d:54:3a:aa:37:a6:2f:59:cc:09:23: 6a:18:f8:69:75:81:0c:aa:31:ec:a5:43:ea:1f:be: 03:43:1f:32:7d:b9:ee:46:cf:3d:f8:ac:cb:14:21: 5a:7c:86:49:dc:de:d6:f2:e3:d7:39:1a:8f:26:d2: bd:7e:d0:e0:89:f2:31:6c:00:d1:b8:3a:04:8e:92: 45:58:31:5e:50:fb:2b:37:d5:13:8c:29:08:2b:34: f2:06:35:93:d4:7c:04:de:ac:04:d4:5e:ae:62:0f: c3:e9:7f:26:92:22:1f:38:05:0d:3a:e5:9e:46:3b: 73:13:55:6f:8b:91:7d:1f:4c:40:3c:4f:d3:c5:d4: e4:53:95:fa:63:39:0b:ec:5a:f1:9c:bf:02:0a:ae: 0a:6a:4b:7f:c0:7b:ac:d9:bd:26:98:bb:4a:1d:91: ce:eb:4b:ce:7c:44:ff:12:2a:62:b6:b9:39:35:07: 08:a0:82:c0:d2:1f:88:eb:ff:41:61:ae:66:98:05: 3e:31:bd:3e:6f:39:9e:1d:d3:86:5d:b1:59:b2:73: d3:3a:d0:10:a7:d3:7e:4e:02:f6:f6:b8:76:ac:3c: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FC:25:4D:D3:B3:90:18:04:77:33:1E:5B:0C:AD:1B:CC:F2:A5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acada225-31b3-3f0f-9978-0ecd6b488210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d9:ab:3e:c0:84:aa:72:51:52:52:1c:48:68:d9:b3:5d:52: 54:1d:d4:9f:c5:cd:49:71:11:88:2c:a7:1a:44:66:c8:92:d4: 21:60:e5:9b:a7:a3:7a:1b:4c:9a:49:f9:44:cc:85:cc:76:a2: 94:ea:fa:84:0c:7d:51:1e:81:ea:56:4b:de:7c:d2:50:47:6d: 0c:c1:0f:39:de:92:f6:c5:5d:65:e5:38:84:91:4b:26:db:9a: 03:ed:41:86:d2:d2:8d:4c:c2:5e:24:04:99:cc:b9:84:61:0a: 42:eb:6f:05:9a:85:10:50:e8:a9:0a:78:33:1c:c2:cb:55:70: 77:ba:96:2a:fd:62:af:c8:6d:91:d8:03:24:65:ba:82:7c:c9: c8:f4:be:77:65:94:35:76:56:bb:df:2c:90:79:b7:6a:ea:72: 01:65:e9:74:84:eb:ba:ea:55:9f:b7:c0:b7:ce:1a:81:ff:8f: 83:a6:ec:4c:1c:81:23:ea:8a:0e:7b:76:5b:c4:31:67:90:10: b3:3e:a8:39:a7:48:21:21:45:09:d9:43:fd:09:0d:88:7d:80: b2:f6:6a:7e:08:d6:dd:5c:cf:42:bc:ea:82:04:38:52:b2:9c: 96:dc:b5:d7:90:49:a6:5c:80:5d:39:7c:23:5b:fa:04:81:6f: b5:e3:29:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssLl1EwNgu/im/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmNhNDdhOTctMzAzNi00OWNlLTg3OTgtNTRiOTVhZDc4ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7nfYA705eRoI/1Ds1qDavwKEW1IGDOi4mtr l1UNq+pNDVQ6qjemL1nMCSNqGPhpdYEMqjHspUPqH74DQx8yfbnuRs89+KzLFCFa fIZJ3N7W8uPXORqPJtK9ftDgifIxbADRuDoEjpJFWDFeUPsrN9UTjCkIKzTyBjWT 1HwE3qwE1F6uYg/D6X8mkiIfOAUNOuWeRjtzE1Vvi5F9H0xAPE/TxdTkU5X6YzkL 7FrxnL8CCq4Kakt/wHus2b0mmLtKHZHO60vOfET/Eipitrk5NQcIoILA0h+I6/9B Ya5mmAU+Mb0+bzmeHdOGXbFZsnPTOtAQp9N+TgL29rh2rDw6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn8JU3Ts5AYBHczHlsMrRvM8qWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWNhZGEyMjUtMzFiMy0z ZjBmLTk5NzgtMGVjZDZiNDg4MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAxmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbZqz7AhKpyUVJSHEho2bNdUlQd1J/FzUlxEYgspxpEZsiS1CFg5Zun o3obTJpJ+UTMhcx2opTq+oQMfVEegepWS9580lBHbQzBDznekvbFXWXlOISRSybb mgPtQYbS0o1Mwl4kBJnMuYRhCkLrbwWahRBQ6KkKeDMcwstVcHe6lir9Yq/IbZHY AyRluoJ8ycj0vndllDV2VrvfLJB5t2rqcgFl6XSE67rqVZ+3wLfOGoH/j4Om7Ewc gSPqig57dlvEMWeQELM+qDmnSCEhRQnZQ/0JDYh9gLL2an4I1t1cz0K86oIEOFKy nJbctdeQSaZcgF05fCNb+gSBb7XjKXA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:21 2025 by rpki-client