$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa File: af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa (raw, json) Hash identifier: gWiOQxGlYWxrzlYAY5IrXc+uTlOSbUz6KmkqB4WaFo8= Subject key identifier: 42:8F:80:4B:F8:61:AC:B3:95:E6:5F:F4:E2:DD:52:BC:F7:56:AA:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6F114942E5EE576CEC980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.34.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:f1:14:94:2e:5e:e5:76:ce:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=2a3584b7-4fa9-463a-adbd-9035dde3b02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:07:a6:18:18:ac:dd:7c:95:7f:0f:e8:84: f2:5a:fa:5b:d2:83:ef:84:db:2c:7a:e3:1d:f5:f7: 1a:9a:a6:9d:c5:6c:31:99:f1:3e:42:53:9f:90:d5: a0:a6:6f:42:b6:70:11:88:dc:45:fd:a7:c4:14:b1: 52:28:5e:79:a5:d0:29:b3:8f:18:a5:ed:c6:1d:6d: 53:c5:eb:4a:9d:d7:15:da:bb:0a:dc:fb:cd:8b:07: d1:62:5b:9f:4e:0c:5a:6d:05:c4:a0:a4:1d:ed:ad: d1:c7:40:35:8e:64:31:91:5b:4e:0b:e6:ff:f3:92: 31:0d:4b:85:ef:16:ca:01:11:6d:22:18:df:e1:0f: 35:b3:f6:d6:92:e4:36:76:c3:3d:a4:d9:ac:7f:cc: b8:99:5e:d0:37:af:41:9c:c7:cc:ed:83:91:89:fd: 24:af:fc:1a:5b:06:50:b1:c1:ff:14:ee:19:8f:20: 60:d0:ae:21:1f:54:d1:5e:cd:91:25:1d:7c:6c:26: 1c:bd:9f:4b:ac:ad:9b:1b:fe:5b:42:d7:e8:fd:33: 15:ed:c7:91:38:f5:e0:94:75:7f:ad:43:c4:c2:e0: 74:09:1f:6c:a4:e2:5a:c7:ad:0b:bf:30:89:48:3f: 7b:1d:17:e5:44:da:19:67:22:96:a2:04:57:e7:a0: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:80:4B:F8:61:AC:B3:95:E6:5F:F4:E2:DD:52:BC:F7:56:AA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.34.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b3:70:34:b3:a8:d0:90:6c:ed:dd:2b:7f:17:c2:65:23:b1: 55:f1:8f:c5:fb:d7:94:0b:9c:9f:c8:25:3f:62:98:c5:74:b4: 03:d5:a3:80:e0:a3:24:85:55:a9:46:9e:a4:91:ff:68:b6:1d: e2:e2:21:ff:73:8b:de:87:6b:5c:8f:43:45:4a:1a:3a:28:f5: 16:25:c1:bf:93:6c:5e:4b:2d:e3:14:5a:87:45:69:73:bc:ea: ea:81:b2:1c:0d:65:cf:16:f7:a6:7f:71:30:89:97:bc:74:43: c3:3e:45:16:2d:26:b3:ed:eb:75:de:4b:a4:f7:9d:81:48:5c: d1:03:8e:a6:8c:79:e8:0e:72:38:2d:cf:bb:0d:c8:00:58:77: 5c:b7:3a:f8:1e:e5:5e:9f:c2:eb:dc:e5:0f:cc:67:0a:26:fe: 32:8c:89:62:1e:b6:31:71:25:23:05:50:cf:64:fd:f6:44:e6: 70:cf:1f:20:9a:3b:bf:f6:eb:71:96:bf:70:26:aa:e5:49:0d: f6:d4:c0:59:51:00:ea:04:43:ab:8a:33:7a:fe:f2:a9:76:5d: b2:f0:61:46:8e:f7:62:48:b2:6f:e6:05:8d:32:b2:77:13:4c: 53:a5:65:db:a9:56:30:1c:ad:43:63:fc:b1:16:94:43:26:51: 59:d3:41:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09vEUlC5e5XbOyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MmEzNTg0YjctNGZhOS00NjNhLWFkYmQtOTAzNWRkZTNiMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkoHphgYrN18lX8P6ITyWvpb0oPvhNsseuMd 9fcamqadxWwxmfE+QlOfkNWgpm9CtnARiNxF/afEFLFSKF55pdAps48Ype3GHW1T xetKndcV2rsK3PvNiwfRYlufTgxabQXEoKQd7a3Rx0A1jmQxkVtOC+b/85IxDUuF 7xbKARFtIhjf4Q81s/bWkuQ2dsM9pNmsf8y4mV7QN69BnMfM7YORif0kr/waWwZQ scH/FO4ZjyBg0K4hH1TRXs2RJR18bCYcvZ9LrK2bG/5bQtfo/TMV7ceROPXglHV/ rUPEwuB0CR9spOJax60LvzCJSD97HRflRNoZZyKWogRX56BVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKPgEv4YayzleZf9OLdUrz3VqpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY1MmVlYWYtNjMzZC0z YzdlLWJmMDAtNmE2MTRhYzQ0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCI6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCzcDSzqNCQbO3dK38XwmUjsVXxj8X715QLnJ/IJT9imMV0tAPVo4Dg oySFValGnqSR/2i2HeLiIf9zi96Ha1yPQ0VKGjoo9RYlwb+TbF5LLeMUWodFaXO8 6uqBshwNZc8W96Z/cTCJl7x0Q8M+RRYtJrPt63XeS6T3nYFIXNEDjqaMeegOcjgt z7sNyABYd1y3Ovge5V6fwuvc5Q/MZwom/jKMiWIetjFxJSMFUM9k/fZE5nDPHyCa O7/263GWv3AmquVJDfbUwFlRAOoEQ6uKM3r+8ql2XbLwYUaO92JIsm/mBY0ysncT TFOlZdupVjAcrUNj/LEWlEMmUVnTQcE= -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:21 2025 by rpki-client