$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd009c2-2e34-305c-be1a-f7f100614e9d.roa File: afd009c2-2e34-305c-be1a-f7f100614e9d.roa (raw, json) Hash identifier: LStc7HGXaAvzjTY8z6Etjuqg7mCa+4RiwlMlJJVlLEg= Subject key identifier: FA:75:11:54:FD:7B:5C:29:3D:F6:BF:6C:9D:53:9F:8B:7B:A3:89:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D9C5D5D9FE7DA7D5F8D05 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd009c2-2e34-305c-be1a-f7f100614e9d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 24.124.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:9c:5d:5d:9f:e7:da:7d:5f:8d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4fbd2e51-77c8-4283-8be7-84d477e68fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:5a:4c:cf:ad:12:99:8f:7a:09:8b:b7:92: c7:9a:3c:44:fd:54:65:cc:01:1e:db:e9:7c:6b:f4: e3:7f:d4:45:2f:5e:68:3b:d0:87:b3:1f:2a:f2:14: a5:7a:62:79:ce:73:df:36:20:d7:5f:cc:ca:f5:94: 47:ea:c2:88:bd:cf:8f:bb:7f:24:2b:c3:06:58:cd: 24:c2:b4:d2:03:cc:dd:5d:28:ae:b9:a7:a6:11:e0: a4:d3:3b:28:e9:70:e2:67:80:df:fc:b0:1e:7e:9c: 80:f4:7d:70:3f:55:84:c8:82:f6:4e:a9:00:6b:8e: 37:8c:89:eb:ae:fc:06:1d:5c:31:5e:2b:7b:0e:ca: af:f0:5e:e1:60:98:5a:c3:86:1c:d2:0f:bf:07:05: 5f:fc:2d:68:72:1f:29:f6:44:58:22:e9:eb:a8:2a: e2:b3:dd:a7:3a:1f:37:79:f7:63:17:3a:b3:73:78: 77:e6:c4:46:84:4d:83:cf:4f:44:3c:a3:41:ef:dd: f1:dc:8a:1e:69:31:2b:47:f6:ca:6f:2e:88:05:75: f3:1e:79:fe:55:4d:f6:00:09:f5:d6:46:aa:9e:38: bd:a7:61:1d:a0:36:42:4f:7c:eb:7e:1f:d9:84:dd: 82:d7:db:11:94:84:08:89:99:31:be:d1:b0:59:b5: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:75:11:54:FD:7B:5C:29:3D:F6:BF:6C:9D:53:9F:8B:7B:A3:89:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd009c2-2e34-305c-be1a-f7f100614e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.124.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:73:66:81:23:a5:33:3d:6b:b6:b6:0e:46:eb:79:4a:52:60: 37:54:e3:24:8d:64:ae:99:2d:79:04:72:13:9b:0b:44:16:25: 93:f9:e6:10:be:27:0c:9e:82:9f:1e:5a:6a:86:dd:9e:41:c3: 06:69:43:24:03:6b:9a:3c:a1:a7:c6:d3:72:57:80:f7:5e:79: 91:c2:4b:10:5d:b4:c6:6c:73:c3:8a:59:b2:d2:a9:3b:49:c6: 38:90:67:92:3c:dc:b0:60:5d:e2:e0:37:d7:30:a7:b3:3c:d6: 1e:6b:df:2c:3a:4d:57:81:d6:82:3f:07:71:d6:1a:9e:ff:e2: b2:fc:5b:62:23:4f:b7:9b:3f:77:50:44:d2:89:7c:ac:45:eb: f7:7c:b3:d7:e2:54:f7:6c:66:04:a2:3f:bc:c5:f1:70:07:b1: 2a:d5:cc:d6:ec:16:7a:1f:76:68:ed:28:2d:26:41:0d:f7:c1: ac:c2:9d:82:8d:0f:55:00:a6:59:35:d2:15:3d:81:cc:02:ec: ac:0e:e4:b4:e8:a9:bb:fa:55:ef:aa:49:9f:5e:03:af:3b:e9: e7:ae:13:c1:b4:fb:3d:01:45:ad:3a:80:23:79:cf:a9:69:cd: 79:ee:e4:e8:b5:f7:c8:3b:19:ce:ca:73:16:c5:d2:14:53:83: 2b:09:cc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZxdXZ/n2n1fjQUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGZiZDJlNTEtNzdjOC00MjgzLThiZTctODRkNDc3ZTY4ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoJaTM+tEpmPegmLt5LHmjxE/VRlzAEe2+l8 a/Tjf9RFL15oO9CHsx8q8hSlemJ5znPfNiDXX8zK9ZRH6sKIvc+Pu38kK8MGWM0k wrTSA8zdXSiuuaemEeCk0zso6XDiZ4Df/LAefpyA9H1wP1WEyIL2TqkAa443jInr rvwGHVwxXit7Dsqv8F7hYJhaw4Yc0g+/BwVf/C1och8p9kRYIunrqCris92nOh83 efdjFzqzc3h35sRGhE2Dz09EPKNB793x3IoeaTErR/bKby6IBXXzHnn+VU32AAn1 1kaqnji9p2EdoDZCT3zrfh/ZhN2C19sRlIQIiZkxvtGwWbXT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp1EVT9e1wpPfa/bJ1Tn4t7o4lIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZkMDA5YzItMmUzNC0z MDVjLWJlMWEtZjdmMTAwNjE0ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGHzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBzZoEjpTM9a7a2DkbreUpSYDdU4ySNZK6ZLXkEchObC0QWJZP55hC+ Jwyegp8eWmqG3Z5BwwZpQyQDa5o8oafG03JXgPdeeZHCSxBdtMZsc8OKWbLSqTtJ xjiQZ5I83LBgXeLgN9cwp7M81h5r3yw6TVeB1oI/B3HWGp7/4rL8W2IjT7ebP3dQ RNKJfKxF6/d8s9fiVPdsZgSiP7zF8XAHsSrVzNbsFnofdmjtKC0mQQ33wazCnYKN D1UAplk10hU9gcwC7KwO5LToqbv6Ve+qSZ9eA6876eeuE8G0+z0BRa06gCN5z6lp zXnu5Oi198g7Gc7KcxbF0hRTgysJzLQ= -----END CERTIFICATE-----Generated at Sun Apr 6 09:42:41 2025 by rpki-client