$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd3c9c0c-d54f-3d5f-bbfe-a3dc2b2e75e3.roa File: bd3c9c0c-d54f-3d5f-bbfe-a3dc2b2e75e3.roa (raw, json) Hash identifier: p76ZREWhjSiSwy/6izTes+hs8MpNZMksGEP6AGYXSwg= Subject key identifier: C8:AA:BC:DC:6B:67:DF:9E:F1:08:4D:0D:EC:2B:4C:C2:2A:AC:35:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FBF1F408598F760312880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd3c9c0c-d54f-3d5f-bbfe-a3dc2b2e75e3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 24.22.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:bf:1f:40:85:98:f7:60:31:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2f718020-17c5-4cfd-85c3-9562111618bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:fe:79:d0:06:66:e3:78:d1:69:ac:b0:a5: 9e:7b:f7:36:d3:2f:bf:01:3b:73:cb:8a:0a:9f:52: 05:25:e5:17:d3:61:b6:b4:74:c7:2e:43:d4:57:b4: 1d:0c:91:d8:ba:1c:4e:2c:aa:17:af:fc:e9:51:a4: 43:bb:86:ce:3f:06:50:b3:d0:08:63:a5:e9:f9:60: 44:28:f0:75:60:1c:06:4e:bc:18:ae:99:57:e9:49: e9:a0:3e:65:10:69:a6:27:60:ff:5f:cb:00:97:b3: bf:a3:b6:b2:0a:e0:13:ab:99:be:bc:a0:7b:9b:ef: 23:b5:9f:91:de:56:5b:51:bf:5b:89:88:2d:26:a1: a2:02:5d:e8:5e:03:f8:6d:11:31:69:df:a1:b9:c1: c4:df:ef:01:5b:3e:ca:fb:85:7e:8a:0d:53:41:28: 3f:a4:48:a0:8a:31:9e:a0:58:79:ec:2b:96:1d:9f: 18:97:16:7b:9c:bd:ae:98:42:3f:4b:a0:4d:20:8c: 6e:8b:dd:b3:62:5b:fc:31:f9:3d:eb:ae:3f:90:a1: f9:bc:cc:8a:78:98:a2:b4:5b:2f:16:ae:59:79:c2: e2:c5:cc:60:db:04:78:e4:39:10:b4:31:88:46:5c: 93:eb:26:a9:ef:f9:ba:77:65:9c:4d:61:af:1b:94: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:BC:DC:6B:67:DF:9E:F1:08:4D:0D:EC:2B:4C:C2:2A:AC:35:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd3c9c0c-d54f-3d5f-bbfe-a3dc2b2e75e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.22.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:43:0f:96:1e:25:06:f3:3e:36:09:a6:f6:48:77:14:ed: 5c:9a:5b:23:e5:0c:19:7f:0d:63:1b:5c:dc:8e:d6:51:18:b9: e0:87:1a:b9:ee:db:37:bc:de:c6:57:bb:34:39:eb:6e:35:2f: c2:8f:be:70:4f:12:92:4b:c7:87:49:eb:2f:5e:d8:c6:13:fc: cf:49:22:7f:fc:3d:05:cc:e2:f7:6b:20:a8:ff:84:81:58:70: 2a:3a:48:6e:2a:d1:dc:8b:ac:87:dd:6c:d3:11:f0:a8:b8:65: 8c:4f:1d:ab:ce:ed:2c:31:4e:30:d9:a1:47:da:42:42:75:5b: 2c:0e:eb:27:be:ef:a4:d0:c0:0a:19:f5:46:6e:8f:9a:17:c1: 3d:70:3b:99:a0:fb:26:6b:28:a6:02:40:0a:92:d7:5e:87:5a: b3:18:a7:0a:9f:b9:c0:eb:21:c3:e4:ec:2b:ad:99:28:d3:b0: 66:e4:6a:95:34:d2:a0:1a:76:7b:94:0f:a0:38:4e:86:f1:64: db:88:a0:dd:99:81:cc:47:1f:67:5f:80:cb:51:ac:e0:ba:62: 42:f1:c5:9e:c5:56:1e:4c:5c:fc:8f:f9:1b:94:6a:ac:0a:f4: f3:d8:48:b0:d3:55:a9:95:18:55:e2:d4:f8:a9:b1:eb:98:5c: 08:f5:c4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL78fQIWY92AxKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MmY3MTgwMjAtMTdjNS00Y2ZkLTg1YzMtOTU2MjExMTYxOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD3+edAGZuN40WmssKWee/c20y+/ATtzy4oK n1IFJeUX02G2tHTHLkPUV7QdDJHYuhxOLKoXr/zpUaRDu4bOPwZQs9AIY6Xp+WBE KPB1YBwGTrwYrplX6UnpoD5lEGmmJ2D/X8sAl7O/o7ayCuATq5m+vKB7m+8jtZ+R 3lZbUb9biYgtJqGiAl3oXgP4bRExad+hucHE3+8BWz7K+4V+ig1TQSg/pEigijGe oFh57CuWHZ8YlxZ7nL2umEI/S6BNIIxui92zYlv8Mfk9664/kKH5vMyKeJiitFsv Fq5ZecLixcxg2wR45DkQtDGIRlyT6yap7/m6d2WcTWGvG5QSBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiqvNxrZ9+e8QhNDewrTMIqrDUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQzYzljMGMtZDU0Zi0z ZDVmLWJiZmUtYTNkYzJiMmU3NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV5Qw+WHiUG8z42Cab2SHcU7VyaWyPlDBl/DWMbXNyO1lEYueCHGrnu 2ze83sZXuzQ56241L8KPvnBPEpJLx4dJ6y9e2MYT/M9JIn/8PQXM4vdrIKj/hIFY cCo6SG4q0dyLrIfdbNMR8Ki4ZYxPHavO7SwxTjDZoUfaQkJ1WywO6ye+76TQwAoZ 9UZuj5oXwT1wO5mg+yZrKKYCQAqS116HWrMYpwqfucDrIcPk7CutmSjTsGbkapU0 0qAadnuUD6A4TobxZNuIoN2ZgcxHH2dfgMtRrOC6YkLxxZ7FVh5MXPyP+RuUaqwK 9PPYSLDTVamVGFXi1PipseuYXAj1xC8= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:54 2025 by rpki-client