$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda51e01-0ef2-3196-9e88-f13754f6c951.roa File: bda51e01-0ef2-3196-9e88-f13754f6c951.roa (raw, json) Hash identifier: sn59MeGcwdtzgnGu1ZEk1WUchLlYIdhYMyK3chWq8lc= Subject key identifier: 26:CE:78:B3:D6:03:D1:AE:FA:F7:87:46:A8:70:B1:86:64:59:09:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F82241827B43C1DD9B7000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda51e01-0ef2-3196-9e88-f13754f6c951.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 24.21.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:22:41:82:7b:43:c1:dd:9b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9315975e-fb60-49f0-81d5-2641d9ce0263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:5e:22:ca:06:e6:47:c4:20:6d:ff:38:0a: 8c:f8:1a:85:7a:d6:2b:fd:a8:49:d1:c2:83:14:b9: f0:17:07:9d:f8:df:a4:0f:a7:9d:8e:44:84:c4:e4: 17:af:5d:01:98:7c:d5:64:c9:77:e0:13:2c:01:6f: 19:15:31:c3:52:8d:9a:99:1c:cb:c1:f6:11:b6:2f: c2:8a:fa:5b:91:0a:ac:37:63:8e:a6:a9:a6:6e:34: f7:d4:26:af:4c:07:85:b9:6b:0f:01:fc:ab:67:07: a5:bf:de:b1:64:15:26:91:77:26:ea:e6:59:c6:92: 29:90:a5:8d:44:58:a8:24:0a:ce:1c:a7:1e:ac:e4: 58:b2:02:e4:86:6c:43:45:89:4d:74:f4:2d:01:38: 0e:47:ba:f8:6e:96:65:ee:d9:f4:a8:a4:a4:80:4b: 85:40:74:6e:7a:29:2f:a5:f1:2f:fb:10:51:ce:a0: 2d:31:23:a9:be:43:26:09:0b:6f:26:3e:39:de:0b: 26:1d:ec:d2:e9:2a:1b:85:70:54:8a:34:ec:a5:17: 48:ba:7f:e0:c4:e0:9e:ee:89:d4:9f:8f:89:73:ec: b7:73:da:39:a7:78:ac:cb:aa:3e:80:35:cd:04:9e: fb:51:d7:9a:0b:e7:ec:e1:57:fd:df:2b:ec:55:7e: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CE:78:B3:D6:03:D1:AE:FA:F7:87:46:A8:70:B1:86:64:59:09:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda51e01-0ef2-3196-9e88-f13754f6c951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7b:12:68:d2:12:30:9b:5f:52:9b:a4:9f:63:1a:bd:3f:8f: 79:f8:1c:d2:5a:23:bb:20:a4:78:43:81:1f:71:df:f6:d0:44: 51:51:69:29:c5:da:3f:88:bf:15:e8:e7:67:01:66:0a:15:90: 53:f7:5e:e6:a7:68:22:c9:c6:ac:88:17:fa:59:0b:15:56:55: 5c:7a:5b:25:ff:84:fa:cc:4b:79:32:f4:4f:c8:6f:fc:5e:b2: f4:f3:d7:56:24:f1:b2:3b:5e:0d:43:33:88:2c:7d:b4:84:f1: 9c:f2:32:93:65:97:35:0d:e5:58:45:8d:1e:e1:2a:0a:4c:09: 70:c7:d2:da:dd:43:2f:b0:06:37:46:e8:08:ce:9a:76:51:9d: 46:48:79:1c:c0:e3:80:e9:42:1e:be:92:61:11:59:c2:ba:e5: 77:26:74:11:44:e5:67:fc:41:33:4e:45:94:7d:88:9a:fb:3f: e0:5c:ac:ee:06:0a:b0:aa:76:78:86:d5:7c:fe:cf:be:83:77: e4:4d:f6:ec:27:40:53:50:6c:cc:b5:6d:05:6a:81:6a:69:a9: 89:07:ac:d7:b4:65:65:29:0d:8e:f5:bc:07:cf:fb:58:f2:ff: 61:1f:a3:a8:64:72:31:39:fe:cc:a4:cf:8d:c6:83:82:18:b2: 58:2a:2e:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+CJBgntDwd2bcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OTMxNTk3NWUtZmI2MC00OWYwLTgxZDUtMjY0MWQ5Y2UwMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt29eIsoG5kfEIG3/OAqM+BqFetYr/ahJ0cKD FLnwFwed+N+kD6edjkSExOQXr10BmHzVZMl34BMsAW8ZFTHDUo2amRzLwfYRti/C ivpbkQqsN2OOpqmmbjT31CavTAeFuWsPAfyrZwelv96xZBUmkXcm6uZZxpIpkKWN RFioJArOHKcerORYsgLkhmxDRYlNdPQtATgOR7r4bpZl7tn0qKSkgEuFQHRueikv pfEv+xBRzqAtMSOpvkMmCQtvJj453gsmHezS6SobhXBUijTspRdIun/gxOCe7onU n4+Jc+y3c9o5p3isy6o+gDXNBJ77UdeaC+fs4Vf93yvsVX79pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbOeLPWA9Gu+veHRqhwsYZkWQmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRhNTFlMDEtMGVmMi0z MTk2LTllODgtZjEzNzU0ZjZjOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV7EmjSEjCbX1KbpJ9jGr0/j3n4HNJaI7sgpHhDgR9x3/bQRFFRaSnF 2j+IvxXo52cBZgoVkFP3XuanaCLJxqyIF/pZCxVWVVx6WyX/hPrMS3ky9E/Ib/xe svTz11Yk8bI7Xg1DM4gsfbSE8ZzyMpNllzUN5VhFjR7hKgpMCXDH0trdQy+wBjdG 6AjOmnZRnUZIeRzA44DpQh6+kmERWcK65XcmdBFE5Wf8QTNORZR9iJr7P+BcrO4G CrCqdniG1Xz+z76Dd+RN9uwnQFNQbMy1bQVqgWppqYkHrNe0ZWUpDY71vAfP+1jy /2Efo6hkcjE5/sykz43Gg4IYslgqLk8= -----END CERTIFICATE-----Generated at Mon Apr 7 16:18:28 2025 by rpki-client