$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf2e7fd4-3bda-36a0-b94f-0a6fad0e22cf.roa File: bf2e7fd4-3bda-36a0-b94f-0a6fad0e22cf.roa (raw, json) Hash identifier: KF++BN9qGQTC3w9QPFPf/I2Eia1cvGDeoMar4uQkQrA= Subject key identifier: B3:61:B8:23:71:16:3D:4A:ED:9C:CA:FF:8B:75:1F:8A:8C:FB:7D:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF2DDE1CB2A90CF4AF9C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf2e7fd4-3bda-36a0-b94f-0a6fad0e22cf.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 24.12.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:2d:de:1c:b2:a9:0c:f4:af:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=723fa140-1a99-47d6-aa23-17352543cc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:4f:aa:d8:92:29:37:88:19:08:88:d2:08: 75:12:4d:93:2b:d1:d8:bb:d4:69:da:32:e3:45:5f: 28:6d:ac:04:a6:59:af:54:d1:90:e9:e6:a4:d6:19: 77:dc:4e:83:75:1a:e1:52:fa:eb:bf:e7:42:6b:35: a0:06:2f:1f:29:d7:1d:31:fd:97:53:3c:96:db:c2: 58:e0:a6:e8:92:15:72:76:05:ec:de:a5:2c:06:ed: 5b:47:e9:62:37:a3:c7:71:4a:7a:18:95:ea:29:f5: 40:f4:06:61:a0:31:a4:c7:f5:9d:da:a3:1b:29:d6: 21:76:be:07:17:30:a0:01:9b:b4:16:98:0b:e5:a1: 12:ff:f1:2c:bb:0c:40:80:db:21:26:24:5d:0e:e2: 3e:da:08:89:97:72:77:e7:d1:d4:31:1c:b5:19:1d: b5:8f:41:5f:a0:25:ed:c8:4f:43:86:92:c4:d4:de: 84:3c:93:a7:e9:4d:8c:6f:1c:a1:7a:93:0c:7a:db: 54:42:57:3e:ea:d4:75:c3:9e:da:dd:cf:84:11:f9: 45:f1:62:1d:87:d6:e4:58:fd:62:55:71:85:26:b5: 66:59:1f:13:e2:eb:ef:8f:f1:3c:54:c4:4e:2d:86: 8a:78:db:e2:cd:18:11:f5:91:7e:95:06:bb:48:09: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:61:B8:23:71:16:3D:4A:ED:9C:CA:FF:8B:75:1F:8A:8C:FB:7D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf2e7fd4-3bda-36a0-b94f-0a6fad0e22cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.12.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:69:5b:ca:22:fd:b7:06:be:98:b2:65:ea:a3:0f:d0:b0:9e: 92:d9:72:2d:4b:ef:f2:8d:9a:39:f7:36:59:20:be:c7:ca:d9: c7:fb:99:bd:7b:ee:06:29:4a:f6:df:15:b3:1e:b7:02:79:19: 6d:46:55:46:d9:79:e2:85:22:00:a9:bc:4a:be:1f:d3:47:ea: 65:7a:c4:d2:ae:9e:c4:1d:3c:3e:58:10:97:02:63:dc:62:b2: 3a:de:5b:82:25:ae:dd:1e:df:a4:af:88:ff:49:f4:02:c5:e4: 41:1a:99:62:27:12:9f:b5:d8:ef:54:55:de:f3:2d:60:3e:f3: 65:b4:42:43:20:11:71:87:9b:f2:3c:91:00:ac:af:a4:1d:ae: ac:51:98:b7:8e:2b:e2:40:28:a0:af:5b:37:4a:3f:4c:15:ed: a7:a2:c7:df:9c:32:a7:8b:1e:dd:d0:d1:27:54:ee:97:4f:f8: 37:b0:9b:55:80:7f:f4:b6:95:60:d9:e4:42:d1:be:92:29:b8: 1c:01:5b:20:cf:58:6b:48:a8:d9:30:60:bd:36:88:ba:a8:42: 0e:1a:16:cb:fa:a6:73:4a:21:2d:ca:13:8a:18:3f:5a:25:ae: d5:cb:24:d3:db:59:d0:6a:f0:84:a2:62:55:20:46:30:c2:b7: f6:95:a3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksry3eHLKpDPSvnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzIzZmExNDAtMWE5OS00N2Q2LWFhMjMtMTczNTI1NDNjYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpNPqtiSKTeIGQiI0gh1Ek2TK9HYu9Rp2jLj RV8obawEplmvVNGQ6eak1hl33E6DdRrhUvrrv+dCazWgBi8fKdcdMf2XUzyW28JY 4KbokhVydgXs3qUsBu1bR+liN6PHcUp6GJXqKfVA9AZhoDGkx/Wd2qMbKdYhdr4H FzCgAZu0FpgL5aES//EsuwxAgNshJiRdDuI+2giJl3J359HUMRy1GR21j0FfoCXt yE9DhpLE1N6EPJOn6U2MbxyhepMMettUQlc+6tR1w57a3c+EEflF8WIdh9bkWP1i VXGFJrVmWR8T4uvvj/E8VMROLYaKeNvizRgR9ZF+lQa7SAn65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNhuCNxFj1K7ZzK/4t1H4qM+31lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYyZTdmZDQtM2JkYS0z NmEwLWI5NGYtMGE2ZmFkMGUyMmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdpW8oi/bcGvpiyZeqjD9CwnpLZci1L7/KNmjn3NlkgvsfK2cf7mb17 7gYpSvbfFbMetwJ5GW1GVUbZeeKFIgCpvEq+H9NH6mV6xNKunsQdPD5YEJcCY9xi sjreW4Ilrt0e36SviP9J9ALF5EEamWInEp+12O9UVd7zLWA+82W0QkMgEXGHm/I8 kQCsr6QdrqxRmLeOK+JAKKCvWzdKP0wV7aeix9+cMqeLHt3Q0SdU7pdP+Dewm1WA f/S2lWDZ5ELRvpIpuBwBWyDPWGtIqNkwYL02iLqoQg4aFsv6pnNKIS3KE4oYP1ol rtXLJNPbWdBq8ISiYlUgRjDCt/aVo8g= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:35 2025 by rpki-client