$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2afd93f-82ae-3ef1-bd16-5adfec1e5a6c.roa File: c2afd93f-82ae-3ef1-bd16-5adfec1e5a6c.roa (raw, json) Hash identifier: 0uwgc3n3RhDo7GXAZktKqhqb02UU7rCIXOCqZ6QLwqY= Subject key identifier: D8:B8:3B:80:BB:CC:2C:4E:8F:D8:35:7E:E7:BA:C1:23:2A:4D:94:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFDA1FD73CD09021C68240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2afd93f-82ae-3ef1-bd16-5adfec1e5a6c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 24.130.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:da:1f:d7:3c:d0:90:21:c6:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=75b7ec98-3ae1-44ba-96ed-60eed5404b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:a2:c1:ca:38:06:59:2f:dd:59:52:e1:f0: 14:51:f9:d0:74:f6:6a:ca:fd:18:9a:ad:24:84:b9: 88:ed:2a:1b:84:65:f4:c3:5d:52:ad:de:e4:7c:03: a4:e3:64:99:ca:f1:ce:37:4e:6d:15:76:5c:d7:a7: c3:59:7d:fe:df:fe:78:e1:81:2e:71:4b:25:ab:05: e0:1e:79:fd:52:3f:20:38:28:f2:13:78:be:07:cf: 0c:d9:fd:4a:bb:6b:53:a9:f1:b9:22:60:a9:0b:fa: a5:a9:b2:d7:12:49:2e:ca:71:b7:80:9c:62:8b:5d: 02:f5:ab:cf:5d:a1:b1:1d:13:36:5a:a9:17:72:c1: 6d:da:0f:05:ec:63:8f:fc:de:22:d2:b2:3b:d6:a3: 8e:2f:58:1c:62:40:b2:cd:76:82:ed:23:cf:ce:31: 4d:a7:69:ba:1e:eb:46:26:be:40:84:6a:5a:3e:7e: a9:77:fd:6e:48:62:21:79:3c:0f:54:5f:f8:08:4c: 09:20:66:da:5c:19:20:d3:cf:6e:fb:da:78:74:fd: c6:f2:73:08:c1:df:ad:18:1f:fd:30:dd:85:3b:c3: b2:97:18:39:c4:c7:72:ca:6d:21:47:09:95:ac:ea: cb:23:33:50:80:aa:ef:00:a5:ba:46:63:ba:7a:78: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:3B:80:BB:CC:2C:4E:8F:D8:35:7E:E7:BA:C1:23:2A:4D:94:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2afd93f-82ae-3ef1-bd16-5adfec1e5a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:14:f7:4e:75:b5:4f:ae:03:7c:3c:cc:2e:37:f1:48:a6:e9: 09:12:9e:34:b4:50:b8:0c:86:8d:94:ed:66:be:68:7f:68:92: a1:2f:84:e5:e9:f2:96:9c:a9:5b:55:97:fb:4f:60:60:43:14: 1d:7f:4b:a2:ab:93:16:3f:e4:b7:11:d7:7d:ff:04:14:04:ab: 80:34:49:5e:00:45:13:80:38:3e:16:ea:ad:b7:2a:c3:3c:19: 96:aa:81:d5:67:24:30:8e:0e:58:39:29:99:d5:29:f7:e0:d5: 07:7e:e8:50:48:57:04:5c:71:07:b8:c2:c1:20:3e:1d:ae:79: af:79:cb:75:79:20:42:d3:35:05:32:cf:60:58:5d:a3:cd:6b: d8:e4:a0:6f:26:7e:e3:89:d2:dc:8c:ed:2c:24:5c:c8:70:cc: d6:fc:0b:0d:19:48:9b:13:02:29:60:69:52:6b:57:0f:47:e9: df:3c:a2:87:7e:44:25:fa:e0:57:92:50:20:b9:a4:f1:a2:ea: 7f:d8:ec:c9:0b:c8:8a:d3:92:d1:a2:80:d8:94:34:fd:39:58: c7:87:9c:f0:d9:2e:75:8c:9d:02:95:59:1d:67:ae:94:20:73: df:be:2e:ca:fc:68:78:ba:f6:c1:2d:91:11:bd:42:1b:0e:f9: b4:aa:68:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr9of1zzQkCHGgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzViN2VjOTgtM2FlMS00NGJhLTk2ZWQtNjBlZWQ1NDA0YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijuiwco4Blkv3VlS4fAUUfnQdPZqyv0Ymq0k hLmI7SobhGX0w11Srd7kfAOk42SZyvHON05tFXZc16fDWX3+3/544YEucUslqwXg Hnn9Uj8gOCjyE3i+B88M2f1Ku2tTqfG5ImCpC/qlqbLXEkkuynG3gJxii10C9avP XaGxHRM2WqkXcsFt2g8F7GOP/N4i0rI71qOOL1gcYkCyzXaC7SPPzjFNp2m6HutG Jr5AhGpaPn6pd/1uSGIheTwPVF/4CEwJIGbaXBkg089u+9p4dP3G8nMIwd+tGB/9 MN2FO8Oylxg5xMdyym0hRwmVrOrLIzNQgKrvAKW6RmO6enghIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi4O4C7zCxOj9g1fue6wSMqTZReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJhZmQ5M2YtODJhZS0z ZWYxLWJkMTYtNWFkZmVjMWU1YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGIIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoU9051tU+uA3w8zC438Uim6QkSnjS0ULgMho2U7Wa+aH9okqEvhOXp 8pacqVtVl/tPYGBDFB1/S6KrkxY/5LcR133/BBQEq4A0SV4ARROAOD4W6q23KsM8 GZaqgdVnJDCODlg5KZnVKffg1Qd+6FBIVwRccQe4wsEgPh2uea95y3V5IELTNQUy z2BYXaPNa9jkoG8mfuOJ0tyM7SwkXMhwzNb8Cw0ZSJsTAilgaVJrVw9H6d88ood+ RCX64FeSUCC5pPGi6n/Y7MkLyIrTktGigNiUNP05WMeHnPDZLnWMnQKVWR1nrpQg c9++Lsr8aHi69sEtkRG9QhsO+bSqaFI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:48 2025 by rpki-client