$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c305f174-905f-3750-bde2-982d25ada453.roa File: c305f174-905f-3750-bde2-982d25ada453.roa (raw, json) Hash identifier: AKUzE8DCythxndI7yjjFSqVCSveg1rqmvgjfd9fSLFM= Subject key identifier: 5C:B2:70:B3:2D:4B:C0:56:FD:8E:44:1B:99:C6:66:44:53:39:57:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CDA4013F3983BA8717200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c305f174-905f-3750-bde2-982d25ada453.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 24.11.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:da:40:13:f3:98:3b:a8:71:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4e23c792-b075-421f-8e2b-1f6e8e06a76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:4e:ef:7b:9c:a6:67:10:fd:8a:24:30:c4: 06:72:00:60:9f:da:7b:97:91:23:19:1e:5c:bd:fd: f7:9c:f7:df:82:96:ae:b5:12:92:e4:75:e8:ec:3b: 3c:33:ef:29:53:c4:73:51:04:63:90:aa:35:41:d6: 05:f2:f9:83:1f:23:df:cf:47:9a:43:e6:90:a7:9e: 5d:30:44:8d:bc:c7:e8:fe:70:f5:12:98:76:d9:2d: 5d:b7:91:2c:f2:06:cb:d8:4a:f9:4f:99:dc:83:a5: 11:d8:df:36:9e:61:23:3b:5c:60:f6:54:a9:c8:8e: 3f:d3:7f:7d:bf:63:73:21:db:bf:c4:e0:7c:de:fc: 49:a0:bc:64:b8:23:b4:0b:b1:14:ea:ec:ac:47:29: 8d:52:85:1c:bc:45:1a:cd:0b:a2:30:2e:08:35:08: 9a:7c:70:f3:ef:3c:67:af:73:30:39:66:6a:66:b3: 2d:95:b6:00:34:3d:e0:fd:b8:60:7d:ef:36:63:86: a6:9f:fd:fd:2d:5e:ab:ef:8c:55:51:a2:0e:84:b8: 6d:16:b4:35:8a:cf:af:37:55:38:03:da:5d:27:73: 71:a8:85:94:f7:48:d1:d0:85:51:f2:74:07:61:e6: 65:ae:3d:99:e9:d6:30:03:e0:4d:ff:c3:2b:00:e2: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:70:B3:2D:4B:C0:56:FD:8E:44:1B:99:C6:66:44:53:39:57:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c305f174-905f-3750-bde2-982d25ada453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.11.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:50:0f:85:cc:7a:8c:62:d0:e3:81:4c:38:e0:24:f9:0f:7c: fe:ca:f0:81:bf:e2:49:ed:2e:e3:06:11:0c:0b:c7:4c:fa:f1: 7b:48:3a:92:3d:b0:81:f1:89:6b:92:27:53:08:a5:7c:03:8a: b1:f4:49:27:7f:52:32:12:cf:11:8a:95:96:3e:30:d6:4a:62: 18:40:20:64:9d:85:82:05:2b:73:66:94:de:63:36:16:29:29: a8:63:7c:12:03:71:fe:45:bb:fd:d1:ee:f0:4d:59:23:18:7f: 0a:03:27:b8:57:8d:6d:a0:41:bf:10:ea:ae:85:07:f7:78:c9: 9f:16:cb:f7:c0:43:5a:27:99:d4:96:b6:16:8f:87:85:d8:58: 4c:de:2f:82:ad:70:68:dd:91:35:2e:0b:9c:a3:59:0a:46:66: ba:26:8a:6b:98:30:b3:4e:08:ab:20:04:db:31:d4:3f:c1:69: de:e5:a5:93:5a:0a:ba:83:83:56:dc:2c:2d:99:98:bb:3d:aa: 80:4f:e5:12:c2:61:30:4c:fb:5c:9c:ae:5a:52:93:38:dc:6c: 13:a8:8c:e9:ff:4e:25:a1:f8:0f:8a:92:db:ff:27:c8:e4:03: dc:6c:36:02:e6:11:a3:e2:23:2e:8f:f4:51:5a:bb:95:d3:59: d3:60:fd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebNpAE/OYO6hxcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGUyM2M3OTItYjA3NS00MjFmLThlMmItMWY2ZThlMDZhNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN9O73ucpmcQ/YokMMQGcgBgn9p7l5EjGR5c vf33nPffgpautRKS5HXo7Ds8M+8pU8RzUQRjkKo1QdYF8vmDHyPfz0eaQ+aQp55d MESNvMfo/nD1Eph22S1dt5Es8gbL2Er5T5ncg6UR2N82nmEjO1xg9lSpyI4/0399 v2NzIdu/xOB83vxJoLxkuCO0C7EU6uysRymNUoUcvEUazQuiMC4INQiafHDz7zxn r3MwOWZqZrMtlbYAND3g/bhgfe82Y4amn/39LV6r74xVUaIOhLhtFrQ1is+vN1U4 A9pdJ3NxqIWU90jR0IVR8nQHYeZlrj2Z6dYwA+BN/8MrAOJnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyycLMtS8BW/Y5EG5nGZkRTOVcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzMwNWYxNzQtOTA1Zi0z NzUwLWJkZTItOTgyZDI1YWRhNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNQD4XMeoxi0OOBTDjgJPkPfP7K8IG/4kntLuMGEQwLx0z68XtIOpI9 sIHxiWuSJ1MIpXwDirH0SSd/UjISzxGKlZY+MNZKYhhAIGSdhYIFK3NmlN5jNhYp KahjfBIDcf5Fu/3R7vBNWSMYfwoDJ7hXjW2gQb8Q6q6FB/d4yZ8Wy/fAQ1onmdSW thaPh4XYWEzeL4KtcGjdkTUuC5yjWQpGZromimuYMLNOCKsgBNsx1D/Bad7lpZNa CrqDg1bcLC2ZmLs9qoBP5RLCYTBM+1ycrlpSkzjcbBOojOn/TiWh+A+Kktv/J8jk A9xsNgLmEaPiIy6P9FFau5XTWdNg/eQ= -----END CERTIFICATE-----Generated at Mon Apr 7 16:18:55 2025 by rpki-client