$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c40bf428-4a69-3157-a23c-0ce23128b5d2.roa File: c40bf428-4a69-3157-a23c-0ce23128b5d2.roa (raw, json) Hash identifier: IKfRPEXQJzkpxpw09JXbkrfTPDtEwcOlQ7lKZYns678= Subject key identifier: EE:4D:31:7B:97:BC:95:AA:B6:7A:1C:DD:98:D1:E5:7B:33:1C:76:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F823A14CDF79DD082A7580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c40bf428-4a69-3157-a23c-0ce23128b5d2.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 24.21.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:23:a1:4c:df:79:dd:08:2a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=aa4eb5eb-63de-41ef-8069-52121e4c60e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:2e:3c:96:1f:56:ad:a4:f6:64:b9:56:43: 02:64:61:da:2f:4b:97:20:c9:a6:93:eb:e0:d0:57: 3d:6d:51:8c:95:23:cb:cc:83:95:9b:cd:63:ac:48: de:16:90:8a:35:47:10:58:7c:56:80:86:db:4b:a1: 0c:f1:a2:0c:0b:bd:bb:5c:4c:80:31:95:fc:cd:64: 19:52:a2:58:f3:00:f0:29:27:54:2b:68:be:11:28: d9:b8:79:52:0e:ad:5a:f3:e2:d6:a7:02:38:03:a8: 6c:6c:d2:a8:68:8d:04:7c:1f:1d:99:36:54:de:10: c0:c3:3d:7d:aa:3e:1a:66:16:1a:84:71:5b:31:21: 04:91:04:8f:2d:5b:08:e1:5a:be:9c:9d:9b:35:10: e7:60:8d:f9:15:79:68:27:04:b3:82:34:76:60:c6: 49:9d:e9:9a:b9:9e:aa:0b:41:b5:3a:e9:ae:75:35: 68:f6:d4:a5:70:e1:27:e4:c8:d8:1e:38:51:1f:f9: 46:1c:d3:55:6f:b1:d2:f1:74:5f:4f:ed:5f:c3:97: 00:52:86:a6:9a:86:52:5a:d5:cd:62:8f:0f:d0:83: dd:9a:e8:4d:7e:a2:db:49:30:15:30:f8:65:dd:7d: 6b:47:3f:d4:fc:89:45:5e:19:53:45:32:3f:c7:8a: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:31:7B:97:BC:95:AA:B6:7A:1C:DD:98:D1:E5:7B:33:1C:76:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c40bf428-4a69-3157-a23c-0ce23128b5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.21.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:54:43:a2:72:39:a5:2b:79:5c:6b:4a:af:1f:f0:18:46:38: a9:36:34:25:c8:f7:02:01:cb:a5:14:4e:9a:9a:b1:27:a0:f4: 09:fc:86:0e:7b:da:bf:9d:94:a5:9c:93:23:7b:20:e6:8c:69: b0:6a:99:aa:3a:39:f3:5d:5e:ac:df:cc:dd:d0:8c:e4:be:64: 1e:b8:70:a0:59:97:58:b0:57:ec:fb:85:f5:8d:8a:8c:d0:10: 52:7c:56:15:99:76:27:e8:27:e6:b9:88:f2:d5:b4:83:d2:71: b8:5b:96:0b:a9:18:28:48:e2:10:48:0c:12:3f:c9:e7:48:55: f9:0e:42:c2:38:35:9a:39:74:f7:b2:3e:c6:23:ae:98:15:90: 24:31:75:01:fa:fb:14:e9:55:d9:5c:da:24:1a:ac:f2:a5:08: 51:63:19:ce:67:d8:92:87:a7:d8:fc:9b:f0:0e:b3:de:a5:3c: 16:29:69:0f:e7:ad:3e:44:51:40:77:35:c1:af:43:f3:a4:9a: 4f:35:ec:e2:9a:09:d6:5e:1f:3c:89:8a:a6:04:1d:c6:e3:82: 46:e0:07:4a:4f:f3:58:9f:17:b9:8a:2b:2e:44:37:e5:7e:7a: 80:9c:48:c9:d1:b0:10:19:e5:07:91:77:b4:b1:7f:8f:01:50: 34:7f:cf:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+COhTN953QgqdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWE0ZWI1ZWItNjNkZS00MWVmLTgwNjktNTIxMjFlNGM2MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gkuPJYfVq2k9mS5VkMCZGHaL0uXIMmmk+vg 0Fc9bVGMlSPLzIOVm81jrEjeFpCKNUcQWHxWgIbbS6EM8aIMC727XEyAMZX8zWQZ UqJY8wDwKSdUK2i+ESjZuHlSDq1a8+LWpwI4A6hsbNKoaI0EfB8dmTZU3hDAwz19 qj4aZhYahHFbMSEEkQSPLVsI4Vq+nJ2bNRDnYI35FXloJwSzgjR2YMZJnemauZ6q C0G1OumudTVo9tSlcOEn5MjYHjhRH/lGHNNVb7HS8XRfT+1fw5cAUoammoZSWtXN Yo8P0IPdmuhNfqLbSTAVMPhl3X1rRz/U/IlFXhlTRTI/x4oBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5NMXuXvJWqtnoc3ZjR5XszHHZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQwYmY0MjgtNGE2OS0z MTU3LWEyM2MtMGNlMjMxMjhiNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGBUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJUQ6JyOaUreVxrSq8f8BhGOKk2NCXI9wIBy6UUTpqasSeg9An8hg57 2r+dlKWckyN7IOaMabBqmao6OfNdXqzfzN3QjOS+ZB64cKBZl1iwV+z7hfWNiozQ EFJ8VhWZdifoJ+a5iPLVtIPScbhblgupGChI4hBIDBI/yedIVfkOQsI4NZo5dPey PsYjrpgVkCQxdQH6+xTpVdlc2iQarPKlCFFjGc5n2JKHp9j8m/AOs96lPBYpaQ/n rT5EUUB3NcGvQ/Okmk817OKaCdZeHzyJiqYEHcbjgkbgB0pP81ifF7mKKy5EN+V+ eoCcSMnRsBAZ5QeRd7Sxf48BUDR/z9U= -----END CERTIFICATE-----Generated at Mon Apr 7 05:45:54 2025 by rpki-client