$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9c8c169-e1f2-364d-ae61-5933eb8ec496.roa File: c9c8c169-e1f2-364d-ae61-5933eb8ec496.roa (raw, json) Hash identifier: 7R65+iSpNRE0CVnrs3OOj8LJcChyKLIpwcf/3f9cB8s= Subject key identifier: D3:86:69:1A:17:A9:AD:F2:A0:0F:DF:FA:93:27:5A:F7:3A:99:E5:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C44ECBE0829017D0AF280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9c8c169-e1f2-364d-ae61-5933eb8ec496.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 24.131.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:44:ec:be:08:29:01:7d:0a:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=da1f8866-c0d0-45f8-bb86-68e634f0661b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:92:c0:24:59:3e:31:51:22:e0:f8:dd:dc: 3d:e1:e1:f4:89:16:29:13:e3:00:63:9f:f3:cc:57: 29:78:6b:0a:ce:01:02:19:4b:17:11:6b:f7:64:f8: e4:ec:5f:39:eb:78:75:f4:02:3b:4a:61:54:48:aa: d4:1a:43:a3:ca:08:e8:25:a3:78:66:33:5c:12:95: dd:72:09:11:f9:a7:7c:13:1e:ad:11:1d:42:51:41: 9f:b7:b4:d5:7b:01:8d:8b:11:aa:6f:6c:d8:4f:02: 30:18:30:44:bb:d5:63:0c:60:39:b3:42:63:24:67: dc:e1:93:9a:01:ae:65:d9:38:ba:95:4a:50:51:7d: 68:89:79:fa:09:01:2e:9d:9c:5f:6f:a0:9c:1d:8d: a5:bf:21:8c:14:8b:6d:a7:34:05:cd:ed:39:a0:0c: 76:7d:8b:bb:45:02:06:62:9c:ae:67:dd:37:08:81: 50:89:f3:5a:23:e1:f7:09:29:6a:da:15:9a:5c:c1: ef:de:d0:ae:d2:19:7b:94:4d:73:ec:9f:5c:e6:08: e7:a6:98:11:54:87:34:13:37:86:2f:88:ea:65:e5: 58:8e:13:10:01:c8:b9:e4:b4:93:f5:af:27:d2:6d: 8d:b8:7d:ab:58:2c:02:5a:9e:a9:69:40:03:49:1b: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:69:1A:17:A9:AD:F2:A0:0F:DF:FA:93:27:5A:F7:3A:99:E5:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9c8c169-e1f2-364d-ae61-5933eb8ec496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.131.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8d:da:ea:01:14:d9:69:6e:5a:7b:d3:40:a0:72:f4:3c:10: e0:7e:7b:14:e5:a7:ac:ba:71:c6:26:58:2e:4c:ea:76:e1:7b: 13:42:46:6f:4c:20:93:34:71:aa:e2:b8:b4:d2:e8:fa:d1:74: 5e:a2:83:ce:4e:34:df:bb:d6:ce:2d:18:e7:fe:87:b3:be:59: ee:bd:f9:78:16:1f:a6:1f:ec:64:fb:c3:f7:f5:42:c2:d7:60: a6:98:08:00:fb:51:4c:22:60:b6:70:08:d9:0d:6e:fd:7f:08: bd:1e:1b:42:45:81:c1:35:ac:6b:b3:ad:f7:78:4e:07:57:5a: 90:f9:cf:e3:b1:e6:41:b3:00:cb:3b:56:a6:26:33:44:ef:d0: c8:ba:ab:69:8d:58:8a:a8:0e:37:ce:d6:6e:de:0e:d3:82:78: 2b:36:c4:b3:43:d8:66:cf:f4:f4:1b:65:32:4a:05:83:51:94: 40:0e:ce:1f:50:36:7f:55:0c:bb:f1:ca:1b:26:6d:06:65:a0: a1:fc:69:e8:91:59:54:d5:90:4b:7e:05:b1:ea:e8:78:a9:cd: 22:2f:b7:b1:86:3a:c3:be:66:b6:79:2e:4d:d1:66:85:f9:33: 0d:91:3f:21:03:c9:7e:7b:d5:ff:f7:e5:d0:06:a8:eb:ce:0b: e6:fd:91:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebETsvggpAX0K8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGExZjg4NjYtYzBkMC00NWY4LWJiODYtNjhlNjM0ZjA2NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXmSwCRZPjFRIuD43dw94eH0iRYpE+MAY5/z zFcpeGsKzgECGUsXEWv3ZPjk7F8563h19AI7SmFUSKrUGkOjygjoJaN4ZjNcEpXd cgkR+ad8Ex6tER1CUUGft7TVewGNixGqb2zYTwIwGDBEu9VjDGA5s0JjJGfc4ZOa Aa5l2Ti6lUpQUX1oiXn6CQEunZxfb6CcHY2lvyGMFIttpzQFze05oAx2fYu7RQIG YpyuZ903CIFQifNaI+H3CSlq2hWaXMHv3tCu0hl7lE1z7J9c5gjnppgRVIc0EzeG L4jqZeVYjhMQAci55LST9a8n0m2NuH2rWCwCWp6paUADSRu5fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOGaRoXqa3yoA/f+pMnWvc6meWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzljOGMxNjktZTFmMi0z NjRkLWFlNjEtNTkzM2ViOGVjNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGIOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCN2uoBFNlpblp700CgcvQ8EOB+exTlp6y6ccYmWC5M6nbhexNCRm9M IJM0cariuLTS6PrRdF6ig85ONN+71s4tGOf+h7O+We69+XgWH6Yf7GT7w/f1QsLX YKaYCAD7UUwiYLZwCNkNbv1/CL0eG0JFgcE1rGuzrfd4TgdXWpD5z+Ox5kGzAMs7 VqYmM0Tv0Mi6q2mNWIqoDjfO1m7eDtOCeCs2xLND2GbP9PQbZTJKBYNRlEAOzh9Q Nn9VDLvxyhsmbQZloKH8aeiRWVTVkEt+BbHq6HipzSIvt7GGOsO+ZrZ5Lk3RZoX5 Mw2RPyEDyX571f/35dAGqOvOC+b9kUU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:25:33 2025 by rpki-client