$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb657c9-1403-35c8-ab6a-8cfb3f914ba3.roa File: cfb657c9-1403-35c8-ab6a-8cfb3f914ba3.roa (raw, json) Hash identifier: YsJmaGlfU+Nkgq37KcF28ergFQs2eBYZMH74iQMTrDg= Subject key identifier: 5B:42:53:8C:76:58:6A:4F:15:2E:B2:09:0E:8D:91:DB:2F:E7:7A:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFD9F3613BF7150D7F6E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb657c9-1403-35c8-ab6a-8cfb3f914ba3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 24.130.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:d9:f3:61:3b:f7:15:0d:7f:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=86205e0c-cc6d-43bd-a63e-ac82df2dc1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:46:8c:ae:2e:4e:68:5f:24:58:5b:7f:46: ce:fe:4e:28:7e:6f:69:62:9c:4e:8f:0f:b6:5c:70: 54:3f:22:2a:4e:cf:aa:99:84:ea:11:0d:88:af:d4: 8a:65:14:e5:6a:80:aa:c3:44:48:95:ab:0b:0a:59: e7:34:cf:91:bc:f8:ac:ba:18:40:04:d3:7d:39:50: 82:1d:5e:c2:b4:da:9c:85:b0:ef:4c:2e:b2:73:a1: af:54:ca:d1:de:f8:78:55:bc:b1:8e:fa:ea:cf:19: 68:2e:be:67:45:d6:dc:84:89:07:45:ae:ad:77:dc: 76:b5:a8:86:e3:16:0a:3c:e3:46:ef:64:3d:c0:88: 6c:2f:1e:1a:3f:8e:2e:69:8a:63:d3:71:bd:15:fe: 06:09:c7:e2:c8:c5:ce:0f:3d:b4:dc:1a:c6:7a:43: 55:c5:f8:e4:16:27:ae:a8:d8:97:6d:84:50:65:17: ad:b7:3c:99:42:ee:6e:c7:d8:39:e7:f1:31:84:06: b1:dc:1e:ab:c1:b3:11:4b:67:5a:2b:bb:a9:6e:ec: cd:a1:97:92:2c:37:35:31:b6:0a:2a:75:d2:80:01: 19:aa:55:1b:7f:34:d8:11:ff:da:15:4d:d7:9a:09: 21:6b:2c:f7:56:8e:3f:05:e2:0e:fa:77:c4:cf:f9: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:53:8C:76:58:6A:4F:15:2E:B2:09:0E:8D:91:DB:2F:E7:7A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb657c9-1403-35c8-ab6a-8cfb3f914ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.130.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9f:08:51:d6:cc:86:4b:89:70:d1:9c:63:9a:4b:1f:f9:3f: 94:58:f2:a6:f5:fd:fa:0a:dd:29:6f:70:aa:26:52:89:51:c8: b0:4a:84:85:4a:16:18:53:e9:20:5d:26:28:2c:7f:37:2e:7b: b0:16:d2:02:3f:ec:96:d5:c4:b4:35:2c:23:d0:44:3d:63:0d: 50:88:3f:23:99:05:72:72:d7:9c:7b:05:b9:db:45:86:16:20: b8:d6:4d:a7:92:d4:74:59:72:fc:02:49:5f:e7:a8:62:a9:23: 29:4c:97:cc:9a:6e:82:8e:d7:de:22:a9:a8:c1:6a:9a:b1:9e: 10:e9:ff:13:1a:60:79:42:fb:f9:d2:92:df:88:3f:6b:01:02: c7:d7:97:c7:c6:0b:1f:8a:1e:cc:17:31:c6:8f:46:93:74:6f: ee:e5:bb:86:16:64:a6:60:f2:b8:f0:0b:df:27:be:30:3a:4d: 9f:f9:13:f1:95:db:c7:c8:4b:9c:4c:19:b1:ea:f3:07:31:ce: f0:8f:42:1b:20:84:87:09:6e:5b:02:f7:2b:11:a3:de:6a:ca: 88:d5:c9:3d:57:54:48:b7:63:61:2f:a7:39:a1:e0:d0:7f:a4: 42:66:d3:3d:c6:b6:c5:8f:5f:54:9d:97:96:d9:02:59:e5:62: fa:3e:3e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr9nzYTv3FQ1/bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODYyMDVlMGMtY2M2ZC00M2JkLWE2M2UtYWM4MmRmMmRjMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmJGjK4uTmhfJFhbf0bO/k4ofm9pYpxOjw+2 XHBUPyIqTs+qmYTqEQ2Ir9SKZRTlaoCqw0RIlasLClnnNM+RvPisuhhABNN9OVCC HV7CtNqchbDvTC6yc6GvVMrR3vh4VbyxjvrqzxloLr5nRdbchIkHRa6td9x2taiG 4xYKPONG72Q9wIhsLx4aP44uaYpj03G9Ff4GCcfiyMXODz203BrGekNVxfjkFieu qNiXbYRQZRettzyZQu5ux9g55/ExhAax3B6rwbMRS2daK7upbuzNoZeSLDc1MbYK KnXSgAEZqlUbfzTYEf/aFU3Xmgkhayz3Vo4/BeIO+nfEz/m7ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtCU4x2WGpPFS6yCQ6Nkdsv53pVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZiNjU3YzktMTQwMy0z NWM4LWFiNmEtOGNmYjNmOTE0YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGIKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEafCFHWzIZLiXDRnGOaSx/5P5RY8qb1/foK3SlvcKomUolRyLBKhIVK FhhT6SBdJigsfzcue7AW0gI/7JbVxLQ1LCPQRD1jDVCIPyOZBXJy15x7BbnbRYYW ILjWTaeS1HRZcvwCSV/nqGKpIylMl8yaboKO194iqajBapqxnhDp/xMaYHlC+/nS kt+IP2sBAsfXl8fGCx+KHswXMcaPRpN0b+7lu4YWZKZg8rjwC98nvjA6TZ/5E/GV 28fIS5xMGbHq8wcxzvCPQhsghIcJblsC9ysRo95qyojVyT1XVEi3Y2Evpzmh4NB/ pEJm0z3GtsWPX1Sdl5bZAlnlYvo+PjU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:08 2025 by rpki-client