$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1020e1d-15a5-3dd8-b0b1-2331731584b2.roa File: d1020e1d-15a5-3dd8-b0b1-2331731584b2.roa (raw, json) Hash identifier: 3sRcjpJNS4GSaltIkSx/Ln2dQ4ypHkeH3dWzpFV9yHA= Subject key identifier: 28:B0:F6:9D:C9:2A:8C:71:9C:C5:E5:81:48:6D:F0:F6:25:BD:D0:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FB9962E276666711ABC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1020e1d-15a5-3dd8-b0b1-2331731584b2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 24.20.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b9:96:2e:27:66:66:71:1a:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2b8e82cd-f902-413e-b9a7-cfc59f1c8f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:12:dd:f3:f8:e4:84:bd:92:cb:d9:85:26: 48:db:ff:0a:dc:65:e8:06:bd:31:c1:76:6e:04:5c: d3:37:68:e6:59:86:8c:f1:d1:04:20:95:5e:d0:d1: 36:25:e0:ee:2f:eb:4d:12:8b:82:41:75:00:e8:62: 33:17:3a:b9:71:2f:e8:8a:61:1e:64:e9:a5:78:a7: 5e:e5:5f:ce:17:8e:05:1b:c2:09:d2:cb:17:57:e1: 49:ae:9d:15:fa:e8:04:dc:9f:58:65:e8:a6:40:02: e3:c7:1f:c6:97:18:6b:78:da:4e:91:29:3e:51:06: 93:0e:02:39:20:2b:f3:51:db:7b:5d:68:9f:fb:7b: 89:09:76:fd:0a:9b:23:c9:e8:c2:a1:45:b2:f4:4f: f5:e9:6c:33:cf:a0:2f:fb:a6:73:a6:a5:93:56:9c: d5:e6:11:48:93:e8:82:e2:5d:7c:d3:2b:4f:81:f3: 81:33:d3:e8:a5:fd:9d:74:09:7f:52:ac:d6:c2:8f: 80:77:7f:89:f8:29:89:43:13:41:f5:b4:44:20:30: 0e:4c:0b:c8:db:e8:f0:eb:45:82:85:55:1c:1e:47: c7:14:3d:80:39:35:7e:f1:df:c5:d6:f4:8e:a3:1d: 76:33:31:7c:09:ca:39:4d:5d:b0:63:8a:98:4f:c5: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:F6:9D:C9:2A:8C:71:9C:C5:E5:81:48:6D:F0:F6:25:BD:D0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1020e1d-15a5-3dd8-b0b1-2331731584b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:90:2a:f2:14:f6:a5:a6:1f:b4:f4:5e:2a:4e:65:96:9a:01: 0b:38:3a:21:26:31:7d:ae:64:03:6e:b9:8f:80:ca:87:2e:02: 1b:85:2d:3d:12:82:eb:6b:cc:e2:9e:70:a8:8d:5a:5a:bd:e8: 2a:b8:31:60:e9:dc:8b:8d:6a:2f:78:55:d7:ba:7b:cb:81:c9: 79:0c:f8:66:d7:8b:45:6f:5a:a3:8e:60:df:ec:1e:6a:26:d1: 4b:7f:0b:28:48:f5:a4:6b:7c:f4:84:7a:f5:81:62:31:0a:3d: e5:69:1a:e6:65:fe:1d:bd:9e:cc:35:6b:cb:6a:c2:85:1c:4b: 44:83:a7:70:f4:db:2a:8f:23:5d:11:5e:aa:86:7e:7c:8b:eb: 0e:6b:2c:9f:6a:4e:b1:a1:f8:c5:2d:fb:3a:40:9c:03:76:cb: c7:dd:9e:76:08:8b:81:28:94:16:01:77:9c:cb:bb:77:ee:1b: f8:cb:10:ac:a6:d0:8f:ee:1b:3d:c8:10:b8:a9:83:6b:a1:4f: ee:db:92:55:8d:62:26:b6:0d:fc:92:d2:d6:7a:d2:4c:fa:62: 5c:b5:2d:6d:46:0f:71:f8:23:a6:91:8e:43:ed:5a:40:8c:af: 54:0f:a3:32:fd:59:de:93:06:6d:09:e8:49:2a:32:3f:35:31: 6a:6f:3a:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7mWLidmZnEavAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MmI4ZTgyY2QtZjkwMi00MTNlLWI5YTctY2ZjNTlmMWM4ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAMS3fP45IS9ksvZhSZI2/8K3GXoBr0xwXZu BFzTN2jmWYaM8dEEIJVe0NE2JeDuL+tNEouCQXUA6GIzFzq5cS/oimEeZOmleKde 5V/OF44FG8IJ0ssXV+FJrp0V+ugE3J9YZeimQALjxx/GlxhreNpOkSk+UQaTDgI5 ICvzUdt7XWif+3uJCXb9CpsjyejCoUWy9E/16Wwzz6Av+6ZzpqWTVpzV5hFIk+iC 4l180ytPgfOBM9Popf2ddAl/UqzWwo+Ad3+J+CmJQxNB9bREIDAOTAvI2+jw60WC hVUcHkfHFD2AOTV+8d/F1vSOox12MzF8Cco5TV2wY4qYT8W2YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiw9p3JKoxxnMXlgUht8PYlvdCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDEwMjBlMWQtMTVhNS0z ZGQ4LWIwYjEtMjMzMTczMTU4NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWQKvIU9qWmH7T0XipOZZaaAQs4OiEmMX2uZANuuY+AyocuAhuFLT0S gutrzOKecKiNWlq96Cq4MWDp3IuNai94Vde6e8uByXkM+GbXi0VvWqOOYN/sHmom 0Ut/CyhI9aRrfPSEevWBYjEKPeVpGuZl/h29nsw1a8tqwoUcS0SDp3D02yqPI10R XqqGfnyL6w5rLJ9qTrGh+MUt+zpAnAN2y8fdnnYIi4EolBYBd5zLu3fuG/jLEKym 0I/uGz3IELipg2uhT+7bklWNYia2DfyS0tZ60kz6Yly1LW1GD3H4I6aRjkPtWkCM r1QPozL9Wd6TBm0J6EkqMj81MWpvOqY= -----END CERTIFICATE-----Generated at Tue Jun 3 06:13:24 2025 by rpki-client