$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4585659-fd0a-345a-8dfd-139a685500d6.roa File: d4585659-fd0a-345a-8dfd-139a685500d6.roa (raw, json) Hash identifier: 2B+qe2BFAgELCdkbrn3XVbVRgt6/qFeaTy8IQGQsrdo= Subject key identifier: F8:A5:28:37:46:92:AC:B0:B0:D9:EE:A7:65:7A:63:83:55:76:E6:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06CC7F12102E4F3F8A3400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4585659-fd0a-345a-8dfd-139a685500d6.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 24.5.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:cc:7f:12:10:2e:4f:3f:8a:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=e26fb2b8-095b-4cbc-9778-f7edeacfc125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:a4:cc:a8:cf:70:4c:14:64:8b:77:a7:01: c1:46:ca:10:70:ef:9a:80:66:2d:01:99:6d:b3:19: 2e:e0:21:39:9e:75:89:f3:76:a4:5d:71:bd:85:a3: 5e:a4:09:c3:fd:29:d4:13:bb:40:8e:c0:02:fc:56: 9e:aa:71:2f:ba:8f:d7:74:4c:f8:63:f1:82:90:a9: 8f:c7:eb:83:ef:d9:02:c3:3d:3f:cb:5d:8e:bd:bb: 22:e1:da:71:31:6d:ea:23:e5:d6:5c:56:17:f4:07: bd:c5:da:f8:f1:f6:e6:f0:8d:64:29:67:93:46:60: 75:30:fa:97:c6:a1:60:a3:03:fe:64:d0:a1:f9:b9: d8:9d:55:bb:27:d2:f0:e4:b8:05:52:e3:f3:c2:e9: 65:fe:c2:86:a4:db:ce:a6:47:e3:e9:ad:2c:b7:5b: 66:a6:20:23:14:7b:63:a0:31:da:9e:e1:5a:9f:26: ce:74:1f:f8:51:7b:82:81:62:07:cb:b1:6f:2f:2f: ca:83:b9:5f:1e:86:70:99:74:bb:28:3e:3f:5e:fe: 46:d5:50:24:2f:3f:cf:e5:d1:c3:31:2c:47:9e:d3: d7:a8:46:f6:29:30:4e:e6:f2:44:f0:08:3a:88:fd: cf:2c:cd:6e:e0:ad:06:da:7b:36:b8:e0:c0:6a:d2: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A5:28:37:46:92:AC:B0:B0:D9:EE:A7:65:7A:63:83:55:76:E6:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4585659-fd0a-345a-8dfd-139a685500d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.5.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:21:98:11:3d:2f:82:e7:20:88:b7:10:a8:bf:21:4e:a6:35: 37:e3:a4:4b:c1:71:45:46:14:03:33:84:47:81:9a:aa:29:de: 5a:a6:a6:42:58:31:ea:a8:69:2c:d5:f4:ca:3c:c4:7e:e2:2c: 9c:27:81:d9:c9:ad:c8:d9:2a:94:74:c2:57:13:ee:9f:e0:53: df:f3:e3:dd:e9:e1:8b:fe:76:17:79:5d:52:ca:26:20:45:20: 55:42:a6:29:28:c9:77:7d:41:61:39:e7:94:98:ea:67:bc:f4: f0:0a:51:4e:89:2c:5f:16:cd:52:fa:af:9f:5f:0d:87:a5:4f: c7:8d:24:37:bf:a7:d5:c3:d7:c1:15:da:42:aa:ae:30:60:06: c3:cc:1d:b7:70:2c:c0:b2:af:a1:8f:f5:34:be:93:3b:d4:1c: 34:77:0c:74:17:88:b2:ba:48:77:82:21:13:b6:6c:a6:c5:65: 3c:44:fe:5c:79:91:3d:d1:1a:c4:0b:09:3d:25:1b:39:1a:1d: b6:ba:f0:6c:f7:1b:bf:01:0a:e6:20:6c:c9:54:8c:76:9f:d1: 5f:e9:08:4d:0d:18:2b:5c:48:4e:46:19:24:0a:43:65:a8:d1: 61:7d:51:d1:77:64:3a:fb:02:44:3a:cb:ed:4e:26:b8:7e:72: 21:32:8d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBsx/EhAuTz+KNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTI2ZmIyYjgtMDk1Yi00Y2JjLTk3NzgtZjdlZGVhY2ZjMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxOkzKjPcEwUZIt3pwHBRsoQcO+agGYtAZlt sxku4CE5nnWJ83akXXG9haNepAnD/SnUE7tAjsAC/FaeqnEvuo/XdEz4Y/GCkKmP x+uD79kCwz0/y12Ovbsi4dpxMW3qI+XWXFYX9Ae9xdr48fbm8I1kKWeTRmB1MPqX xqFgowP+ZNCh+bnYnVW7J9Lw5LgFUuPzwull/sKGpNvOpkfj6a0st1tmpiAjFHtj oDHanuFanybOdB/4UXuCgWIHy7FvLy/Kg7lfHoZwmXS7KD4/Xv5G1VAkLz/P5dHD MSxHntPXqEb2KTBO5vJE8Ag6iP3PLM1u4K0G2ns2uODAatLTSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPilKDdGkqywsNnup2V6Y4NVduZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQ1ODU2NTktZmQwYS0z NDVhLThkZmQtMTM5YTY4NTUwMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEhmBE9L4LnIIi3EKi/IU6mNTfjpEvBcUVGFAMzhEeBmqop3lqmpkJY MeqoaSzV9Mo8xH7iLJwngdnJrcjZKpR0wlcT7p/gU9/z493p4Yv+dhd5XVLKJiBF IFVCpikoyXd9QWE555SY6me89PAKUU6JLF8WzVL6r59fDYelT8eNJDe/p9XD18EV 2kKqrjBgBsPMHbdwLMCyr6GP9TS+kzvUHDR3DHQXiLK6SHeCIRO2bKbFZTxE/lx5 kT3RGsQLCT0lGzkaHba68Gz3G78BCuYgbMlUjHaf0V/pCE0NGCtcSE5GGSQKQ2Wo 0WF9UdF3ZDr7AkQ6y+1OJrh+ciEyjWs= -----END CERTIFICATE-----Generated at Tue Jun 3 05:40:10 2025 by rpki-client