$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47ce834-c565-3462-9afd-d3d1146296e7.roa File: d47ce834-c565-3462-9afd-d3d1146296e7.roa (raw, json) Hash identifier: 1FbFu96hkTd7EbbZhpb9FTIulXtYRWazXBiXHngXz2w= Subject key identifier: D9:9A:AE:DC:E4:47:BE:5F:80:90:6B:86:88:24:D0:D4:1D:DD:FE:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848B260143FA323605F9DC40CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47ce834-c565-3462-9afd-d3d1146296e7.roa Signing time: Tue 28 Jan 2025 17:34:22 +0000 ROA not before: Tue 28 Jan 2025 17:34:22 +0000 ROA not after: Mon 28 Apr 2025 16:34:22 +0000 asID: 33491 IP address blocks: 24.15.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:60:14:3f:a3:23:60:5f:9d:c4:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 28 17:34:22 2025 GMT Not After : Apr 28 16:34:22 2025 GMT Subject: CN=f16578ed-327f-4d12-880c-10547044d250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:ce:ed:37:d2:b4:d8:60:81:dd:0b:3b:b5: fc:a2:06:ab:6a:01:d6:86:50:cd:e1:35:c9:6c:a0: 41:09:ab:a5:59:e4:27:34:b5:d3:86:7b:e1:35:12: df:d1:be:29:2e:7a:9c:52:02:18:00:be:05:bd:31: 0d:6b:c3:32:52:ea:3e:68:a8:30:dc:3f:3b:da:84: 1a:f8:8e:f0:e6:92:0f:91:e2:95:4f:f1:86:aa:6b: 6f:9e:e3:4d:ac:c5:7e:46:4a:81:aa:70:77:ba:de: 93:3b:16:d1:0b:9a:fc:50:16:8f:4f:71:a9:89:47: 2d:aa:cc:ff:f6:5f:fe:c2:c1:66:0f:ab:fc:8b:13: d8:60:90:a7:25:19:88:7d:d0:df:56:68:4d:41:17: cd:38:67:91:cc:0a:6a:56:82:0c:f1:37:79:af:80: a8:a0:f9:c1:13:de:8d:37:9d:8e:63:7b:9d:99:e4: 71:59:f6:9b:9a:8a:e0:87:3d:6f:1c:f7:30:ef:a7: 8e:eb:ad:90:46:3d:2f:9e:61:a6:f3:67:ca:2c:b1: 5e:d4:5e:8a:85:46:d5:aa:ab:11:41:fe:84:38:df: 0f:ac:2c:35:26:5d:5c:c8:33:47:dd:0b:4b:d9:ce: dc:1b:b0:a9:22:85:a4:1d:ad:71:48:10:1f:b2:80: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:AE:DC:E4:47:BE:5F:80:90:6B:86:88:24:D0:D4:1D:DD:FE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47ce834-c565-3462-9afd-d3d1146296e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.15.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:80:54:62:a9:a4:49:55:15:19:57:77:45:5d:0f:5a:92:70: e9:32:c9:b9:d3:21:32:ba:a9:96:c9:e0:cb:28:6b:27:69:c2: 73:95:18:ba:c7:01:15:b8:8f:3a:22:ea:27:a9:1e:6c:53:b2: 91:fc:cf:46:22:ed:9e:de:79:78:77:e0:43:38:7e:33:b4:f5: 99:6a:f4:9d:c8:84:33:dd:7d:8e:f2:06:39:40:8f:7f:62:1f: 99:25:12:f4:28:e5:e0:8a:37:2b:a0:6e:a2:a3:59:06:47:f4: b9:77:33:91:8f:92:28:7f:3b:7e:b4:72:2f:6b:c6:1d:a8:65: da:3c:89:39:e4:eb:73:3e:1d:ed:71:72:46:bb:8a:53:1e:f4: 61:0f:44:fc:ca:68:81:84:1a:a0:78:78:cd:96:f4:a6:fe:17: 0a:04:46:47:43:58:ee:2e:b0:a1:4b:a8:17:d0:08:e1:74:02: cc:31:aa:7d:e2:b6:a1:f0:cc:d9:9d:a7:a6:59:3d:a6:65:e1: 50:4a:77:01:f9:6f:47:b8:63:9b:ff:d4:03:81:86:54:06:cf: e1:42:77:c6:57:6d:89:cb:ff:65:1c:c2:74:61:e1:9a:89:fe: 53:db:25:64:7c:9a:59:d7:6a:64:50:9f:cb:52:22:00:1a:d2: 23:b8:29:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyYBQ/oyNgX53EDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyODE3MzQyMloXDTI1MDQyODE2MzQyMlowLzEtMCsGA1UEAxMk ZjE2NTc4ZWQtMzI3Zi00ZDEyLTg4MGMtMTA1NDcwNDRkMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobjO7TfStNhggd0LO7X8ogaragHWhlDN4TXJ bKBBCaulWeQnNLXThnvhNRLf0b4pLnqcUgIYAL4FvTENa8MyUuo+aKgw3D872oQa +I7w5pIPkeKVT/GGqmtvnuNNrMV+RkqBqnB3ut6TOxbRC5r8UBaPT3GpiUctqsz/ 9l/+wsFmD6v8ixPYYJCnJRmIfdDfVmhNQRfNOGeRzApqVoIM8Td5r4CooPnBE96N N52OY3udmeRxWfabmorghz1vHPcw76eO662QRj0vnmGm82fKLLFe1F6KhUbVqqsR Qf6EON8PrCw1Jl1cyDNH3QtL2c7cG7CpIoWkHa1xSBAfsoDbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmartzkR75fgJBrhogk0NQd3f77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQ3Y2U4MzQtYzU2NS0z NDYyLTlhZmQtZDNkMTE0NjI5NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaAVGKppElVFRlXd0VdD1qScOkyybnTITK6qZbJ4MsoaydpwnOVGLrH ARW4jzoi6iepHmxTspH8z0Yi7Z7eeXh34EM4fjO09Zlq9J3IhDPdfY7yBjlAj39i H5klEvQo5eCKNyugbqKjWQZH9Ll3M5GPkih/O360ci9rxh2oZdo8iTnk63M+He1x cka7ilMe9GEPRPzKaIGEGqB4eM2W9Kb+FwoERkdDWO4usKFLqBfQCOF0Aswxqn3i tqHwzNmdp6ZZPaZl4VBKdwH5b0e4Y5v/1AOBhlQGz+FCd8ZXbYnL/2UcwnRh4ZqJ /lPbJWR8mlnXamRQn8tSIgAa0iO4KSE= -----END CERTIFICATE-----Generated at Fri Mar 14 14:41:16 2025 by rpki-client