$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa File: d4a448df-629c-3de8-b3e6-c45c16d29639.roa (raw, json) Hash identifier: ec38IWicRrOkgwJCvAQI+oBuq3JCDRK/G2DK7XaaPYg= Subject key identifier: B7:D8:07:8D:54:DB:4A:73:3C:98:CD:EE:F2:CB:5E:17:F5:02:43:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FBAF1A97A2AD279063200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 24.20.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ba:f1:a9:7a:2a:d2:79:06:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f16b8cc0-6286-4ede-ae5f-b77fbe308216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:6d:d4:dc:ce:7b:3a:77:f8:59:3e:87:68: 19:3c:a5:a0:66:cc:d2:14:18:44:e1:51:01:29:3a: 24:37:06:b8:b2:6e:2d:39:a7:9f:90:05:77:49:3a: 12:18:9d:80:f8:70:90:62:a5:57:88:8b:bf:b2:3d: 1e:07:c6:62:8b:c4:6e:2e:1f:9a:9a:77:1a:c6:2c: 7f:f2:7c:ab:f2:b2:1d:42:66:22:bc:99:fe:f4:21: 46:d1:77:02:e8:d2:b8:c9:6d:34:08:e6:43:e4:67: be:1b:02:a3:64:8d:36:d9:e9:39:55:63:67:44:3b: b9:dc:4a:35:94:dd:e9:e4:78:1a:6f:bb:84:e5:4e: 2a:0f:e9:3a:c3:34:8c:f8:57:c2:84:24:aa:9f:96: 03:56:24:45:1f:19:4e:c1:97:ff:1b:44:cd:aa:ac: 28:dc:42:e1:34:63:bd:40:85:a2:b2:75:f5:ea:6c: 85:3e:ff:66:02:79:db:01:13:92:f0:d2:af:8d:df: 29:8f:5e:53:75:2e:9c:ba:c2:bf:e8:e3:16:ac:8c: ed:40:e2:6d:0a:6f:d8:67:27:1f:1a:d5:5f:aa:88: e8:c9:b4:41:33:7c:10:a6:d2:56:79:9c:33:dc:e0: 57:da:d5:c6:e9:02:ff:09:f2:26:50:51:56:93:c7: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:07:8D:54:DB:4A:73:3C:98:CD:EE:F2:CB:5E:17:F5:02:43:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f5:dd:d3:e8:bc:32:59:f7:e9:7a:56:25:af:8e:27:37:ba: f7:1c:c3:f5:0e:ca:8e:8b:5d:80:20:cf:0c:76:58:20:4e:2b: 21:89:6f:f1:13:fd:1a:cb:d8:9b:0e:c9:ea:eb:ec:47:3c:bb: 4b:d6:77:45:6e:e4:1b:6b:b7:64:c2:00:e0:20:f5:9d:e2:33: 07:08:a9:02:a6:8a:20:63:d4:e3:49:24:4d:8f:9e:14:4c:81: da:60:a9:08:49:b4:4b:d9:d0:72:56:cd:82:3a:5d:14:2c:27: 14:6b:da:f3:26:a5:3c:a6:f3:7a:00:f4:40:8d:73:ae:48:24: f9:10:e6:9d:9a:4e:02:55:76:88:e0:81:b7:10:c4:51:f7:ac: 79:b1:e2:f7:1c:c2:94:05:59:2f:e7:f3:97:fc:d0:5e:99:56: 44:eb:df:2a:ea:1e:f3:02:bc:38:1f:14:8b:c8:af:3c:18:28: f8:17:f2:96:dd:66:b4:43:34:ea:2e:9c:9f:b0:f3:ca:e5:19: 4b:f6:cd:8b:bf:c6:f0:54:c9:76:9d:a1:02:62:1a:a4:ca:03: 1b:e4:69:e3:e5:42:7b:a0:e9:d6:e8:3d:cc:d3:c2:f7:53:b0: 6d:2e:b7:38:72:17:d9:1a:77:29:98:bc:3e:cc:0c:71:80:bc: 47:2d:12:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7rxqXoq0nkGMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjE2YjhjYzAtNjI4Ni00ZWRlLWFlNWYtYjc3ZmJlMzA4MjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn5t1NzOezp3+Fk+h2gZPKWgZszSFBhE4VEB KTokNwa4sm4tOaefkAV3SToSGJ2A+HCQYqVXiIu/sj0eB8Zii8RuLh+amncaxix/ 8nyr8rIdQmYivJn+9CFG0XcC6NK4yW00COZD5Ge+GwKjZI022ek5VWNnRDu53Eo1 lN3p5Hgab7uE5U4qD+k6wzSM+FfChCSqn5YDViRFHxlOwZf/G0TNqqwo3ELhNGO9 QIWisnX16myFPv9mAnnbAROS8NKvjd8pj15TdS6cusK/6OMWrIztQOJtCm/YZycf GtVfqojoybRBM3wQptJWeZwz3OBX2tXG6QL/CfImUFFWk8eh5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfYB41U20pzPJjN7vLLXhf1AkPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRhNDQ4ZGYtNjI5Yy0z ZGU4LWIzZTYtYzQ1YzE2ZDI5NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj13dPovDJZ9+l6ViWvjic3uvccw/UOyo6LXYAgzwx2WCBOKyGJb/ET /RrL2JsOyerr7Ec8u0vWd0Vu5Btrt2TCAOAg9Z3iMwcIqQKmiiBj1ONJJE2PnhRM gdpgqQhJtEvZ0HJWzYI6XRQsJxRr2vMmpTym83oA9ECNc65IJPkQ5p2aTgJVdojg gbcQxFH3rHmx4vccwpQFWS/n85f80F6ZVkTr3yrqHvMCvDgfFIvIrzwYKPgX8pbd ZrRDNOounJ+w88rlGUv2zYu/xvBUyXadoQJiGqTKAxvkaePlQnug6dboPczTwvdT sG0utzhyF9kadymYvD7MDHGAvEctEuA= -----END CERTIFICATE-----Generated at Tue Jun 3 05:06:13 2025 by rpki-client