$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf431da-8607-3be0-a367-483d31fef39a.roa File: daf431da-8607-3be0-a367-483d31fef39a.roa (raw, json) Hash identifier: 9SIbfx32siAlR12FWRmIHeEiEru9CGegaIUVb5kgypQ= Subject key identifier: ED:60:B6:21:E5:7E:53:7F:46:87:83:7C:E0:2D:BB:0F:64:D1:A1:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FFF16796D75F156A2E2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf431da-8607-3be0-a367-483d31fef39a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 24.34.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ff:16:79:6d:75:f1:56:a2:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=672b5d87-a3df-4fa5-bb65-c2dfba221ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:b1:46:56:39:1b:6d:55:10:e2:a4:c7:2b: 57:2e:37:6d:9a:bc:50:8d:1c:dd:60:7b:e4:9c:0e: 94:5d:27:23:97:08:7d:16:f5:8e:9a:9f:14:3f:b1: e1:5b:26:83:bc:76:02:cf:69:3d:96:e9:ac:50:c3: 60:2b:51:ce:76:ed:c4:0a:13:47:85:c0:9d:59:97: 54:aa:93:3b:54:8d:e6:55:76:25:f4:e2:c6:13:d1: 01:b1:48:5d:82:f8:fc:12:68:03:cf:54:ab:4e:df: ad:7a:14:67:c6:6e:45:61:0f:6b:34:19:f7:ac:02: 5a:77:b0:a9:c9:ed:ab:fa:c7:a1:f2:1c:37:c3:f1: 4f:f1:37:37:4a:c6:a5:47:ec:a6:37:ef:0c:ff:2d: 58:8c:a5:69:17:b7:63:7c:a6:e0:40:88:0e:ea:5d: 1d:ac:6f:5e:2c:fa:fc:10:77:8c:17:92:95:16:29: ed:75:43:1f:52:91:0d:f3:75:89:8a:9a:b0:4c:31: 1f:da:1a:c4:7f:50:cb:30:54:42:74:69:1e:32:72: 9b:ca:9a:ca:88:1d:df:46:1e:03:b5:47:79:57:ce: 3d:9a:2e:b1:47:1e:68:a3:0a:f4:32:cf:c4:09:bb: ba:5e:d4:51:44:6f:66:19:10:3c:ea:00:3a:c2:9f: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:B6:21:E5:7E:53:7F:46:87:83:7C:E0:2D:BB:0F:64:D1:A1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf431da-8607-3be0-a367-483d31fef39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.34.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:db:0a:d0:93:82:cb:14:47:4a:c4:fb:9d:01:aa:cf:0c:88: a9:9c:e7:6a:55:78:d3:19:d0:ed:4f:59:6c:b3:2c:0d:99:ba: dd:cb:a3:a0:fc:30:92:35:cc:7c:10:f1:b6:e1:a8:d1:75:df: 4c:ea:8a:1f:a2:e0:0b:e3:12:e0:37:c0:a5:2d:e8:79:5d:0c: 91:0f:b9:98:01:be:08:7e:11:7b:a3:47:6d:ed:e1:2a:be:da: dc:a0:0d:d1:51:a0:3e:b5:5d:b3:d0:1f:86:97:d2:69:25:80: 63:d7:7b:b0:74:71:15:ad:05:1c:1f:e1:b7:a9:ce:3a:4c:7b: 32:20:08:9e:f1:2b:ad:5f:3c:86:7b:ec:97:fd:78:f8:cf:df: 02:64:3c:02:62:8d:b4:9c:20:32:eb:36:f4:4f:8e:31:3a:c1: 88:81:b4:e6:9e:ed:3e:9e:88:dc:c0:a7:3f:ea:32:24:5b:6b: 18:ca:47:be:7c:b7:5a:2a:88:b0:39:b2:03:34:2a:3a:1a:a5: 91:d3:45:c7:cb:46:3b:e5:ee:70:61:84:aa:d9:56:af:d6:59: 04:91:e7:91:04:65:f4:27:cc:ac:d1:49:85:49:47:0e:bd:d5: fa:66:d3:b8:ad:98:02:22:97:31:ff:0d:33:79:20:52:c8:84: 31:a4:b3:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/8WeW118Vai4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NjcyYjVkODctYTNkZi00ZmE1LWJiNjUtYzJkZmJhMjIxYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZSxRlY5G21VEOKkxytXLjdtmrxQjRzdYHvk nA6UXScjlwh9FvWOmp8UP7HhWyaDvHYCz2k9lumsUMNgK1HOdu3EChNHhcCdWZdU qpM7VI3mVXYl9OLGE9EBsUhdgvj8EmgDz1SrTt+tehRnxm5FYQ9rNBn3rAJad7Cp ye2r+seh8hw3w/FP8Tc3SsalR+ymN+8M/y1YjKVpF7djfKbgQIgO6l0drG9eLPr8 EHeMF5KVFintdUMfUpEN83WJipqwTDEf2hrEf1DLMFRCdGkeMnKbyprKiB3fRh4D tUd5V849mi6xRx5oowr0Ms/ECbu6XtRRRG9mGRA86gA6wp9+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1gtiHlflN/RoeDfOAtuw9k0aGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFmNDMxZGEtODYwNy0z YmUwLWEzNjctNDgzZDMxZmVmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfbCtCTgssUR0rE+50Bqs8MiKmc52pVeNMZ0O1PWWyzLA2Zut3Lo6D8 MJI1zHwQ8bbhqNF130zqih+i4AvjEuA3wKUt6HldDJEPuZgBvgh+EXujR23t4Sq+ 2tygDdFRoD61XbPQH4aX0mklgGPXe7B0cRWtBRwf4bepzjpMezIgCJ7xK61fPIZ7 7Jf9ePjP3wJkPAJijbScIDLrNvRPjjE6wYiBtOae7T6eiNzApz/qMiRbaxjKR758 t1oqiLA5sgM0KjoapZHTRcfLRjvl7nBhhKrZVq/WWQSR55EEZfQnzKzRSYVJRw69 1fpm07itmAIilzH/DTN5IFLIhDGkswM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:58:13 2025 by rpki-client