$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf431da-8607-3be0-a367-483d31fef39a.roa File: daf431da-8607-3be0-a367-483d31fef39a.roa (raw, json) Hash identifier: bfNvHClTwrtj/44MPpEQSKKoxdcE6fQIBq69/cIKhdg= Subject key identifier: 97:74:47:69:C9:33:F3:4C:27:8A:3F:AF:F0:07:2B:A8:A3:61:C6:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6F0ED9193385EA8BB4E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf431da-8607-3be0-a367-483d31fef39a.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 24.34.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:f0:ed:91:93:38:5e:a8:bb:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5b9f2908-3498-4f32-9832-d0cec36e777c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:cf:7e:50:4c:7b:28:57:d3:c3:fb:b3:5c: 09:05:1f:b0:41:47:2d:28:60:d2:10:ea:b1:b9:db: 10:76:47:2c:1f:12:53:fc:b6:11:22:cf:88:d7:c7: 57:79:04:06:f2:6a:02:21:14:69:d0:ac:66:db:46: ad:eb:ab:83:d3:d8:01:a2:d1:c6:e8:eb:95:5a:28: 2d:cd:72:c2:d6:0d:a7:92:b2:1c:3e:aa:5d:a5:7f: 41:75:1b:03:99:40:d8:a7:75:46:fb:4c:a1:b3:b3: 60:e8:63:68:de:b8:95:04:bd:50:08:dd:b9:7b:5e: 24:da:11:47:9f:c3:47:3b:78:b3:91:64:cb:e2:4f: ce:b5:f8:00:78:af:7d:9f:1c:a1:99:ea:81:00:6b: 47:05:a4:fa:9a:3a:17:b8:8b:c6:55:82:88:6f:84: fb:91:4c:14:72:e7:f6:9a:8b:d9:42:a5:b7:f1:a2: 34:e5:93:39:c7:f8:39:94:05:89:48:e9:c1:ed:85: 2c:13:61:c0:fd:e4:9d:76:08:28:1f:29:98:e3:18: 12:b2:8a:0c:b8:03:2f:da:9d:94:3b:90:c0:60:dc: e0:d6:77:9b:46:bf:ea:2b:e7:19:64:30:d2:05:fe: 2c:0c:89:5f:db:be:0f:9e:90:57:8c:e8:22:e3:d5: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:47:69:C9:33:F3:4C:27:8A:3F:AF:F0:07:2B:A8:A3:61:C6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf431da-8607-3be0-a367-483d31fef39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.34.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:aa:67:4c:f5:19:b0:40:41:9c:6d:f1:84:15:b4:a7:79:87: 58:2e:92:02:b6:72:35:f7:41:f7:d6:f8:00:5d:6f:68:bb:59: 4f:c3:68:b4:f8:0d:8a:9b:27:8f:8c:d6:0c:0e:f2:11:4e:7c: 0b:a5:31:dc:cd:71:dc:f0:d5:72:c5:00:4f:be:cd:f7:2c:ab: 67:4b:69:d8:de:da:00:41:01:cb:88:67:25:d2:37:cb:e9:4f: ce:bd:7d:54:8f:84:66:2c:dd:7f:10:ac:a6:0c:b3:85:1c:10: 15:13:44:fc:e2:d5:2f:48:98:7a:06:34:bb:c8:22:00:14:17: e3:d2:ae:75:64:89:f1:ba:d5:08:dc:e0:ba:16:22:65:20:80: a4:2c:74:b7:d0:03:e6:db:ef:65:b7:b5:24:fd:df:0e:de:2d: 5e:18:a5:e2:5d:f2:c5:1d:d6:51:ea:28:c3:c7:f8:04:18:82: 17:cd:f5:c6:93:6b:03:c7:7b:fc:d6:39:84:22:9c:60:86:fc: a0:d2:b5:a3:fa:02:37:07:ef:11:e5:fa:3d:32:20:66:d8:73: db:63:e6:b2:b3:e6:b8:7d:d0:55:1e:73:c9:11:61:0c:d7:9f: 27:e6:a5:0e:30:f3:90:d9:ed:4c:b3:9f:da:ec:d3:d0:89:c9: 87:be:ac:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09vDtkZM4Xqi7ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NWI5ZjI5MDgtMzQ5OC00ZjMyLTk4MzItZDBjZWMzNmU3NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpDPflBMeyhX08P7s1wJBR+wQUctKGDSEOqx udsQdkcsHxJT/LYRIs+I18dXeQQG8moCIRRp0Kxm20at66uD09gBotHG6OuVWigt zXLC1g2nkrIcPqpdpX9BdRsDmUDYp3VG+0yhs7Ng6GNo3riVBL1QCN25e14k2hFH n8NHO3izkWTL4k/OtfgAeK99nxyhmeqBAGtHBaT6mjoXuIvGVYKIb4T7kUwUcuf2 movZQqW38aI05ZM5x/g5lAWJSOnB7YUsE2HA/eSddggoHymY4xgSsooMuAMv2p2U O5DAYNzg1nebRr/qK+cZZDDSBf4sDIlf274PnpBXjOgi49Ww+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd0R2nJM/NMJ4o/r/AHK6ijYcabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFmNDMxZGEtODYwNy0z YmUwLWEzNjctNDgzZDMxZmVmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6qZ0z1GbBAQZxt8YQVtKd5h1gukgK2cjX3QffW+ABdb2i7WU/DaLT4 DYqbJ4+M1gwO8hFOfAulMdzNcdzw1XLFAE++zfcsq2dLadje2gBBAcuIZyXSN8vp T869fVSPhGYs3X8QrKYMs4UcEBUTRPzi1S9ImHoGNLvIIgAUF+PSrnVkifG61Qjc 4LoWImUggKQsdLfQA+bb72W3tST93w7eLV4YpeJd8sUd1lHqKMPH+AQYghfN9caT awPHe/zWOYQinGCG/KDStaP6AjcH7xHl+j0yIGbYc9tj5rKz5rh90FUec8kRYQzX nyfmpQ4w85DZ7Uyzn9rs09CJyYe+rOc= -----END CERTIFICATE-----Generated at Sun Apr 6 12:01:49 2025 by rpki-client