$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db0d47fa-e0a9-3be4-bf5f-e1a4c93f8c26.roa File: db0d47fa-e0a9-3be4-bf5f-e1a4c93f8c26.roa (raw, json) Hash identifier: jWxeXBlkQOuWK8ZIZmdX1KuyZmt59jBvP5zO0JWdGD8= Subject key identifier: 3E:E9:72:F0:17:80:81:BA:C5:1C:CD:F2:47:A1:00:99:EA:87:43:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C21A3DC308F482CA27A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db0d47fa-e0a9-3be4-bf5f-e1a4c93f8c26.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 24.125.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:21:a3:dc:30:8f:48:2c:a2:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=cd4499cb-f86b-4443-96b7-3c7eac35676e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:17:7b:9d:af:6b:b4:6d:f2:a6:fe:a5:33: e0:7e:4b:3f:92:0f:f3:7d:58:ac:a1:36:98:69:6f: 9e:06:cd:2b:cf:59:24:79:59:ab:22:35:e3:e6:58: e7:63:03:04:ed:85:df:06:b9:d8:55:75:fd:13:67: 84:7f:ea:fc:16:99:14:85:10:e6:fe:92:9a:a2:28: 3a:0f:83:51:da:cd:ad:8f:f0:7c:44:b5:34:dd:3d: 57:58:83:ea:5a:b6:d1:81:26:f9:c6:4b:47:da:d1: ff:88:ac:4a:af:25:46:c7:f4:e3:32:d3:da:5a:f1: 3a:4e:72:26:51:cd:e0:eb:86:e1:ad:94:11:fc:37: 41:19:95:b3:f2:4a:91:ef:ea:5b:92:cc:8b:d3:e3: 9c:3f:1c:91:15:7b:92:89:13:73:f8:1c:be:6e:40: d1:b5:f6:52:26:4d:45:04:c4:95:fa:36:aa:aa:c5: 65:ec:b9:81:02:3e:9f:3e:e4:54:fe:0c:d9:04:b6: 21:5a:de:b1:c3:98:01:06:b1:59:df:39:a3:58:c9: e6:78:b6:c0:47:b7:f6:c9:50:e9:2b:05:29:18:78: dc:91:de:3b:af:b4:f7:1d:1f:53:a1:96:f3:e4:a8: 43:b2:32:6c:4d:1d:50:a7:a3:59:c9:fd:fa:1b:a6: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:72:F0:17:80:81:BA:C5:1C:CD:F2:47:A1:00:99:EA:87:43:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db0d47fa-e0a9-3be4-bf5f-e1a4c93f8c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.125.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:b8:ec:e9:7a:41:e6:d7:5c:27:e2:3b:ee:bb:f5:e3:34:ba: e0:04:91:0a:b9:ed:ab:bf:9c:a8:cf:fe:d4:be:7a:fd:3e:48: 06:53:93:c0:63:01:5c:65:d3:c2:60:1f:90:6a:eb:57:d9:0d: de:28:61:f9:49:13:79:13:95:17:b2:7a:9f:f1:8d:20:c2:a0: b7:f4:4f:d9:ab:83:51:00:da:23:be:f5:6b:08:f3:5e:6b:6a: d0:e2:61:a0:e1:3f:5e:65:7b:b8:94:ce:b1:04:c9:36:09:7d: c5:56:a5:00:49:88:e6:29:cb:80:95:fa:af:71:82:b6:83:42: f1:1c:17:2e:26:69:35:dc:2b:ff:6a:9e:42:b0:70:cd:fc:1f: 43:35:45:00:d0:23:98:f4:b2:3d:26:b2:25:a7:3c:f2:9e:e7: 26:e4:af:ad:d7:2a:c3:02:a0:3d:9f:f3:0b:9c:b5:66:ae:68: af:9f:6f:d8:5e:f4:54:c5:5e:cb:4f:16:50:c0:18:74:20:7b: 5e:cd:6c:66:51:3c:8e:2f:fa:1d:cd:ca:6b:1c:77:b8:12:2d: 6f:ed:65:49:33:fc:96:eb:66:16:eb:e6:57:88:55:9a:80:60: 3f:b9:71:98:ab:2d:9c:97:8d:a5:a5:a7:59:e8:39:a8:bf:cb: 05:7f:fe:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPCGj3DCPSCyiegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2Q0NDk5Y2ItZjg2Yi00NDQzLTk2YjctM2M3ZWFjMzU2NzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS4Xe52va7Rt8qb+pTPgfks/kg/zfVisoTaY aW+eBs0rz1kkeVmrIjXj5ljnYwME7YXfBrnYVXX9E2eEf+r8FpkUhRDm/pKaoig6 D4NR2s2tj/B8RLU03T1XWIPqWrbRgSb5xktH2tH/iKxKryVGx/TjMtPaWvE6TnIm Uc3g64bhrZQR/DdBGZWz8kqR7+pbksyL0+OcPxyRFXuSiRNz+By+bkDRtfZSJk1F BMSV+jaqqsVl7LmBAj6fPuRU/gzZBLYhWt6xw5gBBrFZ3zmjWMnmeLbAR7f2yVDp KwUpGHjckd47r7T3HR9ToZbz5KhDsjJsTR1Qp6NZyf36G6Z5SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7pcvAXgIG6xRzN8kehAJnqh0NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGIwZDQ3ZmEtZTBhOS0z YmU0LWJmNWYtZTFhNGM5M2Y4YzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANq47Ol6QebXXCfiO+679eM0uuAEkQq57au/nKjP/tS+ev0+SAZTk8Bj AVxl08JgH5Bq61fZDd4oYflJE3kTlReyep/xjSDCoLf0T9mrg1EA2iO+9WsI815r atDiYaDhP15le7iUzrEEyTYJfcVWpQBJiOYpy4CV+q9xgraDQvEcFy4maTXcK/9q nkKwcM38H0M1RQDQI5j0sj0msiWnPPKe5ybkr63XKsMCoD2f8wuctWauaK+fb9he 9FTFXstPFlDAGHQge17NbGZRPI4v+h3Nymscd7gSLW/tZUkz/JbrZhbr5leIVZqA YD+5cZirLZyXjaWlp1noOai/ywV//rU= -----END CERTIFICATE-----Generated at Mon Apr 7 05:48:32 2025 by rpki-client