$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda78e70-d765-370c-aa32-4ff71cb423e3.roa File: dda78e70-d765-370c-aa32-4ff71cb423e3.roa (raw, json) Hash identifier: chS+u90JgzZ7vFXslE2lMNdOC4brqXhFKkevqYVkBE8= Subject key identifier: 2A:A5:33:41:D3:47:54:2B:1D:13:2B:E8:5F:6E:C2:EE:F2:10:83:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FFBB5D25BB00840D8BC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda78e70-d765-370c-aa32-4ff71cb423e3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 24.218.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:fb:b5:d2:5b:b0:08:40:d8:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=ac6b9f6b-b833-4e7b-b7a5-4544b15d1dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ad:6f:c1:9e:59:63:71:c4:e0:2b:61:3e:1f: 07:90:c5:2b:00:de:3f:2a:02:31:de:8d:9f:12:58: 5c:a6:1a:05:14:a7:cd:36:64:f1:59:92:55:f6:9a: da:44:8c:5a:06:c9:d5:26:1e:d2:f6:93:30:3a:a3: 09:8e:72:d6:14:9b:2a:b3:90:34:58:d5:13:0d:b3: 74:45:79:10:30:1d:3d:1d:9f:f5:84:1b:36:70:49: bc:63:c5:1b:77:bd:7e:58:2d:04:fe:e4:34:21:59: a0:3d:f5:c4:6d:36:89:a7:07:82:cb:12:e9:54:26: 8f:c1:3a:e7:17:08:a0:90:1c:21:82:35:09:5d:c2: 21:4c:51:28:f5:4c:0c:46:70:2d:28:bd:54:20:f5: 32:ff:34:d4:01:fe:70:ec:7d:ce:4c:fb:dc:ce:2f: fc:30:a5:60:99:14:bb:7c:ab:85:cd:a6:3e:ed:de: 52:51:7c:3d:29:56:78:be:d4:00:0a:31:9c:54:0e: ae:d6:7b:97:72:96:e5:8e:b3:79:4d:eb:ed:e9:fd: 90:b3:85:22:36:aa:d4:3f:7f:ef:6f:19:7d:65:13: d6:f1:c8:5e:59:a6:b5:9b:fb:af:89:3e:ef:a8:b4: f6:92:ce:4e:f7:61:dc:8a:4c:92:56:d8:47:87:21: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:33:41:D3:47:54:2B:1D:13:2B:E8:5F:6E:C2:EE:F2:10:83:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda78e70-d765-370c-aa32-4ff71cb423e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.218.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0e:10:b3:03:c1:fa:2c:18:dc:ed:4b:cc:f0:59:5d:d7:75: 1d:e6:19:9e:5e:17:89:8d:27:49:46:e8:7d:dd:12:97:a2:66: 4b:5b:94:6b:48:e3:d1:9e:fb:34:5d:ac:a8:96:f4:64:bf:f3: 8d:a7:9c:ba:e9:18:53:11:4c:29:61:3b:c9:91:61:cd:29:1e: 03:b6:c5:9a:31:18:3c:01:41:4a:e4:00:6b:38:79:a0:2a:34: 95:fe:45:c3:ff:6e:61:37:c4:f8:f0:56:f6:52:43:1b:9e:ba: a6:ab:c1:ff:5b:94:d3:c6:d7:78:fe:36:b8:e4:94:a9:65:06: e4:60:25:1f:8e:5f:9e:19:a3:b2:b8:db:66:61:10:a6:e2:65: 71:64:6b:7d:9f:9f:9a:0f:6f:a9:9b:f5:cb:7f:11:4d:f2:e5: 66:5e:a9:5f:b0:48:92:23:77:d5:df:91:18:1f:29:be:df:dd: 29:50:34:78:b2:8e:a8:98:fc:3b:41:fa:b3:d2:55:fb:35:11: 0c:77:9d:d0:06:42:06:ae:b7:a5:8c:09:2b:31:3c:49:d5:e0: 3c:fd:06:3b:dd:c8:f7:fc:f8:aa:f1:70:76:10:f8:e9:1f:98: d9:97:ab:b7:32:d4:57:1d:bf:94:77:df:9c:d2:b4:09:39:a2: 84:9c:95:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/u10luwCEDYvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YWM2YjlmNmItYjgzMy00ZTdiLWI3YTUtNDU0NGIxNWQxZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh61vwZ5ZY3HE4CthPh8HkMUrAN4/KgIx3o2f ElhcphoFFKfNNmTxWZJV9praRIxaBsnVJh7S9pMwOqMJjnLWFJsqs5A0WNUTDbN0 RXkQMB09HZ/1hBs2cEm8Y8Ubd71+WC0E/uQ0IVmgPfXEbTaJpweCyxLpVCaPwTrn FwigkBwhgjUJXcIhTFEo9UwMRnAtKL1UIPUy/zTUAf5w7H3OTPvczi/8MKVgmRS7 fKuFzaY+7d5SUXw9KVZ4vtQACjGcVA6u1nuXcpbljrN5Tevt6f2Qs4UiNqrUP3/v bxl9ZRPW8cheWaa1m/uviT7vqLT2ks5O92HcikySVthHhyFV7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqlM0HTR1QrHRMr6F9uwu7yEIPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGRhNzhlNzAtZDc2NS0z NzBjLWFhMzItNGZmNzFjYjQyM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGNrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoOELMDwfosGNztS8zwWV3XdR3mGZ5eF4mNJ0lG6H3dEpeiZktblGtI 49Ge+zRdrKiW9GS/842nnLrpGFMRTClhO8mRYc0pHgO2xZoxGDwBQUrkAGs4eaAq NJX+RcP/bmE3xPjwVvZSQxueuqarwf9blNPG13j+NrjklKllBuRgJR+OX54Zo7K4 22ZhEKbiZXFka32fn5oPb6mb9ct/EU3y5WZeqV+wSJIjd9XfkRgfKb7f3SlQNHiy jqiY/DtB+rPSVfs1EQx3ndAGQgaut6WMCSsxPEnV4Dz9BjvdyPf8+KrxcHYQ+Okf mNmXq7cy1Fcdv5R335zStAk5ooSclZ4= -----END CERTIFICATE-----Generated at Tue Jun 3 05:01:11 2025 by rpki-client