$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3087fa-78ac-344d-8106-ef969a254161.roa File: df3087fa-78ac-344d-8106-ef969a254161.roa (raw, json) Hash identifier: OtNgE3hj55/bi4GE683ZTtPdyVdwyplIkEYi+Vi5B74= Subject key identifier: 04:B2:00:E2:97:4D:DF:D0:C8:1F:10:9B:7E:66:BC:00:D0:46:C2:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C2AFDBF486A9D4FC66EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3087fa-78ac-344d-8106-ef969a254161.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 24.99.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:2a:fd:bf:48:6a:9d:4f:c6:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=f21818ce-7687-4ce8-9910-b0e44f4735d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:12:9d:c8:92:ff:13:b8:a5:36:8c:12:8d: e7:d1:56:81:15:26:10:32:75:6a:58:5e:77:9d:5e: fa:a5:af:2c:8d:da:27:b6:2d:69:61:01:c6:79:d0: d9:f1:a6:02:88:30:c8:72:f3:9e:72:4d:71:cb:42: ff:a7:a2:ad:22:da:65:e2:64:33:57:af:ac:c4:7d: ea:1d:a0:9f:89:12:14:02:b1:2d:9a:00:f7:fe:66: 1f:9b:a4:37:0d:97:47:f6:81:a0:23:85:40:14:bc: f1:95:a4:af:4f:d9:79:e3:c7:93:7d:be:0e:98:a2: 2c:4d:d0:15:b6:7f:40:97:0d:41:66:fe:f3:52:65: 2d:8a:86:3b:69:b1:8c:b6:81:f4:dc:10:91:7b:b6: f3:de:c8:ff:ef:0c:d8:ce:ef:53:b9:da:8d:2a:17: fa:55:ec:70:25:81:d0:20:cd:18:f8:e5:74:76:f2: 3c:10:9e:81:b7:93:2c:20:fa:08:7e:45:d3:ab:2d: 09:77:e7:69:9f:cc:d2:69:1b:56:20:32:b2:21:61: b2:3b:00:a4:b5:cd:51:eb:9d:3e:58:e3:13:2a:7b: d9:1a:c2:a8:de:b7:25:61:22:27:50:73:54:22:40: 8c:98:65:b2:c0:44:52:44:5c:61:e7:24:7b:4b:bc: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:00:E2:97:4D:DF:D0:C8:1F:10:9B:7E:66:BC:00:D0:46:C2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3087fa-78ac-344d-8106-ef969a254161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d1:76:e4:a0:cc:09:7f:fe:25:b8:26:ad:ad:bc:0f:e9:c9: de:67:8a:2d:9c:a2:cd:91:03:ba:d7:b5:23:80:4a:d2:72:6f: 2c:f4:03:b6:53:b8:16:de:8f:d9:0f:7c:c5:43:25:58:b1:cb: 93:ed:54:27:f3:e4:8a:61:dc:13:17:b5:fa:70:45:80:86:d2: db:ef:a2:3e:ff:a8:0c:97:c4:cd:e9:d2:01:cc:f6:f5:ac:ee: 8d:f8:fb:6e:6e:c1:1f:85:8a:5d:2f:28:0e:e0:dc:d2:9c:14: 92:b9:2a:f1:70:a6:e7:71:48:b3:4e:5f:2a:3b:d7:71:41:95: aa:eb:32:64:0a:e5:cf:d3:89:49:4b:3c:94:b1:b9:cb:4d:94: 26:36:4b:0d:90:e5:2c:d4:d6:3f:db:09:7e:bc:e2:95:ea:1c: 99:44:d4:ac:15:fd:2c:1c:50:4c:74:1e:91:3b:f4:a7:d9:fd: b4:7e:74:cb:12:6f:9c:4e:a3:68:d0:65:92:14:3e:63:aa:c4: 10:a6:5f:7d:d5:94:a0:aa:5c:99:1b:7a:1d:63:10:67:3b:bd: d1:e2:78:55:e4:24:7e:54:f7:3c:b0:74:2d:64:cf:4e:a1:c5: 99:d6:d5:e9:b0:7b:3a:58:6e:60:24:22:fc:4a:73:01:89:4b: e8:6d:ed:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPCr9v0hqnU/GbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjIxODE4Y2UtNzY4Ny00Y2U4LTk5MTAtYjBlNDRmNDczNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzgSnciS/xO4pTaMEo3n0VaBFSYQMnVqWF53 nV76pa8sjdonti1pYQHGedDZ8aYCiDDIcvOeck1xy0L/p6KtItpl4mQzV6+sxH3q HaCfiRIUArEtmgD3/mYfm6Q3DZdH9oGgI4VAFLzxlaSvT9l548eTfb4OmKIsTdAV tn9Alw1BZv7zUmUtioY7abGMtoH03BCRe7bz3sj/7wzYzu9TudqNKhf6VexwJYHQ IM0Y+OV0dvI8EJ6Bt5MsIPoIfkXTqy0Jd+dpn8zSaRtWIDKyIWGyOwCktc1R650+ WOMTKnvZGsKo3rclYSInUHNUIkCMmGWywERSRFxh5yR7S7yAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASyAOKXTd/QyB8Qm35mvADQRsJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYzMDg3ZmEtNzhhYy0z NDRkLTgxMDYtZWY5NjlhMjU0MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGPtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbRduSgzAl//iW4Jq2tvA/pyd5nii2cos2RA7rXtSOAStJybyz0A7ZT uBbej9kPfMVDJVixy5PtVCfz5Iph3BMXtfpwRYCG0tvvoj7/qAyXxM3p0gHM9vWs 7o34+25uwR+Fil0vKA7g3NKcFJK5KvFwpudxSLNOXyo713FBlarrMmQK5c/TiUlL PJSxuctNlCY2Sw2Q5SzU1j/bCX684pXqHJlE1KwV/SwcUEx0HpE79KfZ/bR+dMsS b5xOo2jQZZIUPmOqxBCmX33VlKCqXJkbeh1jEGc7vdHieFXkJH5U9zywdC1kz06h xZnW1emwezpYbmAkIvxKcwGJS+ht7YM= -----END CERTIFICATE-----Generated at Mon Apr 7 10:18:52 2025 by rpki-client