$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e05fe8dd-7df8-3499-bf28-e71051ea1378.roa File: e05fe8dd-7df8-3499-bf28-e71051ea1378.roa (raw, json) Hash identifier: 8V5araiNKVgecqaXvzTiOIGepH8USozakvuV7zy6LNU= Subject key identifier: 30:69:2E:4A:9D:5A:F0:1F:73:90:76:87:42:C1:E4:3C:0A:D4:92:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BF53F9D547A3A8BA7D080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e05fe8dd-7df8-3499-bf28-e71051ea1378.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 24.104.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:f5:3f:9d:54:7a:3a:8b:a7:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=75b14995-d00d-4da7-b41e-804618bc431a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:b5:65:65:94:a0:71:59:fd:86:56:6f:f8: e8:f3:05:ab:9b:2a:5c:b6:0b:5b:e0:e2:dc:fe:52: 11:fe:92:71:26:2b:d7:49:5e:1a:cf:27:8f:cd:a8: 0f:32:d7:94:35:36:d9:2a:b0:88:33:ac:a2:bd:c7: 99:cf:2f:83:44:79:7d:f1:32:9e:cb:56:be:6b:9e: f1:0d:05:19:5d:63:31:b1:f7:44:aa:01:c6:3b:75: 4a:14:ac:43:bb:1c:4a:bc:b0:d3:e4:99:e5:02:8c: 46:d2:0c:3a:35:c1:08:cd:70:11:75:da:f2:0c:41: ed:59:d1:e5:51:df:41:4c:1a:90:82:d7:72:a1:e8: 66:35:6e:99:ab:2b:5c:82:c6:c3:44:bc:b7:cf:d6: bc:83:71:53:91:80:a8:bc:bb:fd:3d:96:5f:fb:60: 4c:6f:dc:24:23:a1:e3:e9:91:d2:55:31:62:6b:e5: 34:a2:42:e0:6d:5f:5e:eb:cf:7f:43:66:a4:10:01: 1a:0b:2d:45:9a:62:7f:7a:d9:74:23:05:e9:c2:1e: f5:f6:6b:9b:61:ca:67:26:1d:1c:5f:18:a3:77:c0: ee:d8:5d:d3:06:64:97:68:23:29:47:5b:02:5a:03: 4a:69:fc:fb:33:1b:dd:0d:1e:c6:1c:67:05:b4:94: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:69:2E:4A:9D:5A:F0:1F:73:90:76:87:42:C1:E4:3C:0A:D4:92:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e05fe8dd-7df8-3499-bf28-e71051ea1378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.104.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d1:f8:98:9f:c8:6e:4a:67:9d:c4:97:8b:06:88:57:0f:23: 36:0c:71:8a:b7:49:98:39:09:75:51:57:6a:ae:d3:60:3b:9d: 66:a7:99:e6:31:22:c7:73:18:b4:51:6f:4a:46:91:7c:e0:8c: 04:7d:60:13:3d:f2:ba:f6:87:5e:be:3d:d1:10:a8:4b:44:bf: 73:50:c5:79:c1:fc:f0:69:43:ae:fe:0a:50:45:3f:ab:00:be: 74:6e:0b:3a:0a:2a:92:34:0e:48:a7:f3:ea:a8:cb:1f:38:ce: 36:22:a1:a1:38:0c:a4:f3:26:4b:74:0d:61:00:d1:9d:44:e9: 62:ca:9f:97:3d:81:60:19:e8:7d:f7:8f:cd:5d:3a:f0:d9:a3: a2:3c:68:29:fa:31:8b:dc:89:04:82:9e:8f:af:a1:e8:08:67: d7:61:28:d0:4f:78:f6:2c:52:45:cc:c1:9a:04:ec:92:03:bc: dc:4a:b8:27:00:8a:ae:4f:61:dc:14:bf:d2:45:92:6c:76:44: 60:8f:46:43:23:c6:cb:74:70:8d:4d:2b:b2:08:1f:9a:f0:82: 28:07:b2:ed:e2:6a:8a:06:23:82:a3:92:8e:91:81:0f:18:ce: b2:62:94:0b:43:ba:a8:c5:b0:8e:69:54:47:38:34:2e:76:52: 3c:e3:54:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea/U/nVR6Ooun0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzViMTQ5OTUtZDAwZC00ZGE3LWI0MWUtODA0NjE4YmM0MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wK1ZWWUoHFZ/YZWb/jo8wWrmypctgtb4OLc /lIR/pJxJivXSV4azyePzagPMteUNTbZKrCIM6yivceZzy+DRHl98TKey1a+a57x DQUZXWMxsfdEqgHGO3VKFKxDuxxKvLDT5JnlAoxG0gw6NcEIzXARddryDEHtWdHl Ud9BTBqQgtdyoehmNW6ZqytcgsbDRLy3z9a8g3FTkYCovLv9PZZf+2BMb9wkI6Hj 6ZHSVTFia+U0okLgbV9e689/Q2akEAEaCy1FmmJ/etl0IwXpwh719mubYcpnJh0c Xxijd8Du2F3TBmSXaCMpR1sCWgNKafz7MxvdDR7GHGcFtJQ0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBpLkqdWvAfc5B2h0LB5DwK1JLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTA1ZmU4ZGQtN2RmOC0z NDk5LWJmMjgtZTcxMDUxZWExMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDR+JifyG5KZ53El4sGiFcPIzYMcYq3SZg5CXVRV2qu02A7nWanmeYx IsdzGLRRb0pGkXzgjAR9YBM98rr2h16+PdEQqEtEv3NQxXnB/PBpQ67+ClBFP6sA vnRuCzoKKpI0Dkin8+qoyx84zjYioaE4DKTzJkt0DWEA0Z1E6WLKn5c9gWAZ6H33 j81dOvDZo6I8aCn6MYvciQSCno+voegIZ9dhKNBPePYsUkXMwZoE7JIDvNxKuCcA iq5PYdwUv9JFkmx2RGCPRkMjxst0cI1NK7IIH5rwgigHsu3iaooGI4Kjko6RgQ8Y zrJilAtDuqjFsI5pVEc4NC52UjzjVKk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:59 2025 by rpki-client