$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2159bd2-8acc-3916-8109-b314335e4ff6.roa File: f2159bd2-8acc-3916-8109-b314335e4ff6.roa (raw, json) Hash identifier: MvS9S1/aMHYH+MSAjC5f+8JB9DESIj832oH3qLTtNqw= Subject key identifier: 3E:EB:87:E1:45:CC:CC:7F:8E:CA:AF:E8:BE:B6:EE:DD:24:FD:A4:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4316B5A2842C7098C560840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2159bd2-8acc-3916-8109-b314335e4ff6.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 24.91.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:6b:5a:28:42:c7:09:8c:56:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=dc377097-c0d8-4647-9dae-1563021e9d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:fa:75:92:67:2b:3e:5f:fe:f8:d1:10:77: f2:e0:a3:9c:b7:bc:6d:0a:03:8c:34:39:5e:7f:8d: 0f:0c:46:b0:00:ae:98:e2:7d:f9:3d:47:a1:9f:67: 9d:35:2f:17:ee:28:bc:20:f2:1f:7b:ee:ca:56:f7: 2f:64:53:4b:cb:32:d2:a4:03:af:a6:1c:3b:c6:61: 44:45:bd:26:d9:03:d6:98:f6:6f:ab:c5:a3:11:62: fd:c3:a1:13:4c:29:e0:be:d6:f3:c2:91:29:de:e6: 22:83:80:9c:7b:ab:86:12:85:71:4e:fa:c6:e1:8a: 61:37:9e:f5:92:68:8e:2c:b9:11:bd:83:5a:d9:27: 19:c6:d4:b9:e4:16:09:66:d9:e1:70:32:dd:61:c8: 23:51:0d:b7:1d:4f:cf:e5:e6:4b:07:a4:2a:32:93: 14:de:61:74:e5:87:73:98:55:4a:27:73:cb:59:55: ca:b5:d4:c5:40:42:2e:1b:6f:b7:a7:da:7c:07:67: 96:8b:ea:d1:c3:e8:71:a3:77:de:95:76:b3:70:24: 6f:ae:3c:83:ca:2f:60:f3:64:a0:b9:b6:56:46:47: 71:80:e2:8f:c1:b0:5b:ed:ad:86:92:b1:77:91:da: a8:d6:b8:07:fc:bc:02:57:c7:94:67:c9:a1:aa:96: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EB:87:E1:45:CC:CC:7F:8E:CA:AF:E8:BE:B6:EE:DD:24:FD:A4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2159bd2-8acc-3916-8109-b314335e4ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.91.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:64:12:f0:42:c3:66:9d:d7:af:39:a8:67:2e:a4:23:95:d5: ce:5b:02:19:1e:b1:a5:54:87:56:99:bf:f6:1c:0c:96:c0:ef: e9:03:f1:b5:1c:91:e6:74:9a:61:71:12:b2:c8:9b:8c:9d:58: 28:35:b1:60:59:fe:c3:b2:f9:56:42:3d:84:f6:a2:7d:4a:33: e4:2b:89:31:10:2e:1f:ee:e1:c6:03:bd:ef:72:29:fe:2f:20: 53:79:ae:6f:78:b0:2e:04:76:dd:11:2d:cb:d0:45:75:56:fb: 67:e3:7d:87:81:10:8a:78:ac:2c:ff:d6:9f:72:dc:84:21:da: 97:b0:b0:18:59:e1:1e:1a:6c:d9:35:ca:0c:3e:95:58:0e:a0: c6:36:34:39:c8:0f:50:ff:cd:ee:9f:6a:8b:f8:05:f6:9e:a4: 26:32:40:e4:3d:35:29:f7:0a:15:e0:de:4b:6d:5d:e3:31:83: 87:c6:50:ec:b6:18:6d:a2:18:57:55:f6:92:c2:c6:56:5b:08: 3e:20:99:54:59:08:fd:ef:d3:e1:61:44:4e:9d:be:a5:ad:84: 1f:1e:dd:e7:44:e6:68:a1:26:e6:11:48:09:90:b6:6f:48:16: c3:b2:29:37:a3:4a:7b:2d:ec:98:a9:96:50:ab:49:16:cd:c8: c8:4c:5e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMWtaKELHCYxWCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGMzNzcwOTctYzBkOC00NjQ3LTlkYWUtMTU2MzAyMWU5ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk/6dZJnKz5f/vjREHfy4KOct7xtCgOMNDle f40PDEawAK6Y4n35PUehn2edNS8X7ii8IPIfe+7KVvcvZFNLyzLSpAOvphw7xmFE Rb0m2QPWmPZvq8WjEWL9w6ETTCngvtbzwpEp3uYig4Cce6uGEoVxTvrG4YphN571 kmiOLLkRvYNa2ScZxtS55BYJZtnhcDLdYcgjUQ23HU/P5eZLB6QqMpMU3mF05Ydz mFVKJ3PLWVXKtdTFQEIuG2+3p9p8B2eWi+rRw+hxo3felXazcCRvrjyDyi9g82Sg ubZWRkdxgOKPwbBb7a2GkrF3kdqo1rgH/LwCV8eUZ8mhqpagIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7rh+FFzMx/jsqv6L627t0k/aRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIxNTliZDItOGFjYy0z OTE2LTgxMDktYjMxNDMzNWU0ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdkEvBCw2ad1685qGcupCOV1c5bAhkesaVUh1aZv/YcDJbA7+kD8bUc keZ0mmFxErLIm4ydWCg1sWBZ/sOy+VZCPYT2on1KM+QriTEQLh/u4cYDve9yKf4v IFN5rm94sC4Edt0RLcvQRXVW+2fjfYeBEIp4rCz/1p9y3IQh2pewsBhZ4R4abNk1 ygw+lVgOoMY2NDnID1D/ze6faov4BfaepCYyQOQ9NSn3ChXg3kttXeMxg4fGUOy2 GG2iGFdV9pLCxlZbCD4gmVRZCP3v0+FhRE6dvqWthB8e3edE5mihJuYRSAmQtm9I FsOyKTejSnst7JipllCrSRbNyMhMXkc= -----END CERTIFICATE-----Generated at Tue Jun 3 08:02:45 2025 by rpki-client