$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b4427717-a2e6-3358-9df8-e82b62737617.roa File: b4427717-a2e6-3358-9df8-e82b62737617.roa (raw, json) Hash identifier: qlHBp2z3J77lkci66jDZdZxWkE8n72odaTFNAl1wzkE= Subject key identifier: D3:71:32:9B:C4:C0:DE:AA:C0:25:A0:7E:01:2E:33:42:D2:A6:27:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849071BF039FB51D494A1A00340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b4427717-a2e6-3358-9df8-e82b62737617.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 24.248.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f0:39:fb:51:d4:94:a1:a0:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=6cdad837-76a6-483c-900d-29d80e857c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:87:05:9a:3a:0d:16:c4:90:15:f2:9b:da: dc:ad:62:76:18:7d:53:68:dc:3d:b5:f8:72:17:f3: ab:0a:af:5f:dc:fe:cd:38:63:2e:3e:b8:44:71:25: 73:2c:92:34:e5:61:e5:6f:52:79:97:8e:f0:8f:92: 16:51:32:12:87:89:47:99:0d:80:b1:ba:c6:15:b8: 63:39:98:f4:c6:22:93:72:6e:b6:0d:7a:1d:19:b0: ad:1b:db:d5:30:3a:14:7d:61:68:d0:9f:1f:12:c9: 9c:97:c3:d4:48:2d:b9:1a:81:bf:52:06:31:b7:0b: 11:5b:84:a7:f9:46:7a:d8:3a:b8:da:47:7d:e9:21: f7:9c:6d:91:d0:7f:d0:ac:b1:70:cd:0c:57:20:76: 13:65:56:6e:b5:c8:21:f3:a6:1c:62:d8:af:90:d3: 4a:9b:27:2e:ce:32:53:47:f7:5b:67:56:79:33:97: 01:aa:19:e6:0b:31:62:39:6a:29:33:6b:f6:b6:22: 87:c2:d8:3a:29:04:48:60:02:d3:2a:c5:5f:9c:9f: 63:0f:b2:d2:3f:65:5d:e8:cc:a7:ba:fe:77:fd:84: 21:48:c9:d9:bd:65:d9:a6:03:76:89:96:44:d2:d3: 75:b9:c9:49:ea:f9:e5:6f:be:e4:05:e7:fd:5c:ee: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:71:32:9B:C4:C0:DE:AA:C0:25:A0:7E:01:2E:33:42:D2:A6:27:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b4427717-a2e6-3358-9df8-e82b62737617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.248.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:35:2a:9b:61:c7:47:79:2a:87:0d:06:39:7f:68:e2:a1:fa: db:7f:7f:c9:92:2e:36:e5:1a:75:af:22:82:d3:30:28:b6:b0: 08:98:2d:f3:20:51:bf:6f:d3:b4:f5:d2:96:4e:99:a4:d4:15: 9e:d1:9c:14:11:c8:64:b6:6f:7f:b3:aa:92:d5:bc:19:07:c4: 32:42:2b:5e:1d:9a:91:bc:42:76:71:b2:43:d7:d7:03:f6:93: 7c:0f:b1:18:da:37:4d:ed:c1:b4:d2:c5:95:71:d7:f5:b6:6a: 3c:b9:04:36:bd:21:44:c6:4a:2d:2a:8b:19:97:27:5b:7e:60: b4:09:16:82:8c:be:4c:f5:08:e2:d5:a7:96:94:de:7b:47:a5: 84:80:d2:72:14:e8:94:86:2c:fc:f1:e7:fe:ec:a2:a3:16:73: 51:00:00:9b:4a:07:d1:56:6b:32:eb:97:85:ef:24:91:9c:a6: bc:d3:e8:55:fd:0c:61:eb:f7:35:15:36:82:94:d2:83:d3:0e: ff:11:95:cb:3d:43:29:f1:02:95:c1:ea:8e:08:4d:9d:ed:9c: f9:87:02:4c:18:e4:ce:59:99:3f:c2:0c:e3:d6:11:28:3f:9f: 4b:99:72:7f:8d:48:9d:0f:5e:bb:28:2e:bd:f8:ee:47:73:59: 81:20:d7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/A5+1HUlKGgA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NmNkYWQ4MzctNzZhNi00ODNjLTkwMGQtMjlkODBlODU3YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE6HBZo6DRbEkBXym9rcrWJ2GH1TaNw9tfhy F/OrCq9f3P7NOGMuPrhEcSVzLJI05WHlb1J5l47wj5IWUTISh4lHmQ2AsbrGFbhj OZj0xiKTcm62DXodGbCtG9vVMDoUfWFo0J8fEsmcl8PUSC25GoG/UgYxtwsRW4Sn +UZ62Dq42kd96SH3nG2R0H/QrLFwzQxXIHYTZVZutcgh86YcYtivkNNKmycuzjJT R/dbZ1Z5M5cBqhnmCzFiOWopM2v2tiKHwtg6KQRIYALTKsVfnJ9jD7LSP2Vd6Myn uv53/YQhSMnZvWXZpgN2iZZE0tN1uclJ6vnlb77kBef9XO7r+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNxMpvEwN6qwCWgfgEuM0LSpie3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQ0Mjc3MTctYTJlNi0z MzU4LTlkZjgtZTgyYjYyNzM3NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs1Kpthx0d5KocNBjl/aOKh+tt/f8mSLjblGnWvIoLTMCi2sAiYLfMg Ub9v07T10pZOmaTUFZ7RnBQRyGS2b3+zqpLVvBkHxDJCK14dmpG8QnZxskPX1wP2 k3wPsRjaN03twbTSxZVx1/W2ajy5BDa9IUTGSi0qixmXJ1t+YLQJFoKMvkz1COLV p5aU3ntHpYSA0nIU6JSGLPzx5/7soqMWc1EAAJtKB9FWazLrl4XvJJGcprzT6FX9 DGHr9zUVNoKU0oPTDv8Rlcs9QynxApXB6o4ITZ3tnPmHAkwY5M5ZmT/CDOPWESg/ n0uZcn+NSJ0PXrsoLr347kdzWYEg15E= -----END CERTIFICATE-----Generated at Sun Apr 6 15:59:46 2025 by rpki-client