$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa File: 4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa (raw, json) Hash identifier: nyXFR7RVhBClGaQbuLn7lCSioDbOkYZpCvh56hcH2xc= Subject key identifier: 34:60:F2:36:96:C0:E3:3C:28:17:48:62:51:76:20:BF:0B:8C:72:CC Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584961B9889E7038AB2E02F8F8C0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 5769 IP address blocks: 24.53.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:88:9e:70:38:ab:2e:02:f8:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=77eb18b4-42b6-4e76-8fdc-9d2ec34dc2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:dd:94:99:85:17:f6:3e:89:3e:81:26:70: 84:0d:41:f3:44:e5:29:12:db:66:ca:74:25:5b:d8: bf:f1:39:25:cb:a4:62:6b:30:7a:48:bb:2e:0d:f3: 3f:23:ba:32:3c:5b:6a:f6:6a:1f:e5:64:d0:02:2e: dd:a7:c7:03:74:3d:98:84:6e:bc:06:13:74:9a:f9: 1d:6f:f0:ec:1e:63:a7:9e:49:4e:31:0a:9a:ac:5d: 23:0b:b0:56:81:61:82:c4:41:1e:d3:b7:f9:4c:2d: c7:2a:b5:7a:dc:8e:06:53:ce:74:1a:45:b4:d9:21: f9:ac:39:84:18:89:41:dd:ab:63:0f:46:bf:62:52: 58:d5:7a:7c:c1:7b:db:ee:b4:3b:82:30:8f:66:66: 0b:d5:01:5e:8a:77:ec:97:5a:1b:7f:c7:a2:2b:03: 37:92:db:08:77:31:f6:e9:e5:fa:4b:b6:35:f4:1c: 4b:e0:6b:c1:e1:9c:ee:92:cc:4c:62:08:75:c2:92: ed:08:be:95:0b:20:80:9b:7c:ad:51:69:a1:be:3d: f4:83:d5:5e:c5:6b:b3:be:72:e9:0f:f4:af:f9:d7: 37:66:d3:ab:b1:fa:93:20:30:63:c1:57:a6:68:a0: 1c:ba:27:51:76:95:f8:71:62:06:be:03:a0:30:92: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:F2:36:96:C0:E3:3C:28:17:48:62:51:76:20:BF:0B:8C:72:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 24.53.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:26:0e:e8:3c:c0:ce:de:44:4d:e7:67:02:99:7e:3e:af:3b: 46:a4:2c:9e:07:7c:6b:6e:08:bc:1c:e2:5b:9f:2e:ba:7f:ee: ec:72:b3:df:ab:67:ed:24:12:05:f2:1e:83:41:a4:fc:e1:51: 5e:36:00:a2:4b:8a:54:ad:87:09:41:b8:eb:f8:67:80:fa:df: d3:24:63:4b:54:ef:ce:12:31:d3:c4:c4:cb:8a:bd:57:62:f6: 57:35:c1:85:d5:04:7e:36:2a:d0:a8:e8:aa:30:07:0c:94:39: 2c:61:57:bc:e1:a6:25:62:e2:e8:bc:86:a5:e8:d8:d7:c0:6a: 59:a5:ff:b8:aa:83:f0:ff:81:20:73:36:dc:d5:9f:14:38:1f: 01:54:b8:66:00:9f:82:c1:00:71:27:51:ff:2e:c7:27:c4:72: f0:cf:f4:5c:6a:12:c2:fd:c3:c0:17:46:45:a3:20:0c:da:24: de:71:c1:d4:4d:a2:23:09:3b:aa:f4:d7:ad:a8:67:62:40:ee: 93:79:09:30:04:11:66:8d:bd:16:9c:69:69:18:b8:a6:56:49: 6c:67:d2:83:9b:e1:ba:08:2c:4f:ac:15:9c:07:54:fc:26:00: 96:33:2d:b7:d2:99:2b:dd:86:bc:c3:a9:56:16:2a:b4:3f:c1: 0e:c9:cb:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYiecDirLgL4+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NzdlYjE4YjQtNDJiNi00ZTc2LThmZGMtOWQyZWMzNGRjMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD/dlJmFF/Y+iT6BJnCEDUHzROUpEttmynQl W9i/8Tkly6RiazB6SLsuDfM/I7oyPFtq9mof5WTQAi7dp8cDdD2YhG68BhN0mvkd b/DsHmOnnklOMQqarF0jC7BWgWGCxEEe07f5TC3HKrV63I4GU850GkW02SH5rDmE GIlB3atjD0a/YlJY1Xp8wXvb7rQ7gjCPZmYL1QFeinfsl1obf8eiKwM3ktsIdzH2 6eX6S7Y19BxL4GvB4ZzuksxMYgh1wpLtCL6VCyCAm3ytUWmhvj30g9VexWuzvnLp D/Sv+dc3ZtOrsfqTIDBjwVemaKAcuidRdpX4cWIGvgOgMJJsrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRg8jaWwOM8KBdIYlF2IL8LjHLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNGNjNWY3ODUtY2RlMS0z MWM4LWE1ZGEtMWUxNWMyNWQwMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGDUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGImDug8wM7eRE3nZwKZfj6vO0akLJ4HfGtuCLwc4lufLrp/7uxys9+r Z+0kEgXyHoNBpPzhUV42AKJLilSthwlBuOv4Z4D639MkY0tU784SMdPExMuKvVdi 9lc1wYXVBH42KtCo6KowBwyUOSxhV7zhpiVi4ui8hqXo2NfAalml/7iqg/D/gSBz NtzVnxQ4HwFUuGYAn4LBAHEnUf8uxyfEcvDP9FxqEsL9w8AXRkWjIAzaJN5xwdRN oiMJO6r0162oZ2JA7pN5CTAEEWaNvRacaWkYuKZWSWxn0oOb4boILE+sFZwHVPwm AJYzLbfSmSvdhrzDqVYWKrQ/wQ7Jy3A= -----END CERTIFICATE-----Generated at Tue Apr 15 05:55:08 2025 by rpki-client