$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78a9c919-48cd-37f4-9be8-5694de2388b6.roa File: 78a9c919-48cd-37f4-9be8-5694de2388b6.roa (raw, json) Hash identifier: ppEEQqwYGMLwT6D16AawIEd8y50SY+sBM8vOVjtfb8s= Subject key identifier: 7C:D8:56:9C:59:A9:D9:83:66:03:44:85:59:7C:BC:04:5B:7B:FD:E7 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285849DC8FD1064BEDF0BB6C359440 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78a9c919-48cd-37f4-9be8-5694de2388b6.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 394996 IP address blocks: 24.144.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:d1:06:4b:ed:f0:bb:6c:35:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=dc682c12-732e-4140-91ae-f87898514577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:e6:a3:ef:b7:c5:60:91:59:cf:a6:c3:c9: 96:ce:70:28:0e:28:a8:c0:df:0a:13:02:e6:81:54: 76:52:44:1e:4d:43:4b:9e:16:df:bb:bb:cb:d3:a4: 1f:d2:2b:40:24:88:59:d9:71:3c:ef:66:f1:08:29: 31:40:cb:22:9b:b6:06:5a:4d:8e:d7:36:ce:e8:01: 4e:1d:ce:96:e9:9d:51:87:e3:7e:6f:f9:22:1f:26: 9b:34:00:ca:04:07:70:37:40:8c:db:c9:2d:ba:8b: aa:e6:b6:64:1c:af:83:62:19:86:04:3e:ae:e9:73: c7:cd:a0:b5:57:aa:a6:fd:c8:36:9b:7a:a4:00:6d: f7:ed:fd:a7:ff:86:90:ff:65:32:3b:0f:d1:24:aa: 7a:f5:bd:ee:14:a7:a5:3a:f1:a1:bf:f4:c6:42:28: 95:2d:59:9d:95:8b:82:58:a2:33:11:77:98:01:61: 49:cb:ba:95:b7:20:85:27:d0:0d:c2:61:05:93:62: f9:d1:a3:d7:83:c7:28:08:4c:2f:37:ae:0a:60:fc: 78:db:61:f6:77:e9:40:21:68:b6:59:f1:44:ee:d5: 33:86:c7:95:90:40:48:b0:10:14:d9:4e:1f:f0:41: 7d:94:49:9a:d7:e9:d9:5e:2c:89:98:f0:02:cb:fa: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:56:9C:59:A9:D9:83:66:03:44:85:59:7C:BC:04:5B:7B:FD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78a9c919-48cd-37f4-9be8-5694de2388b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 24.144.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:a7:9d:b8:a9:89:c7:52:cc:b8:b0:4b:30:e3:60:ba:f7:e1: 73:ce:71:2d:e3:25:18:36:06:43:77:10:b5:91:27:1a:05:3c: 86:4b:7c:7f:2a:63:c2:7e:50:4f:28:0e:7a:4e:02:3b:7d:4c: ff:8b:ed:2c:3b:98:01:08:c8:93:5e:7e:90:2a:ce:0d:39:8f: 4a:f2:75:80:2a:f9:57:ee:68:44:c6:3d:5d:f8:db:dd:83:78: 09:38:e0:12:29:c8:36:b6:d9:ec:af:c7:b0:42:d9:a2:6e:ea: cc:25:7a:11:cb:3b:97:2f:00:d0:78:69:cb:5e:f4:87:ba:57: 6d:9e:ce:36:e6:11:9a:25:9d:54:3a:56:33:61:21:ad:3a:3d: 03:27:04:02:c3:f2:1d:a6:8f:d0:fa:f8:d9:de:b4:50:25:3b: bf:c9:43:2d:72:cc:f4:d7:ce:32:6a:a6:06:02:73:d1:d5:fb: 0f:5e:4f:7b:2b:19:de:25:5f:dd:3b:41:3f:14:02:53:15:d4: 31:16:8f:00:67:ca:69:a0:3b:69:d8:19:36:10:12:26:fd:ca: cc:11:fe:42:80:bf:0c:96:1c:fd:f7:77:8f:69:4c:7e:07:86: 7a:39:7f:00:12:96:e8:01:a2:25:09:fd:dc:e6:73:f9:61:0b: c3:e1:e4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj9EGS+3wu2w1lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGM2ODJjMTItNzMyZS00MTQwLTkxYWUtZjg3ODk4NTE0NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Pmo++3xWCRWc+mw8mWznAoDiiowN8KEwLm gVR2UkQeTUNLnhbfu7vL06Qf0itAJIhZ2XE872bxCCkxQMsim7YGWk2O1zbO6AFO Hc6W6Z1Rh+N+b/kiHyabNADKBAdwN0CM28ktuouq5rZkHK+DYhmGBD6u6XPHzaC1 V6qm/cg2m3qkAG337f2n/4aQ/2UyOw/RJKp69b3uFKelOvGhv/TGQiiVLVmdlYuC WKIzEXeYAWFJy7qVtyCFJ9ANwmEFk2L50aPXg8coCEwvN64KYPx422H2d+lAIWi2 WfFE7tUzhseVkEBIsBAU2U4f8EF9lEma1+nZXiyJmPACy/o7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzYVpxZqdmDZgNEhVl8vARbe/3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNzhhOWM5MTktNDhjZC0z N2Y0LTliZTgtNTY5NGRlMjM4OGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGJBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2nnbipicdSzLiwSzDjYLr34XPOcS3jJRg2BkN3ELWRJxoFPIZLfH8q Y8J+UE8oDnpOAjt9TP+L7Sw7mAEIyJNefpAqzg05j0rydYAq+VfuaETGPV34292D eAk44BIpyDa22eyvx7BC2aJu6swlehHLO5cvANB4acte9Ie6V22ezjbmEZolnVQ6 VjNhIa06PQMnBALD8h2mj9D6+NnetFAlO7/JQy1yzPTXzjJqpgYCc9HV+w9eT3sr Gd4lX907QT8UAlMV1DEWjwBnymmgO2nYGTYQEib9yswR/kKAvwyWHP33d49pTH4H hno5fwASlugBoiUJ/dzmc/lhC8Ph5JU= -----END CERTIFICATE-----Generated at Sat Jun 7 15:32:16 2025 by rpki-client