$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2421dec5-04d3-30ff-818e-e76275542a78.roa File: 2421dec5-04d3-30ff-818e-e76275542a78.roa (raw, json) Hash identifier: QnVqIbzJMLATDrAK0A7+kZ5VhP1nfI5ApsbhK5WRFQI= Subject key identifier: 18:69:90:98:BB:B8:13:6A:76:8F:C5:6C:83:E1:24:78:67:5E:3D:61 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC952BDEA8FBEE9558118A0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2421dec5-04d3-30ff-818e-e76275542a78.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 24.124.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:52:bd:ea:8f:be:e9:55:81:18:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=6e1ff74a-3ac7-4389-80e7-1900a6dca1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:68:04:03:f1:b7:fc:be:f3:89:7b:61:0d:1b: ef:19:82:c8:19:6a:15:9a:61:7a:8c:04:42:52:c4: a7:14:98:01:dd:34:cb:13:86:6d:18:73:f7:80:50: 4e:18:68:f7:59:3b:49:b6:68:47:5f:0a:9f:e5:0e: f6:82:8d:0f:a1:db:54:5d:74:1f:81:96:bf:cf:a8: ce:14:f2:8b:3e:b4:2d:1d:05:1c:a5:70:16:e5:09: 1b:e1:ec:d6:1d:85:d6:a7:bd:ed:4e:d9:35:6b:90: 35:93:3b:38:09:17:8a:ae:6e:63:7c:e9:7a:3e:25: d9:1f:00:a8:37:01:48:1b:a5:bf:a6:2c:aa:ea:dd: 7b:3a:45:be:44:b8:d7:02:78:17:66:18:95:5d:4f: 6a:24:87:a3:95:f8:71:45:cc:56:71:ca:c6:27:62: 10:19:ac:cf:3e:6e:6c:11:34:2c:35:07:f7:71:1d: a5:91:c7:92:bc:84:02:ea:f2:0a:af:a7:fe:57:4a: f6:e5:6b:89:ab:3d:71:d6:2b:aa:46:03:46:6e:c4: 56:99:88:50:ee:78:91:70:74:e5:b2:dc:7d:f3:9a: e9:a9:48:91:03:5e:d8:8c:c3:9e:61:15:78:29:26: 7c:c3:50:61:30:48:ca:28:d5:b0:56:a4:e1:2b:16: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:69:90:98:BB:B8:13:6A:76:8F:C5:6C:83:E1:24:78:67:5E:3D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2421dec5-04d3-30ff-818e-e76275542a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cf:72:e8:a9:ed:53:bb:c5:7c:a4:43:7e:76:30:7a:0c:a2: f6:e7:50:f3:f1:9f:dd:09:de:3b:12:50:5c:26:c2:34:49:86: bc:77:05:67:00:fb:f1:12:66:4a:3d:86:b0:cd:ba:57:67:8a: de:5e:43:63:86:60:42:7e:af:f5:f6:98:89:29:89:75:8c:17: 26:0f:f2:cb:75:f1:18:e3:c3:49:6d:7f:60:b0:93:c9:a6:e5: d1:51:b1:1c:d9:aa:8c:d6:71:bc:2a:3e:af:91:38:8c:0c:ea: 82:56:d4:a3:d6:f3:90:5d:f1:a4:13:e9:3d:5e:86:9b:9f:32: 96:ee:0b:ce:fa:8b:e6:d5:82:91:df:e3:a8:a4:06:33:f8:1d: 7f:e2:8a:58:49:a5:9d:da:f5:34:c5:c7:0b:93:52:02:dc:22: f9:66:95:52:56:ec:7e:90:a2:6c:c5:17:15:fd:b3:0a:e1:c0: 0f:b2:ef:eb:d8:5a:fa:75:33:3c:a9:c1:e0:df:67:ad:9b:cf: a8:e4:34:98:26:b1:ce:58:14:71:05:8e:be:60:77:cc:57:0f: 1a:86:11:c5:c2:ab:9a:75:d5:b2:3b:5d:95:69:f9:8e:52:96: 04:82:2c:0b:12:b2:b4:47:8d:ae:2c:6c:f7:6c:7a:29:c3:51: 75:c3:9d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVK96o++6VWBGKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmUxZmY3NGEtM2FjNy00Mzg5LTgwZTctMTkwMGE2ZGNhMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62gEA/G3/L7ziXthDRvvGYLIGWoVmmF6jARC UsSnFJgB3TTLE4ZtGHP3gFBOGGj3WTtJtmhHXwqf5Q72go0PodtUXXQfgZa/z6jO FPKLPrQtHQUcpXAW5Qkb4ezWHYXWp73tTtk1a5A1kzs4CReKrm5jfOl6PiXZHwCo NwFIG6W/piyq6t17OkW+RLjXAngXZhiVXU9qJIejlfhxRcxWccrGJ2IQGazPPm5s ETQsNQf3cR2lkceSvIQC6vIKr6f+V0r25WuJqz1x1iuqRgNGbsRWmYhQ7niRcHTl stx985rpqUiRA17YjMOeYRV4KSZ8w1BhMEjKKNWwVqThKxYMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhpkJi7uBNqdo/FbIPhJHhnXj1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMjQyMWRlYzUtMDRkMy0z MGZmLTgxOGUtZTc2Mjc1NTQyYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHPcuip7VO7xXykQ352MHoMovbnUPPxn90J3jsSUFwmwjRJhrx3BWcA +/ESZko9hrDNuldnit5eQ2OGYEJ+r/X2mIkpiXWMFyYP8st18Rjjw0ltf2Cwk8mm 5dFRsRzZqozWcbwqPq+ROIwM6oJW1KPW85Bd8aQT6T1ehpufMpbuC876i+bVgpHf 46ikBjP4HX/iilhJpZ3a9TTFxwuTUgLcIvlmlVJW7H6QomzFFxX9swrhwA+y7+vY Wvp1MzypweDfZ62bz6jkNJgmsc5YFHEFjr5gd8xXDxqGEcXCq5p11bI7XZVp+Y5S lgSCLAsSsrRHja4sbPdseinDUXXDneE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:28:36 2025 by rpki-client