$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa File: 2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa (raw, json) Hash identifier: YBYTbTi9zvvBqIzlnJPas5bl12UVgAV/Cxy4zLn0SSo= Subject key identifier: 8F:6F:74:91:76:1A:AA:7D:30:34:5C:7C:7A:7C:43:A3:07:62:88:24 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2C2025CC9276677DE11B2E00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 11232 IP address blocks: 24.124.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:25:cc:92:76:67:7d:e1:1b:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=158fd876-283c-45b8-b007-8df8e816b727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:f0:52:77:11:9f:a6:4f:49:62:2c:34:91: a8:74:63:1b:16:27:07:75:b1:27:bd:80:17:d4:37: ed:5b:01:cb:3a:6a:4b:30:34:5a:94:98:89:7c:7b: 3c:5e:0d:52:af:59:52:81:a3:7f:e8:70:0d:b2:6f: ad:eb:41:e1:ca:3d:10:6e:67:66:bd:54:fb:b4:18: 55:34:6a:96:26:cc:94:92:3b:19:ef:c7:ef:3a:60: 2b:ab:37:79:11:21:e4:d8:33:3e:a7:50:73:46:59: 6b:f2:5f:b9:7f:16:5a:61:22:94:bb:9d:28:0f:b2: fc:e3:36:0f:c8:c7:32:7b:fd:b2:54:db:84:86:a4: 58:36:38:21:df:08:61:e3:36:9b:d7:d4:b0:8b:ff: 75:07:35:01:cb:b2:e0:1f:8c:31:64:16:d4:7a:d0: 05:ae:cd:b2:f4:4a:66:7c:4e:92:9f:86:55:eb:a0: 3f:a7:31:0e:95:6c:7c:6c:86:48:d3:93:34:7e:59: 10:84:98:c8:e0:98:51:69:31:39:5e:1e:24:32:cb: 5f:58:84:d7:9d:02:1f:c6:fb:d8:f9:e5:8a:94:cd: b4:13:30:55:77:84:0b:98:ce:39:20:a5:bc:d5:36: cf:f5:20:4e:3a:c3:36:60:3b:4a:d2:41:a8:fe:3d: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:74:91:76:1A:AA:7D:30:34:5C:7C:7A:7C:43:A3:07:62:88:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ac:21:fc:da:29:cd:69:0f:9d:94:72:60:79:89:22:69:6e: dd:4e:fa:4f:86:ab:ec:21:58:8f:3f:4c:82:f7:fb:33:9f:40: fc:60:ac:6d:1b:3b:52:97:30:7a:aa:69:81:09:63:f3:43:62: 36:78:82:46:c2:86:ee:51:a8:02:04:79:6e:00:bd:36:a9:ac: ca:75:ff:28:21:98:cb:1c:f8:7c:9f:bf:14:94:0c:84:cb:b2: 01:37:81:a7:02:2a:e5:a1:c9:f8:cb:16:17:1d:42:0b:55:c9: 7b:57:83:54:c6:8f:54:dc:ea:f0:45:e6:c4:9a:4c:c7:d8:eb: 85:10:33:40:03:a1:ab:e6:22:ea:48:83:4a:49:d3:e9:b0:4d: b5:6e:bc:fd:5e:c4:e4:2f:01:e2:1b:4f:f8:db:db:c4:a4:e4: e8:b8:93:a1:66:8f:6a:56:c8:6e:44:d6:52:db:29:f1:81:10: 63:99:69:66:4f:28:f4:86:69:5b:c3:1d:cd:a9:8a:8a:dd:c8: 9b:d4:82:c5:8f:b6:f4:ae:60:e6:14:64:0b:1b:47:ec:55:4a: 6f:8d:b0:33:dc:cb:5f:92:8c:6d:cb:ad:14:b2:bf:70:ce:d5: 3f:f4:67:70:17:95:97:20:5b:a4:34:6a:d8:b9:60:4e:0e:9b: a5:43:08:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICXMknZnfeEbLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MTU4ZmQ4NzYtMjgzYy00NWI4LWIwMDctOGRmOGU4MTZiNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3DwUncRn6ZPSWIsNJGodGMbFicHdbEnvYAX 1DftWwHLOmpLMDRalJiJfHs8Xg1Sr1lSgaN/6HANsm+t60Hhyj0QbmdmvVT7tBhV NGqWJsyUkjsZ78fvOmArqzd5ESHk2DM+p1BzRllr8l+5fxZaYSKUu50oD7L84zYP yMcye/2yVNuEhqRYNjgh3whh4zab19Swi/91BzUBy7LgH4wxZBbUetAFrs2y9Epm fE6Sn4ZV66A/pzEOlWx8bIZI05M0flkQhJjI4JhRaTE5Xh4kMstfWITXnQIfxvvY +eWKlM20EzBVd4QLmM45IKW81TbP9SBOOsM2YDtK0kGo/j3L9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9vdJF2Gqp9MDRcfHp8Q6MHYogkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMmY1ZTVjNWUtYjRhOC0z MWM3LWE1MTQtYjUwZmFiMzQwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqsIfzaKc1pD52UcmB5iSJpbt1O+k+Gq+whWI8/TIL3+zOfQPxgrG0b O1KXMHqqaYEJY/NDYjZ4gkbChu5RqAIEeW4AvTaprMp1/yghmMsc+HyfvxSUDITL sgE3gacCKuWhyfjLFhcdQgtVyXtXg1TGj1Tc6vBF5sSaTMfY64UQM0ADoavmIupI g0pJ0+mwTbVuvP1exOQvAeIbT/jb28Sk5Oi4k6Fmj2pWyG5E1lLbKfGBEGOZaWZP KPSGaVvDHc2piordyJvUgsWPtvSuYOYUZAsbR+xVSm+NsDPcy1+SjG3LrRSyv3DO 1T/0Z3AXlZcgW6Q0ati5YE4Om6VDCLA= -----END CERTIFICATE-----Generated at Sun Jun 15 16:34:57 2025 by rpki-client