$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa File: 4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa (raw, json) Hash identifier: r3OsKU092R2x5h+oTNjQKoegRNOsM4z3CaPFySe2ygE= Subject key identifier: 00:53:68:F7:1B:E1:46:FA:2C:09:26:44:43:37:EC:3A:5B:A5:C8:5A Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2C20264BF64FA84AD6EA6E40 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 11232 IP address blocks: 24.124.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:26:4b:f6:4f:a8:4a:d6:ea:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=b0d7bebb-df72-47c6-8be1-f57bb6e2a673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:b1:1c:fa:a2:ea:87:9e:60:61:97:0c:86: 74:2e:2a:bc:9f:71:a9:1a:3b:06:b4:6e:0a:7d:48: d8:c4:0f:75:e7:61:ea:3d:f1:6f:b9:32:7b:03:bd: 30:d8:d9:0f:35:af:bb:09:33:c7:cc:01:4d:5d:85: 3b:85:dd:f6:6d:21:6c:d2:b6:4d:93:99:08:1b:f3: 97:a6:b1:4d:1c:4a:37:90:3f:62:9e:ca:fe:80:ff: 38:5a:aa:44:93:6a:5c:1c:2b:88:50:89:2a:aa:af: ca:0e:3f:52:23:24:8f:6f:10:07:14:4a:90:7c:ec: 24:36:ec:2a:dc:ec:80:97:ec:9f:66:21:37:18:5a: e3:f2:34:23:d0:08:aa:0e:3b:0b:c3:1b:c7:5e:83: 97:04:49:b0:89:ed:23:50:f7:de:f0:b0:a3:6f:53: 05:bf:47:5a:4e:e0:10:f9:31:09:89:a8:31:92:bf: 7f:30:6e:2d:bb:1b:4e:6b:72:64:b8:d5:24:de:89: a5:ad:97:e5:fa:62:44:56:57:66:f1:9f:a4:64:98: 07:0e:8b:70:5f:98:a4:ed:8a:9a:7b:c1:fd:71:9f: 97:a1:0d:47:40:6d:46:62:4e:9b:d1:07:ba:e0:0a: e9:78:0a:5a:9e:2b:9d:5c:56:8a:fe:91:a2:1a:33: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:68:F7:1B:E1:46:FA:2C:09:26:44:43:37:EC:3A:5B:A5:C8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c0:62:06:1e:56:c8:f4:60:e4:a6:19:d6:88:fd:da:20:0a: 89:2c:9c:da:2a:0c:0d:8c:f7:dd:4a:b2:4a:e0:07:fb:cd:82: 52:d3:37:44:1d:d3:28:19:52:fb:df:40:6f:6d:0c:09:fb:36: 33:f0:bd:5d:48:d6:4e:45:cd:7d:49:e7:a5:9d:02:ee:39:c0: a9:87:81:04:86:00:98:c2:10:d4:43:63:4d:25:8d:1f:1e:8a: 91:ae:ca:95:c4:6f:81:f0:e8:b2:61:55:22:18:a7:c3:c9:eb: aa:ec:26:6b:f2:51:52:2e:0c:52:6e:01:2a:89:c6:d0:87:ba: c6:d5:08:a8:72:6a:6e:d0:2e:42:27:e8:83:ad:36:34:df:49: f8:38:1b:1f:17:86:c2:38:f9:5b:cc:d7:b9:28:d0:3a:f4:e7: fe:0a:6d:78:89:67:f1:ee:02:7a:a7:23:7c:1f:ae:8e:bb:38: 9e:cc:e4:b6:bf:29:2d:74:6b:0a:8b:a0:d8:d1:1e:58:8e:31: f5:fc:be:98:bd:bd:40:d5:98:a7:5f:73:0a:ee:77:b2:03:76: 23:43:61:f5:18:34:19:3d:34:25:ba:f7:a2:91:d5:bd:77:b0: 62:8d:8d:c6:98:dc:0b:37:a1:0d:14:d0:34:3c:35:f8:25:42: d8:9d:c3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICZL9k+oStbqbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YjBkN2JlYmItZGY3Mi00N2M2LThiZTEtZjU3YmI2ZTJhNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUexHPqi6oeeYGGXDIZ0Liq8n3GpGjsGtG4K fUjYxA9152HqPfFvuTJ7A70w2NkPNa+7CTPHzAFNXYU7hd32bSFs0rZNk5kIG/OX prFNHEo3kD9insr+gP84WqpEk2pcHCuIUIkqqq/KDj9SIySPbxAHFEqQfOwkNuwq 3OyAl+yfZiE3GFrj8jQj0AiqDjsLwxvHXoOXBEmwie0jUPfe8LCjb1MFv0daTuAQ +TEJiagxkr9/MG4tuxtOa3JkuNUk3omlrZfl+mJEVldm8Z+kZJgHDotwX5ik7Yqa e8H9cZ+XoQ1HQG1GYk6b0Qe64ArpeApaniudXFaK/pGiGjMdwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABTaPcb4Ub6LAkmREM37DpbpchaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNGU2YjFlMWEtYjc4OC0z ZTlkLThiN2ItMDQwZmYzMzg0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjAYgYeVsj0YOSmGdaI/dogCoksnNoqDA2M991KskrgB/vNglLTN0Qd 0ygZUvvfQG9tDAn7NjPwvV1I1k5FzX1J56WdAu45wKmHgQSGAJjCENRDY00ljR8e ipGuypXEb4Hw6LJhVSIYp8PJ66rsJmvyUVIuDFJuASqJxtCHusbVCKhyam7QLkIn 6IOtNjTfSfg4Gx8XhsI4+VvM17ko0Dr05/4KbXiJZ/HuAnqnI3wfro67OJ7M5La/ KS10awqLoNjRHliOMfX8vpi9vUDVmKdfcwrud7IDdiNDYfUYNBk9NCW696KR1b13 sGKNjcaY3As3oQ0U0DQ8NfglQtidw3E= -----END CERTIFICATE-----Generated at Sun Jun 15 16:36:27 2025 by rpki-client