$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa File: 6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa (raw, json) Hash identifier: b1D5Bsbf+Cry5Jjg3d2Ueb4ObTY8aDBwyC/zF9dJaGE= Subject key identifier: A3:4F:8C:66:85:8E:86:4F:CA:AE:07:B1:36:DB:E4:01:86:3D:C8:A0 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC9555ADDAE891CD2441DE0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 24.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:55:5a:dd:ae:89:1c:d2:44:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=cadf0af0-6f25-494e-ad33-91c9b929a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:bb:4d:b5:30:c7:44:27:27:71:e2:53:ff: 92:d2:7c:9e:65:d7:7c:22:ed:df:a8:95:2e:e3:6d: 09:ed:24:b2:eb:6c:dc:c7:e1:9f:cc:d6:e6:5f:3c: 2c:43:30:6f:e0:a1:9a:a3:98:66:ac:e1:f6:f5:ff: f5:66:e4:aa:27:07:e6:1f:24:68:d3:e6:16:ee:6b: 48:fb:de:3c:d2:81:4a:a3:83:c5:07:7d:5f:41:2f: 5e:fe:1a:16:05:e5:bf:b2:dd:a9:dd:fc:9a:4d:50: 0f:16:dd:30:e3:4a:5a:d0:26:a3:02:e4:1c:c1:9f: 72:da:c0:28:70:1b:6d:96:a3:3f:9e:36:75:09:08: bb:09:5a:92:2f:da:4b:b8:73:22:2d:e9:23:12:4e: d5:40:88:92:d4:fc:c6:e4:eb:ad:2e:c7:5a:94:c9: c4:3d:ed:d3:08:d0:64:88:18:c8:f5:e8:62:e6:61: 2f:4a:a3:dd:95:b4:eb:11:12:f2:ff:a1:49:c9:52: e0:70:43:12:45:b2:bb:4d:b5:d5:49:68:e5:56:72: c0:b6:49:76:f7:c9:76:ab:1a:60:c5:ff:d3:81:c4: 15:87:ce:5f:05:fc:e3:2c:ee:1d:8e:3f:1b:3e:eb: 45:0d:d6:79:53:70:cd:46:1c:ab:6e:ba:62:c4:49: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4F:8C:66:85:8E:86:4F:CA:AE:07:B1:36:DB:E4:01:86:3D:C8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6d0c3a77-86ce-3d20-ac56-dc2cd9c555ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f6:43:69:93:e6:dc:74:32:e8:91:be:e0:6a:ac:4b:15:5e: ce:f4:99:88:56:7a:91:b4:a0:8c:aa:49:32:25:c9:96:07:8e: 27:05:2d:c5:e4:0d:58:3e:27:d1:af:2a:78:50:5d:7c:38:ce: ad:1c:fb:f0:c1:26:6f:f2:dd:7b:7a:1c:61:51:e1:01:1d:8e: 0a:ca:d4:07:b4:9f:9f:8d:b9:d7:2e:6f:20:6c:c1:ff:da:cc: 28:39:8a:a7:48:d3:b4:a9:c6:7e:11:02:36:c2:14:5e:a6:a5: 73:71:f9:4a:d8:13:73:f4:80:93:17:d7:7c:ec:76:5f:c0:a3: ad:f6:6d:18:0b:8e:71:dc:31:5f:8c:bb:37:92:82:2d:7d:b7: 3c:97:c5:7e:5c:a8:c5:cb:e8:2f:eb:be:f4:95:10:63:01:27: 7b:4f:e1:d6:c4:e1:97:73:8e:06:5e:dd:d6:82:2d:b9:ff:23: 9e:0c:ff:ef:46:f6:27:a0:f2:2e:e9:01:c3:fe:a1:fc:1f:79: 33:ae:6d:08:0d:2c:97:53:80:b3:50:26:13:81:ac:56:be:02: ef:d7:a7:6d:35:97:93:9b:62:51:54:75:db:65:61:59:d2:2c: 8c:37:ca:00:d6:03:8f:85:22:77:eb:2c:f4:60:e7:0b:3c:3d: 9a:d2:11:de -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElMyVVa3a6JHNJEHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk Y2FkZjBhZjAtNmYyNS00OTRlLWFkMzMtOTFjOWI5MjlhOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK+7TbUwx0QnJ3HiU/+S0nyeZdd8Iu3fqJUu 420J7SSy62zcx+GfzNbmXzwsQzBv4KGao5hmrOH29f/1ZuSqJwfmHyRo0+YW7mtI +9480oFKo4PFB31fQS9e/hoWBeW/st2p3fyaTVAPFt0w40pa0CajAuQcwZ9y2sAo cBttlqM/njZ1CQi7CVqSL9pLuHMiLekjEk7VQIiS1PzG5OutLsdalMnEPe3TCNBk iBjI9ehi5mEvSqPdlbTrERLy/6FJyVLgcEMSRbK7TbXVSWjlVnLAtkl298l2qxpg xf/TgcQVh85fBfzjLO4djj8bPutFDdZ5U3DNRhyrbrpixEkBYQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKNPjGaFjoZPyq4HsTbb5AGGPcigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNmQwYzNhNzctODZjZS0z ZDIwLWFjNTYtZGMyY2Q5YzU1NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPvZDaZPm3HQy6JG+4GqsSxVezvSZiFZ6kbSgjKpJMiXJlgeOJwUtxeQN WD4n0a8qeFBdfDjOrRz78MEmb/Lde3ocYVHhAR2OCsrUB7Sfn4251y5vIGzB/9rM KDmKp0jTtKnGfhECNsIUXqalc3H5StgTc/SAkxfXfOx2X8CjrfZtGAuOcdwxX4y7 N5KCLX23PJfFflyoxcvoL+u+9JUQYwEne0/h1sThl3OOBl7d1oItuf8jngz/70b2 J6DyLukBw/6h/B95M65tCA0sl1OAs1AmE4GsVr4C79enbTWXk5tiUVR122VhWdIs jDfKANYDj4Uid+ss9GDnCzw9mtIR3g== -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:41 2025 by rpki-client