$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/99cecf10-a03b-32ce-af38-25468aa9a8a7.roa File: 99cecf10-a03b-32ce-af38-25468aa9a8a7.roa (raw, json) Hash identifier: G2i2NrtrCL6LvUygYXBlVZxuOELmko1sjLgRJNRwBGw= Subject key identifier: 35:6D:FA:01:FD:9E:2C:58:EB:DE:2B:C6:2B:C9:52:2B:72:7B:A7:5E Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2C202C6CD28E794BBD0D9D80 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/99cecf10-a03b-32ce-af38-25468aa9a8a7.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 11232 IP address blocks: 24.124.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:2c:6c:d2:8e:79:4b:bd:0d:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=a96b924a-e799-44b6-859b-37a755e7512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:fe:00:3d:48:b1:fd:3b:fa:54:db:4b:06: 31:a3:b9:13:59:ab:0f:bf:48:d0:14:21:e7:91:0d: 29:97:64:91:8c:c2:43:1a:c2:4e:da:ce:b0:ea:1e: d3:e6:09:2c:36:54:1d:2c:58:20:23:94:45:03:e3: 6c:23:49:93:71:cb:f6:7a:89:f1:53:a4:ef:17:72: fe:30:13:9c:d1:fb:0c:5f:80:dc:44:30:ab:7d:23: ba:e0:75:b0:6c:ce:aa:1e:55:94:45:4a:1a:0f:26: 5f:37:c9:76:e5:86:86:89:8e:d0:ad:7e:36:10:4c: 10:c0:24:ec:1f:0a:0d:0e:1f:39:27:10:06:18:40: f4:cb:f9:26:2b:14:f2:bc:ea:ed:5b:1e:09:05:fa: 3c:a4:b4:83:92:18:be:2f:e9:d4:70:72:b0:9e:24: 17:5c:60:a2:58:c4:17:21:d0:76:9e:0a:68:06:d2: af:74:87:d9:d8:d5:2a:31:7a:ba:43:9f:91:f1:a2: af:82:be:65:a1:77:51:de:67:10:f7:b4:f9:e0:6a: 4a:34:17:29:c1:f7:e4:2f:9f:45:ff:d5:74:30:4e: d5:2f:a8:7d:25:bc:88:17:e0:f6:9f:86:e5:0d:10: 99:d2:f7:df:30:1b:77:04:4a:e5:8b:59:9b:2d:dc: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:FA:01:FD:9E:2C:58:EB:DE:2B:C6:2B:C9:52:2B:72:7B:A7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/99cecf10-a03b-32ce-af38-25468aa9a8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2a:7b:40:8f:e4:dc:34:ef:d1:23:fe:db:1d:34:6c:d6:09: 34:28:11:32:61:d3:5d:08:96:07:f5:c9:91:a5:d2:18:20:53: 0c:1d:1f:d6:1a:f5:9b:d6:99:bf:d3:c2:29:b5:b8:ad:ab:d5: 89:79:3a:c7:09:91:a0:4b:6b:b0:1d:03:1d:0c:cc:78:e6:c9: 9f:ce:18:5c:4f:c0:13:af:f5:7f:62:be:b9:aa:c6:d6:f5:83: 6e:45:ab:ee:e3:7a:2a:17:5c:d0:ba:6b:17:f7:37:62:2a:85: 65:b8:88:ce:38:2e:b7:1b:7e:c7:79:87:f5:c3:2b:36:94:19: 10:16:30:88:58:a5:1b:19:24:11:16:c7:c7:b6:2d:cf:2a:07: 79:86:f1:1c:5c:3f:1c:1b:b1:a2:59:a2:fc:9d:20:8c:3a:da: 27:a1:08:c1:bb:c8:99:35:c5:1b:28:7a:ce:c1:55:f5:f5:a1: 13:bb:64:0f:91:6a:63:cb:bd:ed:f1:69:5a:fe:33:7b:fb:d7: 62:36:a2:6b:8f:78:d0:88:8a:c5:76:c4:2d:da:32:f8:70:7a: b6:aa:55:e0:37:35:e8:ed:b3:72:97:c6:cb:ee:e9:aa:e4:46: 7c:4e:32:0b:71:50:c1:0a:19:d8:d1:6a:9f:d9:6a:58:97:65: e7:3d:78:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICxs0o55S70NnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YTk2YjkyNGEtZTc5OS00NGI2LTg1OWItMzdhNzU1ZTc1MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fv+AD1Isf07+lTbSwYxo7kTWasPv0jQFCHn kQ0pl2SRjMJDGsJO2s6w6h7T5gksNlQdLFggI5RFA+NsI0mTccv2eonxU6TvF3L+ MBOc0fsMX4DcRDCrfSO64HWwbM6qHlWURUoaDyZfN8l25YaGiY7QrX42EEwQwCTs HwoNDh85JxAGGED0y/kmKxTyvOrtWx4JBfo8pLSDkhi+L+nUcHKwniQXXGCiWMQX IdB2ngpoBtKvdIfZ2NUqMXq6Q5+R8aKvgr5loXdR3mcQ97T54GpKNBcpwffkL59F /9V0ME7VL6h9JbyIF+D2n4blDRCZ0vffMBt3BErli1mbLdwbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVt+gH9nixY694rxivJUitye6deMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvOTljZWNmMTAtYTAzYi0z MmNlLWFmMzgtMjU0NjhhYTlhOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHweMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwqe0CP5Nw079Ej/tsdNGzWCTQoETJh010Ilgf1yZGl0hggUwwdH9Ya 9ZvWmb/Twim1uK2r1Yl5OscJkaBLa7AdAx0MzHjmyZ/OGFxPwBOv9X9ivrmqxtb1 g25Fq+7jeioXXNC6axf3N2IqhWW4iM44Lrcbfsd5h/XDKzaUGRAWMIhYpRsZJBEW x8e2Lc8qB3mG8RxcPxwbsaJZovydIIw62iehCMG7yJk1xRsoes7BVfX1oRO7ZA+R amPLve3xaVr+M3v712I2omuPeNCIisV2xC3aMvhweraqVeA3Nejts3KXxsvu6ark RnxOMgtxUMEKGdjRap/ZaliXZec9ePE= -----END CERTIFICATE-----Generated at Sun Jun 15 16:37:13 2025 by rpki-client