$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa File: d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa (raw, json) Hash identifier: FxR9ihc9YQKexOJT3kx0DFTRVn42XNfDEfY8cPVR0+o= Subject key identifier: D8:B4:5B:EE:D6:18:E0:AC:04:02:67:D0:E7:58:D4:AE:F1:15:A5:FC Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2C2026845C2ED5733B38DC00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 11232 IP address blocks: 24.124.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:26:84:5c:2e:d5:73:3b:38:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=3a786736-395c-45f1-ba5d-42b4b3920476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:02:96:e0:13:4e:20:c4:ec:71:0b:c8:b5: 03:c9:ad:9b:a9:26:4c:8d:4e:a7:de:a3:c4:04:2c: a4:07:70:d1:18:d8:f7:a2:d7:91:2b:9a:63:e5:a2: ac:56:23:c9:f4:c6:72:b7:7a:bd:73:96:99:78:a0: 21:7b:a4:1b:8f:99:62:a3:cd:e5:b1:55:f2:41:64: fa:c8:a5:46:40:09:34:6f:ca:df:66:c1:ba:41:70: 3d:fe:d6:e3:fb:91:9f:68:37:0a:34:ac:08:88:bf: a2:d9:35:c3:47:a7:24:5c:df:42:a7:0b:a4:7b:d9: e7:c9:bd:48:15:23:ba:59:a1:c1:80:0f:81:b1:f3: 9e:93:c5:e3:94:bf:94:42:ec:f4:2d:b0:2f:59:bc: a7:96:0d:4b:bd:56:4c:a7:f2:de:b8:f2:d1:f8:34: 6d:87:fd:5f:64:8b:cc:54:12:c4:f0:35:70:a6:21: 60:ac:73:d3:45:7e:7c:7f:45:38:06:24:ca:50:e6: 62:fe:db:a5:26:b2:14:6a:e3:00:4a:a7:25:ef:f2: f4:52:a4:59:80:99:07:bf:6f:9f:e9:7e:2a:60:ff: 12:d0:19:28:8a:b7:c8:66:2a:e7:c9:50:0e:d1:17: ad:37:aa:f5:2d:a4:6a:9a:38:e7:1f:81:aa:43:57: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B4:5B:EE:D6:18:E0:AC:04:02:67:D0:E7:58:D4:AE:F1:15:A5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1b:53:e3:a7:74:a6:23:ab:a4:8e:a3:2d:1c:7d:74:71:03: 60:68:e5:f5:0b:df:66:aa:1b:11:b2:76:8b:c2:01:ae:4f:e1: 88:64:68:cf:79:0b:9d:b3:05:55:e3:23:42:01:32:ec:09:57: 76:59:cc:60:27:e1:ab:f3:f7:aa:05:cd:3e:33:36:6b:b9:ce: 09:db:49:54:8e:df:db:e6:d1:d8:b2:97:14:d8:fb:42:a9:bf: ac:aa:8a:8d:db:5c:03:c9:69:59:b2:ee:ce:d2:5c:40:38:be: 2d:ae:f4:6b:1d:25:66:52:dd:5f:75:23:63:41:7a:f6:6e:0b: a0:f6:46:20:b2:42:a9:ac:d1:b0:7c:cd:47:f3:bc:a5:e9:53: 34:da:8f:42:9c:87:2e:40:d0:bb:35:a4:16:0e:81:8c:d7:a7: ac:a7:d5:5a:34:f3:b3:05:3b:1d:a9:40:81:eb:9f:e2:69:da: 87:50:ad:76:ef:39:4e:92:b0:20:76:54:a1:67:c0:5b:a9:55: 43:fa:0d:93:3f:37:8a:91:fc:dc:8a:00:0a:01:bd:53:7e:5c: 85:1e:92:66:8b:01:5b:48:15:2f:9a:50:da:68:b5:cd:80:a8: 73:09:e2:72:8e:5e:b5:86:1a:22:77:b0:e7:6a:7d:f7:d4:a7: 76:89:2d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICaEXC7Vczs43AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk M2E3ODY3MzYtMzk1Yy00NWYxLWJhNWQtNDJiNGIzOTIwNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEsCluATTiDE7HELyLUDya2bqSZMjU6n3qPE BCykB3DRGNj3oteRK5pj5aKsViPJ9MZyt3q9c5aZeKAhe6Qbj5lio83lsVXyQWT6 yKVGQAk0b8rfZsG6QXA9/tbj+5GfaDcKNKwIiL+i2TXDR6ckXN9Cpwuke9nnyb1I FSO6WaHBgA+BsfOek8XjlL+UQuz0LbAvWbynlg1LvVZMp/LeuPLR+DRth/1fZIvM VBLE8DVwpiFgrHPTRX58f0U4BiTKUOZi/tulJrIUauMASqcl7/L0UqRZgJkHv2+f 6X4qYP8S0BkoirfIZirnyVAO0RetN6r1LaRqmjjnH4GqQ1cL8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi0W+7WGOCsBAJn0OdY1K7xFaX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDhhMWQwYjctNTY3NS0z YjAzLTlmMDktMTNjM2VlYWUzNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGHwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADobU+OndKYjq6SOoy0cfXRxA2Bo5fUL32aqGxGydovCAa5P4YhkaM95 C52zBVXjI0IBMuwJV3ZZzGAn4avz96oFzT4zNmu5zgnbSVSO39vm0diylxTY+0Kp v6yqio3bXAPJaVmy7s7SXEA4vi2u9GsdJWZS3V91I2NBevZuC6D2RiCyQqms0bB8 zUfzvKXpUzTaj0Kchy5A0Ls1pBYOgYzXp6yn1Vo087MFOx2pQIHrn+Jp2odQrXbv OU6SsCB2VKFnwFupVUP6DZM/N4qR/NyKAAoBvVN+XIUekmaLAVtIFS+aUNpotc2A qHMJ4nKOXrWGGiJ3sOdqfffUp3aJLeE= -----END CERTIFICATE-----Generated at Mon Jun 16 00:40:33 2025 by rpki-client