$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f340c07b-f62e-333a-9aaa-bab31459e334.roa File: f340c07b-f62e-333a-9aaa-bab31459e334.roa (raw, json) Hash identifier: O5fCUXdgarOxYhIc2yKRT0bgIawT/7V88Wr7Cb7dQvg= Subject key identifier: 44:44:9D:A3:5B:F1:6B:DE:0E:F8:86:9F:19:66:BB:EB:19:51:B7:04 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F43285848BBBB7E61D4128416C9183610 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f340c07b-f62e-333a-9aaa-bab31459e334.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16739 IP address blocks: 24.124.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7e:61:d4:12:84:16:c9:18:36:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=d014dcf3-47d2-4d3f-b75e-46d8000ef289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:ed:76:cc:2e:f3:ab:47:6d:a7:31:a5:d5: d3:a8:e0:00:23:57:14:c9:1c:f3:da:b8:09:d2:73: b5:16:4f:8e:39:9f:57:2d:0f:d6:34:04:46:7c:cb: ee:ab:7a:ef:c2:d4:f1:13:a9:06:b6:80:6a:a2:29: a2:d1:28:27:a2:55:70:e1:70:ea:a7:9a:47:cf:96: f1:a9:ee:3a:96:bd:f2:62:ba:40:08:f1:01:21:82: 00:bd:7e:79:a2:0c:bb:75:af:63:38:15:5b:0b:54: 15:ea:55:ff:55:bb:d1:bc:a6:c9:6b:8c:01:e0:09: 78:4b:34:c5:f8:a3:a6:0b:f6:07:b4:34:77:24:6a: 15:60:ed:73:f4:0f:04:83:b4:b7:aa:6f:bd:b8:c5: 9c:f5:8f:99:9b:23:84:13:f2:6c:06:8f:1f:20:66: 6a:e7:a5:2d:52:e2:51:7c:20:e1:e4:b3:57:67:33: ac:f4:fa:82:47:66:b6:33:b8:ca:51:79:20:8c:d2: 59:90:99:36:f6:95:57:32:b0:c2:f4:4f:0a:d9:5d: d7:40:94:35:8d:c2:d6:e9:04:f3:24:b1:e6:53:85: dc:50:e1:f8:67:30:60:49:02:f0:b9:6c:14:1a:00: a3:e9:e9:4b:a2:27:19:bb:4d:d8:40:9f:b9:18:4a: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:44:9D:A3:5B:F1:6B:DE:0E:F8:86:9F:19:66:BB:EB:19:51:B7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f340c07b-f62e-333a-9aaa-bab31459e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:77:99:ec:c8:b9:37:03:b4:27:5e:53:49:99:93:6f:dd:09: 4e:21:50:19:ee:d0:40:f1:5c:8f:ee:2a:df:03:3d:b8:30:78: 42:3d:3e:a6:79:8b:32:76:19:21:88:80:7e:04:f3:3d:47:f1: d2:11:0b:e9:7b:be:37:fd:e5:6f:ec:23:81:c4:2d:49:9a:ea: bf:4b:7d:bd:57:28:f3:f6:80:5b:33:96:b5:dd:85:23:7e:cf: 46:b8:a3:5e:16:16:b4:84:28:e3:86:2b:5c:a3:cc:ba:18:f3: c4:0e:1f:08:5a:e3:52:51:30:35:f5:d9:55:9e:c1:9d:26:bc: 1f:10:d1:83:35:81:9c:89:3b:ba:48:4e:2c:e5:64:34:2e:a4: b0:8a:05:84:62:3b:0e:26:9d:0a:d6:19:b9:22:50:0e:b6:6b: e4:f9:f0:64:0c:1f:a0:a5:ee:ce:8d:23:6c:75:e2:13:2f:f0: 19:42:9c:88:ff:ee:a1:e8:23:e8:ed:0d:d4:ed:47:f5:94:5d: 86:ae:6c:2e:4e:aa:45:f6:e6:37:75:f5:31:f4:27:2e:52:59: 51:57:08:99:75:05:63:25:7d:9e:c4:91:99:fd:cc:76:db:5e: ac:cd:8d:21:cd:b9:58:1c:88:e8:d0:13:44:64:3b:eb:85:59: 99:32:de:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u35h1BKEFskYNhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZDAxNGRjZjMtNDdkMi00ZDNmLWI3NWUtNDZkODAwMGVmMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiLtdswu86tHbacxpdXTqOAAI1cUyRzz2rgJ 0nO1Fk+OOZ9XLQ/WNARGfMvuq3rvwtTxE6kGtoBqoimi0SgnolVw4XDqp5pHz5bx qe46lr3yYrpACPEBIYIAvX55ogy7da9jOBVbC1QV6lX/VbvRvKbJa4wB4Al4SzTF +KOmC/YHtDR3JGoVYO1z9A8Eg7S3qm+9uMWc9Y+ZmyOEE/JsBo8fIGZq56UtUuJR fCDh5LNXZzOs9PqCR2a2M7jKUXkgjNJZkJk29pVXMrDC9E8K2V3XQJQ1jcLW6QTz JLHmU4XcUOH4ZzBgSQLwuWwUGgCj6elLoicZu03YQJ+5GEqNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEREnaNb8WveDviGnxlmu+sZUbcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjM0MGMwN2ItZjYyZS0z MzNhLTlhYWEtYmFiMzE0NTllMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx3mezIuTcDtCdeU0mZk2/dCU4hUBnu0EDxXI/uKt8DPbgweEI9PqZ5 izJ2GSGIgH4E8z1H8dIRC+l7vjf95W/sI4HELUma6r9Lfb1XKPP2gFszlrXdhSN+ z0a4o14WFrSEKOOGK1yjzLoY88QOHwha41JRMDX12VWewZ0mvB8Q0YM1gZyJO7pI TizlZDQupLCKBYRiOw4mnQrWGbkiUA62a+T58GQMH6Cl7s6NI2x14hMv8BlCnIj/ 7qHoI+jtDdTtR/WUXYaubC5OqkX25jd19TH0Jy5SWVFXCJl1BWMlfZ7EkZn9zHbb XqzNjSHNuVgciOjQE0RkO+uFWZky3tw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:07 2025 by rpki-client