$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa File: faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa (raw, json) Hash identifier: 3Iz7vm+Yhi+VWTTYGkAItPRcQGWVLp8/NtR2ycpkbhU= Subject key identifier: 3A:19:60:28:26:8D:4B:CC:2A:8B:0A:73:BE:5C:0C:7B:AE:59:2A:D8 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2C2025ADA487B21B6D3C2AF8 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 11232 IP address blocks: 24.124.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:25:ad:a4:87:b2:1b:6d:3c:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=1af016f7-60ab-4ff7-8aee-c2e7d676a7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:f7:2b:d5:cb:08:ca:bf:02:4d:26:e1:d2: 64:56:01:8b:f5:1d:0e:2b:5d:3b:70:dd:f7:9d:f5: dd:ac:54:dc:57:40:f6:5c:5b:66:da:d0:b8:fd:5f: 87:cf:af:70:6e:8a:1a:27:47:0a:bd:34:81:a2:ae: 38:ed:c6:e2:8e:2c:24:15:b2:55:62:56:ba:ce:bb: 9b:cb:2b:e4:55:8b:e7:a2:db:aa:ad:e1:24:95:c8: 4b:66:02:4d:f2:35:ce:94:58:9b:fc:44:2e:a3:7b: 97:32:73:ad:a2:3d:4f:ec:3f:8c:dc:9e:06:8b:88: 4b:65:9a:76:29:ab:6e:c4:f4:dc:fe:fd:8d:99:94: 96:b8:68:9b:b9:46:93:4a:b7:a1:8d:c6:c6:d1:4b: 9a:6a:af:57:99:80:fb:9f:3e:25:e5:8c:e6:5c:54: 55:eb:76:99:07:5c:e2:bb:f8:82:93:f7:49:04:47: 14:0a:77:91:c8:35:e2:98:0f:23:0f:51:bf:f0:88: 2b:a4:b6:ea:ea:7c:17:f9:b9:83:5f:f6:22:45:c5: 89:01:bf:78:a4:fe:c9:c5:40:d0:58:86:5c:29:46: 64:12:bb:62:78:e5:b2:7e:d4:43:52:3b:9e:e3:b1: 01:75:72:b7:67:19:58:50:9a:2e:3d:dc:24:0e:a5: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:60:28:26:8D:4B:CC:2A:8B:0A:73:BE:5C:0C:7B:AE:59:2A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:93:b2:e1:45:4c:5a:da:80:63:79:94:92:0c:b0:53:bc:2e: fa:64:98:14:59:bc:ff:37:2b:2d:d2:4d:22:a4:aa:6b:c2:03: 36:94:5f:bf:8f:57:53:a1:60:00:cb:f1:af:3e:4b:9f:fd:07: 79:aa:2c:7c:af:a7:01:06:a2:a5:af:7b:aa:e7:71:dc:d6:95: 42:6e:99:6d:fa:39:c1:e5:62:e4:d6:bd:0a:c1:a9:36:cb:c4: 55:54:2f:32:bf:89:bf:d6:c9:f5:bc:29:cf:d5:11:8c:d9:6e: dd:21:b4:4e:9c:b6:bf:cf:a0:ec:cd:59:8f:7d:4d:a7:01:26: f2:e2:ac:f3:d2:70:05:1f:23:f1:2a:ba:7a:57:71:70:b5:a4: ac:00:b5:dc:2f:a7:cf:b7:6c:97:51:71:65:23:3e:6b:b9:00: 21:0a:e9:af:dc:26:cb:86:7a:fe:4e:ac:fb:f1:09:aa:62:88: ba:9c:4c:8d:ee:be:ad:b3:9e:49:3f:4e:07:8c:3d:3a:60:44: 84:ce:66:6c:0e:e6:d4:87:cd:5f:50:57:66:bd:3f:93:24:d7: 69:4d:24:2c:be:f8:0b:fc:b1:50:6f:e8:d2:34:6e:66:c9:4b: 13:7d:d1:9d:ed:47:1b:79:ed:55:99:c3:f6:0d:22:72:ca:71: 33:29:1f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICWtpIeyG208KvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MWFmMDE2ZjctNjBhYi00ZmY3LThhZWUtYzJlN2Q2NzZhN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQv3K9XLCMq/Ak0m4dJkVgGL9R0OK107cN33 nfXdrFTcV0D2XFtm2tC4/V+Hz69wbooaJ0cKvTSBoq447cbijiwkFbJVYla6zrub yyvkVYvnotuqreEklchLZgJN8jXOlFib/EQuo3uXMnOtoj1P7D+M3J4Gi4hLZZp2 KatuxPTc/v2NmZSWuGibuUaTSrehjcbG0Uuaaq9XmYD7nz4l5YzmXFRV63aZB1zi u/iCk/dJBEcUCneRyDXimA8jD1G/8IgrpLbq6nwX+bmDX/YiRcWJAb94pP7JxUDQ WIZcKUZkErtieOWyftRDUjue47EBdXK3ZxlYUJouPdwkDqXb4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoZYCgmjUvMKosKc75cDHuuWSrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZmFhOWM4ZTUtMDA1Zi0z ZDM5LWJjY2QtZDg1ZmEwOWVkZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOTsuFFTFragGN5lJIMsFO8LvpkmBRZvP83Ky3STSKkqmvCAzaUX7+P V1OhYADL8a8+S5/9B3mqLHyvpwEGoqWve6rncdzWlUJumW36OcHlYuTWvQrBqTbL xFVULzK/ib/WyfW8Kc/VEYzZbt0htE6ctr/PoOzNWY99TacBJvLirPPScAUfI/Eq unpXcXC1pKwAtdwvp8+3bJdRcWUjPmu5ACEK6a/cJsuGev5OrPvxCapiiLqcTI3u vq2znkk/TgeMPTpgRITOZmwO5tSHzV9QV2a9P5Mk12lNJCy++Av8sVBv6NI0bmbJ SxN90Z3tRxt57VWZw/YNInLKcTMpH2M= -----END CERTIFICATE-----Generated at Sun Jun 15 16:29:26 2025 by rpki-client