$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa File: 646207f2-cf4f-3abb-93af-47f00919b1b8.roa (raw, json) Hash identifier: 2bFI48mWKtvYgzyHukg/AFjbF2Oos2lr+T8ZCAu17ZY= Subject key identifier: AD:E6:60:A5:1D:60:17:C8:AD:D7:EC:DE:92:F0:FC:A3:0D:FE:BB:16 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584A103535A4BDFC5E65DD49EB00 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 12213 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:35:a4:bd:fc:5e:65:dd:49:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=c75ef35a-3eb3-4eb9-903d-32a178d8e822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:77:b1:c6:ef:0e:75:58:7f:96:66:6c:2b: 69:91:9b:a5:bf:05:d5:4b:0b:c3:0f:d3:be:fe:88: 55:53:00:d0:ed:9f:d6:b0:06:89:a1:24:93:54:93: fb:46:ad:ae:76:b0:05:3d:6b:38:70:8f:2d:fc:46: d9:e9:1b:4d:56:9b:18:b9:61:f3:30:75:06:37:d7: 48:2b:e2:c8:12:1e:be:ef:c6:61:06:b1:1b:63:6e: 4e:de:15:c4:59:1a:c9:a9:ad:a8:8a:42:0e:1f:78: 10:a1:3d:c7:0a:93:ed:3e:a2:af:bc:ac:dc:00:6d: 60:e0:d6:73:4b:b8:0b:63:df:cf:e1:d3:6f:d2:7b: ae:6a:1d:03:d2:12:b0:4f:d9:4f:b5:20:38:9c:d0: a2:3c:a9:12:53:ec:2e:70:45:f4:f3:53:3c:10:2a: 69:94:58:06:71:51:22:86:b5:a7:57:79:f5:9a:75: b6:7a:db:48:11:05:bc:37:fd:95:a8:58:01:e5:f1: 6d:a8:6e:0e:4f:30:d3:8d:8a:0c:e4:a9:88:03:72: f2:f9:a1:f5:9a:a8:fe:36:b9:cb:b3:c7:2e:fa:ac: d1:3a:49:36:8d:bc:8a:11:46:04:5c:92:74:b7:34: 5b:fe:76:c2:e8:af:0b:a0:63:ec:f1:20:0b:13:dd: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:60:A5:1D:60:17:C8:AD:D7:EC:DE:92:F0:FC:A3:0D:FE:BB:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fe:be:6d:4b:5c:5d:ac:7d:31:ef:73:84:d9:46:db:cf:de: cf:0c:00:b0:f5:f3:38:b1:fe:18:01:22:5c:8d:9a:45:b4:0d: be:cc:88:f8:bd:d5:18:97:8e:df:ad:b1:09:2d:0e:98:66:9d: e2:e7:c0:de:71:88:b1:55:0c:5c:a5:26:68:22:59:1e:7b:51: 0f:99:53:75:89:d1:82:39:58:94:b6:4e:68:7c:44:7d:1c:3a: cd:52:e5:49:92:bd:b4:25:80:af:2d:ac:98:70:93:2b:29:fa: 1e:e1:2b:7f:7b:96:1d:48:c8:47:ba:9c:14:92:ac:88:1f:62: d9:9b:62:55:d3:8f:ea:70:ef:4b:ee:4e:b4:34:d1:53:c6:cd: 86:09:6c:59:8f:2b:80:cf:0c:49:71:1f:51:97:55:b9:d0:ba: 30:db:4d:7d:0d:0a:69:da:95:6d:2d:a8:0f:c5:f6:45:88:82: 10:aa:cf:92:23:23:e5:c5:9c:43:3e:82:cb:b6:a3:80:ff:9b: 9a:0e:40:ec:7a:03:59:b9:86:3a:60:28:12:eb:fd:51:37:4f: ce:51:64:ed:b7:5f:83:98:9d:ce:ca:45:db:4d:aa:96:ad:77: 59:2e:ab:f3:0a:11:d0:77:0f:27:9e:48:ed:c0:fc:fe:2a:2c: 53:84:c5:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTWkvfxeZd1J6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Yzc1ZWYzNWEtM2ViMy00ZWI5LTkwM2QtMzJhMTc4ZDhlODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEN3scbvDnVYf5ZmbCtpkZulvwXVSwvDD9O+ /ohVUwDQ7Z/WsAaJoSSTVJP7Rq2udrAFPWs4cI8t/EbZ6RtNVpsYuWHzMHUGN9dI K+LIEh6+78ZhBrEbY25O3hXEWRrJqa2oikIOH3gQoT3HCpPtPqKvvKzcAG1g4NZz S7gLY9/P4dNv0nuuah0D0hKwT9lPtSA4nNCiPKkSU+wucEX081M8ECpplFgGcVEi hrWnV3n1mnW2ettIEQW8N/2VqFgB5fFtqG4OTzDTjYoM5KmIA3Ly+aH1mqj+NrnL s8cu+qzROkk2jbyKEUYEXJJ0tzRb/nbC6K8LoGPs8SALE93vnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3mYKUdYBfIrdfs3pLw/KMN/rsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNjQ2MjA3ZjItY2Y0Zi0z YWJiLTkzYWYtNDdmMDA5MTliMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP+vm1LXF2sfTHvc4TZRtvP3s8MALD18zix/hgBIlyNmkW0Db7MiPi9 1RiXjt+tsQktDphmneLnwN5xiLFVDFylJmgiWR57UQ+ZU3WJ0YI5WJS2Tmh8RH0c Os1S5UmSvbQlgK8trJhwkysp+h7hK397lh1IyEe6nBSSrIgfYtmbYlXTj+pw70vu TrQ00VPGzYYJbFmPK4DPDElxH1GXVbnQujDbTX0NCmnalW0tqA/F9kWIghCqz5Ij I+XFnEM+gsu2o4D/m5oOQOx6A1m5hjpgKBLr/VE3T85RZO23X4OYnc7KRdtNqpat d1kuq/MKEdB3DyeeSO3A/P4qLFOExTc= -----END CERTIFICATE-----Generated at Sun Jun 8 09:42:48 2025 by rpki-client