$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/54e44f63-06c1-36ee-9454-75fa0f7764b6.roa File: 54e44f63-06c1-36ee-9454-75fa0f7764b6.roa (raw, json) Hash identifier: pOUDctPrYdC0qLEIi25pEYiSUiDaLUaDC+3NT6lWREE= Subject key identifier: D5:5F:CA:9F:25:31:B0:53:91:B1:09:BD:03:70:3F:C5:37:74:26:89 Certificate issuer: /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Certificate serial: 010D0C9F43285849446933BBC8FD426F69B59480 Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/54e44f63-06c1-36ee-9454-75fa0f7764b6.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 6327 IP address blocks: 24.64.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:33:bb:c8:fd:42:6f:69:b5:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=7025c8c2-b963-4b31-ac94-cd507217636e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:e6:ee:aa:12:c5:3f:26:58:ec:33:e2:07: 48:b0:ac:c2:c5:8c:94:6e:13:d9:c3:ab:6b:29:9b: 57:97:23:d6:76:2a:87:e6:e6:20:0e:a5:04:f2:bd: 84:b6:3d:e9:45:0e:38:18:4c:a3:c8:9e:84:01:7f: f2:7a:f5:cc:44:73:7a:7b:35:24:e7:81:6b:1a:c0: e4:53:17:96:14:40:c4:73:d2:46:6f:10:f2:fb:e9: f2:57:d7:23:f0:d5:ca:bd:a6:20:0e:41:f1:13:28: 3d:5d:19:e5:94:2c:dd:7c:bc:aa:f4:f1:33:79:a3: 79:1a:93:0b:26:33:69:ab:9a:fd:c1:a6:27:a5:07: 7f:fe:12:1f:97:19:70:da:dd:86:6e:70:a8:0c:03: a6:65:1a:e5:4e:80:b0:ac:7f:a9:5f:07:9e:2d:62: ed:d2:a4:97:e5:18:5a:50:d2:fa:8e:0c:7a:0a:48: cd:68:8b:1b:80:e9:11:2e:1c:9b:9e:e2:bf:d2:46: 26:ad:1a:5d:39:4f:8d:40:d7:bc:a0:c7:25:cf:c9: 7f:d1:3f:66:b8:55:d4:84:5b:f6:0e:9b:62:0c:fa: 4a:dc:60:63:53:7d:3c:48:24:60:c8:2a:b3:6a:12: 7f:f1:79:ab:14:a5:db:8c:73:eb:d5:53:b6:65:a8: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5F:CA:9F:25:31:B0:53:91:B1:09:BD:03:70:3F:C5:37:74:26:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/54e44f63-06c1-36ee-9454-75fa0f7764b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl X509v3 Authority Key Identifier: keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer sbgp-ipAddrBlock: critical IPv4: 24.64.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:37:b7:3f:b4:c8:73:f4:c8:c7:54:68:89:21:77:dd:bb:8c: 24:5e:93:9d:48:9e:6a:d0:18:e6:e0:64:0c:44:a6:c0:ae:9a: 33:97:1d:b4:62:57:fe:c3:6d:bc:59:fa:88:6f:50:17:1a:bc: a8:e5:65:d0:7c:b7:81:31:e0:c9:51:56:61:58:3c:d9:02:2f: 7f:19:a4:66:5d:11:e6:04:ba:7a:40:ba:d1:ab:57:d2:0e:10: d1:10:e4:62:94:71:7b:b3:97:d1:2b:1f:3b:0c:e9:b5:5f:57: a1:b8:af:10:b1:5d:af:57:bd:12:d7:a9:4c:bf:8f:56:c9:2a: 4e:35:52:a3:3b:5a:a5:2b:58:4d:ba:be:8f:5f:c7:db:9b:65: da:27:21:16:57:6f:61:71:44:a7:a4:8e:a7:4f:05:a4:b3:e3: 17:9a:a0:14:9e:0d:d4:41:16:bb:22:58:b4:e7:d0:fc:21:97: 18:47:8d:19:c1:ca:a1:bc:4c:78:43:c4:81:2d:21:4a:7b:ea: f0:fc:e6:05:b6:f0:23:85:f3:81:11:ec:27:fc:4d:11:b3:d8: 96:67:8c:35:36:de:6b:52:93:cb:9f:1b:3f:6c:9c:ab:7a:a8: c4:da:ad:d6:65:9c:18:c7:f2:4a:7a:79:b2:14:b7:5f:e3:0c: 2d:b7:16:0e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElEaTO7yP1Cb2m1lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUwZjA2MTYtNmUwMy00OWRlLWI1ZjgtNGI4NzRlNmQ4 NTM5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NzAyNWM4YzItYjk2My00YjMxLWFjOTQtY2Q1MDcyMTc2MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp7m7qoSxT8mWOwz4gdIsKzCxYyUbhPZw6tr KZtXlyPWdiqH5uYgDqUE8r2Etj3pRQ44GEyjyJ6EAX/yevXMRHN6ezUk54FrGsDk UxeWFEDEc9JGbxDy++nyV9cj8NXKvaYgDkHxEyg9XRnllCzdfLyq9PEzeaN5GpML JjNpq5r9waYnpQd//hIflxlw2t2GbnCoDAOmZRrlToCwrH+pXweeLWLt0qSX5Rha UNL6jgx6CkjNaIsbgOkRLhybnuK/0kYmrRpdOU+NQNe8oMclz8l/0T9muFXUhFv2 DptiDPpK3GBjU308SCRgyCqzahJ/8XmrFKXbjHPr1VO2Zag2nwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNVfyp8lMbBTkbEJvQNwP8U3dCaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBm MDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3NGU2ZDg1MzkvNTRlNDRmNjMtMDZjMS0z NmVlLTk0NTQtNzVmYTBmNzc2NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWUwZjA2MTYtNmUwMy00OWRlLWI1 ZjgtNGI4NzRlNmQ4NTM5LzFlMGYwNjE2LTZlMDMtNDlkZS1iNWY4LTRiODc0ZTZk ODUzOS5jcmwwHwYDVR0jBBgwFoAUdntXZLDIEgFgrrbz5LT5tnN6j5gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBmMDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3 NGU2ZDg1MzkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDGEAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqDe3P7TIc/TIx1RoiSF33buMJF6TnUieatAY5uBkDESmwK6aM5cdtGJX /sNtvFn6iG9QFxq8qOVl0Hy3gTHgyVFWYVg82QIvfxmkZl0R5gS6ekC60atX0g4Q 0RDkYpRxe7OX0SsfOwzptV9XobivELFdr1e9EtepTL+PVskqTjVSoztapStYTbq+ j1/H25tl2ichFldvYXFEp6SOp08FpLPjF5qgFJ4N1EEWuyJYtOfQ/CGXGEeNGcHK obxMeEPEgS0hSnvq8PzmBbbwI4XzgRHsJ/xNEbPYlmeMNTbea1KTy58bP2ycq3qo xNqt1mWcGMfySnp5shS3X+MMLbcWDg== -----END CERTIFICATE-----Generated at Sat Apr 12 11:49:25 2025 by rpki-client