$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c65822e4-7c66-3308-8c77-d2d8a1e7c18a.roa File: c65822e4-7c66-3308-8c77-d2d8a1e7c18a.roa (raw, json) Hash identifier: iR0TbUeJk3NPKPmum2RjraE9IKj/dFN33aGr2DfArVw= Subject key identifier: 78:9D:3B:0A:52:D3:D8:C0:7D:29:F7:69:2F:86:94:6A:75:03:77:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849FB452BCFF0EC867466B6E380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c65822e4-7c66-3308-8c77-d2d8a1e7c18a.roa Signing time: Mon 26 May 2025 13:01:03 +0000 ROA not before: Mon 26 May 2025 13:01:03 +0000 ROA not after: Sun 24 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 24.129.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fb:45:2b:cf:f0:ec:86:74:66:b6:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 26 13:01:03 2025 GMT Not After : Aug 24 13:01:03 2025 GMT Subject: CN=a6e8813e-cb72-427b-9022-e0afc30f6619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:2a:3c:6e:36:ef:08:de:47:cc:c2:99:49: 5e:62:d2:91:72:a5:df:89:17:93:11:12:40:54:a3: e3:ca:a1:39:ec:07:52:65:a0:46:a3:7d:de:95:03: 0e:0a:fe:09:21:6b:bd:13:05:86:f4:a8:70:a3:70: 96:7b:ef:a6:a0:3a:7f:97:b7:5c:31:24:88:f2:8b: 0c:9f:d2:3e:d7:53:71:63:24:06:ed:68:d8:ca:a2: c0:44:ba:9b:20:b6:d3:8d:65:13:0d:50:5f:93:2a: da:47:d5:90:54:f1:71:05:40:ce:a2:53:bf:96:95: b1:71:f1:5d:f0:bf:c2:a5:43:b5:72:0c:18:86:45: 6b:4e:04:46:82:e6:1f:ee:83:6f:af:39:b1:c1:61: a6:2c:43:38:70:26:ad:6a:9f:92:c6:d6:e0:26:82: 30:af:61:7b:00:11:d1:27:c5:26:eb:91:db:93:76: d1:f5:5c:20:2c:07:cf:35:00:84:25:6e:ca:58:26: 9d:66:73:39:b5:a7:12:09:bc:32:b9:b8:1c:6d:21: 2d:70:49:cb:51:e7:72:2f:31:e5:a9:b5:f1:e9:3f: d7:aa:7e:e4:b4:c6:e3:7c:fd:9d:3d:49:59:40:87: eb:f3:22:20:08:1f:b0:4d:99:6e:16:79:db:dc:be: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9D:3B:0A:52:D3:D8:C0:7D:29:F7:69:2F:86:94:6A:75:03:77:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c65822e4-7c66-3308-8c77-d2d8a1e7c18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 24.129.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:15:75:40:09:ed:20:fd:3a:77:bb:f7:1e:ad:72:54:a9:7a: 6e:f6:fe:ea:7c:f6:bc:83:7d:fb:d3:8f:92:fc:b5:cd:e6:ed: 55:31:81:23:02:9b:7b:de:f4:d7:f1:cd:7c:1b:03:c8:6f:62: 2f:5f:e7:6c:85:5d:6c:b3:e2:9b:6d:6e:1b:00:c1:85:b5:69: c5:59:8d:bb:48:96:18:54:d3:75:f1:ea:c2:c5:12:eb:d9:b2: da:f9:4b:37:75:91:5b:e7:02:5b:30:3a:0d:8c:88:1c:1a:f5: 1c:bd:16:44:b4:39:1b:24:e3:04:e4:ae:51:8e:94:93:dd:b6: 36:58:d4:b6:10:c1:e2:01:6c:44:7c:63:2a:9a:7c:5c:0c:d7: 9e:ec:39:8e:62:e6:cd:9c:a3:2b:47:95:cd:96:02:d6:94:6b: 0d:14:17:cf:e6:79:7a:81:ed:9e:4e:10:92:80:3f:7a:01:3e: 1c:98:ca:eb:10:8b:fa:27:8f:d7:b3:60:0c:9f:c7:e6:9f:2b: c2:27:70:f6:ea:cd:1a:68:87:36:ea:6c:0c:41:14:13:a5:ce: 8d:26:06:8b:fe:6b:6e:c7:cc:41:86:b1:55:38:84:97:5d:28: 29:9a:c0:77:b8:8e:19:d6:04:69:24:11:50:f5:7e:83:f4:83: d6:74:f7:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7RSvP8OyGdGa244AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk YTZlODgxM2UtY2I3Mi00MjdiLTkwMjItZTBhZmMzMGY2NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfEqPG427wjeR8zCmUleYtKRcqXfiReTERJA VKPjyqE57AdSZaBGo33elQMOCv4JIWu9EwWG9Khwo3CWe++moDp/l7dcMSSI8osM n9I+11NxYyQG7WjYyqLARLqbILbTjWUTDVBfkyraR9WQVPFxBUDOolO/lpWxcfFd 8L/CpUO1cgwYhkVrTgRGguYf7oNvrzmxwWGmLEM4cCatap+SxtbgJoIwr2F7ABHR J8Um65Hbk3bR9VwgLAfPNQCEJW7KWCadZnM5tacSCbwyubgcbSEtcEnLUedyLzHl qbXx6T/Xqn7ktMbjfP2dPUlZQIfr8yIgCB+wTZluFnnb3L57JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHidOwpS09jAfSn3aS+GlGp1A3cPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzY1ODIyZTQtN2M2Ni0z MzA4LThjNzctZDJkOGExZTdjMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUVdUAJ7SD9One79x6tclSpem72/up89ryDffvTj5L8tc3m7VUxgSMC m3ve9NfxzXwbA8hvYi9f52yFXWyz4pttbhsAwYW1acVZjbtIlhhU03Xx6sLFEuvZ str5Szd1kVvnAlswOg2MiBwa9Ry9FkS0ORsk4wTkrlGOlJPdtjZY1LYQweIBbER8 YyqafFwM157sOY5i5s2coytHlc2WAtaUaw0UF8/meXqB7Z5OEJKAP3oBPhyYyusQ i/onj9ezYAyfx+afK8IncPbqzRpohzbqbAxBFBOlzo0mBov+a27HzEGGsVU4hJdd KCmawHe4jhnWBGkkEVD1foP0g9Z0918= -----END CERTIFICATE-----Generated at Sun Jun 15 21:26:03 2025 by rpki-client