$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa File: 2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa (raw, json) Hash identifier: 8C8h25w82eTwIcHgtey5c7jBZF6Sb0NO+svuLXDlr3Q= Subject key identifier: 35:CB:97:24:03:B2:A6:34:DB:CA:5A:79:FE:CF:B0:A6:7B:73:DA:0B Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC952121BDB12A247127080 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 24.124.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:52:12:1b:db:12:a2:47:12:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=2feb4e60-a1e5-4331-a252-0ada1ebb88a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:af:94:97:90:b3:0a:2c:06:b8:b0:7f:d6: 72:9e:3e:74:3f:3c:a5:ab:0f:76:b9:11:26:e1:e3: 9f:49:70:8e:69:5c:ba:25:7d:9c:d8:fb:b8:6e:36: ed:1e:27:bf:04:56:52:06:e9:7e:41:ee:3b:84:53: e8:f8:e1:8a:47:02:83:71:96:64:79:6d:17:37:68: 3d:01:67:38:87:8b:6d:40:ee:c1:51:38:0a:9d:33: 8a:64:d0:d2:13:ef:71:36:35:94:16:5b:6a:1d:f6: 7c:e2:c0:28:90:22:e6:16:4d:85:f2:e4:5f:1e:bb: 95:c4:1a:db:4f:19:ea:b5:23:7b:44:ce:be:24:ff: 57:9d:f7:eb:09:13:0c:4b:1f:a2:09:a4:72:9e:18: 7d:cd:74:0a:60:d9:4a:4c:ac:6a:74:b9:4c:b9:9e: dd:79:b6:62:a3:c4:b5:62:1e:58:92:8d:82:44:26: d0:9d:f3:e2:d8:12:1b:ac:cc:7b:9c:0a:a7:7e:3b: cc:50:33:04:18:0c:bb:59:37:76:5d:12:29:78:f1: 9c:80:42:10:35:c0:16:7c:ff:ce:41:d8:2d:44:05: c5:e6:99:2e:06:de:7d:0a:a2:64:8f:90:70:15:eb: 63:91:12:85:24:68:0f:d0:37:c9:a2:85:44:99:26: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:97:24:03:B2:A6:34:DB:CA:5A:79:FE:CF:B0:A6:7B:73:DA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:43:23:4e:1f:ad:a7:24:78:57:4d:06:b9:9d:df:81:d9:7d: 75:63:cb:3a:0e:0e:7d:6a:d1:49:c2:57:aa:14:85:73:de:bd: 11:25:84:d3:31:2d:ad:c0:01:6a:6d:01:5d:4c:39:ad:18:1b: 38:4f:a3:f2:c5:e0:06:e1:e7:3c:4a:dd:fc:80:ea:2a:e1:ff: 68:eb:1d:96:2b:fa:20:df:c6:a3:9e:75:53:f9:1a:1a:6c:a9: 0d:ea:47:cb:9a:ed:f3:94:c4:c5:0c:e7:76:83:bf:92:e0:8b: 26:2d:09:c2:f0:d8:5b:fe:8c:ab:f5:7b:42:b6:d1:24:86:db: ee:b1:9b:94:55:86:5f:39:cd:62:f3:94:d6:7d:83:75:d8:ed: 0e:ca:c3:e9:72:f9:a3:73:30:5d:32:b9:ae:79:0b:1c:82:49: 91:e9:2c:5a:46:ef:99:d4:bb:66:7e:03:cd:d5:b5:4d:13:bc: 7e:94:db:de:8e:49:6e:32:ce:f8:08:eb:58:b1:82:6e:cc:99: 2c:37:e5:60:0b:90:d7:67:dd:e6:a6:ad:ad:eb:b5:3c:f3:bd: 26:51:32:57:e8:35:a8:2d:93:45:9a:b3:d0:8d:1c:2f:38:01: db:8a:1f:95:be:a5:ec:c5:8e:a9:ed:d8:03:06:18:1e:14:11: 8d:ad:5f:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVISG9sSokcScIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MmZlYjRlNjAtYTFlNS00MzMxLWEyNTItMGFkYTFlYmI4OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGavlJeQswosBriwf9Zynj50Pzylqw92uREm 4eOfSXCOaVy6JX2c2Pu4bjbtHie/BFZSBul+Qe47hFPo+OGKRwKDcZZkeW0XN2g9 AWc4h4ttQO7BUTgKnTOKZNDSE+9xNjWUFltqHfZ84sAokCLmFk2F8uRfHruVxBrb TxnqtSN7RM6+JP9XnffrCRMMSx+iCaRynhh9zXQKYNlKTKxqdLlMuZ7debZio8S1 Yh5Yko2CRCbQnfPi2BIbrMx7nAqnfjvMUDMEGAy7WTd2XRIpePGcgEIQNcAWfP/O QdgtRAXF5pkuBt59CqJkj5BwFetjkRKFJGgP0DfJooVEmSbw2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXLlyQDsqY028paef7PsKZ7c9oLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMmY1ZTVjNWUtYjRhOC0z MWM3LWE1MTQtYjUwZmFiMzQwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdDI04frackeFdNBrmd34HZfXVjyzoODn1q0UnCV6oUhXPevRElhNMx La3AAWptAV1MOa0YGzhPo/LF4Abh5zxK3fyA6irh/2jrHZYr+iDfxqOedVP5Ghps qQ3qR8ua7fOUxMUM53aDv5LgiyYtCcLw2Fv+jKv1e0K20SSG2+6xm5RVhl85zWLz lNZ9g3XY7Q7Kw+ly+aNzMF0yua55CxyCSZHpLFpG75nUu2Z+A83VtU0TvH6U296O SW4yzvgI61ixgm7MmSw35WALkNdn3eamra3rtTzzvSZRMlfoNagtk0Was9CNHC84 AduKH5W+pezFjqnt2AMGGB4UEY2tX64= -----END CERTIFICATE-----Generated at Sun Apr 27 22:13:54 2025 by rpki-client