$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa File: 4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa (raw, json) Hash identifier: jdmPPjpD3l+BVRK7WYDQld/RA9L3FL/quVd4toHYnu4= Subject key identifier: BB:3D:AC:46:8F:1E:EC:27:5A:0D:E8:9D:B9:CA:31:29:60:CD:D1:4F Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC952AC953A9D72558CF980 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 24.124.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:52:ac:95:3a:9d:72:55:8c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=46670698-f289-4701-9077-17e16f39fa33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:47:7b:09:76:c8:10:30:3a:7c:27:ef:73:96: ee:1b:52:ca:b4:a3:f8:33:e2:01:cb:40:af:8d:95: 90:14:2e:21:74:fe:2e:71:96:4f:62:2f:4f:70:2e: 9b:68:6b:24:8d:5a:c4:7f:c9:4e:ef:3a:6d:7d:75: b0:14:f7:b1:d9:c7:15:3f:e5:98:41:b0:d1:a4:8b: 1c:87:03:5c:ae:b8:bb:bb:2b:bb:8a:72:74:7b:6f: 17:a9:20:0e:ba:ba:d9:e9:05:b9:72:84:a2:eb:2c: 20:8d:dd:ff:49:26:3a:28:bb:95:bd:f1:e4:a7:60: 49:4f:0c:73:b5:fe:c6:e1:ca:20:85:cf:15:48:1f: 1a:83:80:10:2c:9e:1f:d0:fe:c8:b9:4f:a8:07:b4: 2b:3b:aa:66:2f:e3:aa:58:68:67:60:9c:99:8c:22: 2b:12:d2:d7:3d:4b:53:4f:dc:f8:6e:f4:0a:77:9e: 86:76:e6:fc:4f:3c:8a:7b:17:36:c1:57:11:56:de: 3e:6e:9e:45:25:df:93:f1:44:48:76:ed:7b:ad:39: 71:da:3c:3d:3b:8c:76:a3:9d:8b:04:44:77:4a:44: be:4a:8c:2c:34:51:40:a5:ff:34:45:10:5f:ad:e7: 50:b4:66:12:21:05:fb:8a:84:26:6d:2f:af:3d:c7: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3D:AC:46:8F:1E:EC:27:5A:0D:E8:9D:B9:CA:31:29:60:CD:D1:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:32:7c:74:da:7f:5a:b4:f3:75:48:88:43:55:90:39:5a:99: 1a:79:5d:cc:72:61:a1:ab:4a:71:1c:03:f0:11:a6:bc:8a:bf: f1:f4:df:5d:53:f0:ea:31:c4:b9:65:0c:87:7d:f6:c4:5b:86: 4b:91:ea:6e:86:c5:cc:dc:c3:a7:2c:fd:e2:04:9d:7c:7c:9e: e9:38:11:66:cb:27:1c:eb:b9:73:77:53:b4:74:52:9f:ca:d9: fa:62:71:bb:bb:48:2d:ed:a0:9a:cd:08:91:c2:80:94:e7:eb: 04:18:82:7d:b3:9b:2c:50:74:43:0f:4b:9b:d0:49:d5:cc:43: 2d:51:c0:7f:64:e3:02:7f:62:ef:29:53:9e:f1:bc:51:a1:df: ad:2a:15:ad:2f:9b:ef:da:35:3c:c7:d5:b9:50:2e:3f:47:a3: 51:cd:52:05:c0:c6:3c:02:c2:81:6c:45:c8:4b:8c:67:ee:90: 5a:c0:b9:67:4d:5b:2f:b2:aa:2e:c6:3f:aa:2e:51:2a:9b:c1: b9:ea:1a:0c:fb:46:e1:37:fa:1c:b4:4a:cd:e5:f7:f3:0b:0d: e7:ff:51:ac:eb:da:83:bf:b4:c3:45:5a:1b:cc:2e:31:79:d3: ac:02:81:c7:77:75:39:15:25:34:e9:42:4b:6c:91:9f:13:9e: 12:16:ca:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVKslTqdclWM+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDY2NzA2OTgtZjI4OS00NzAxLTkwNzctMTdlMTZmMzlmYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEd7CXbIEDA6fCfvc5buG1LKtKP4M+IBy0Cv jZWQFC4hdP4ucZZPYi9PcC6baGskjVrEf8lO7zptfXWwFPex2ccVP+WYQbDRpIsc hwNcrri7uyu7inJ0e28XqSAOurrZ6QW5coSi6ywgjd3/SSY6KLuVvfHkp2BJTwxz tf7G4coghc8VSB8ag4AQLJ4f0P7IuU+oB7QrO6pmL+OqWGhnYJyZjCIrEtLXPUtT T9z4bvQKd56Gdub8TzyKexc2wVcRVt4+bp5FJd+T8URIdu17rTlx2jw9O4x2o52L BER3SkS+SowsNFFApf80RRBfredQtGYSIQX7ioQmbS+vPccd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs9rEaPHuwnWg3onbnKMSlgzdFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNGU2YjFlMWEtYjc4OC0z ZTlkLThiN2ItMDQwZmYzMzg0ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYyfHTaf1q083VIiENVkDlamRp5XcxyYaGrSnEcA/ARpryKv/H0311T 8OoxxLllDId99sRbhkuR6m6Gxczcw6cs/eIEnXx8nuk4EWbLJxzruXN3U7R0Up/K 2fpicbu7SC3toJrNCJHCgJTn6wQYgn2zmyxQdEMPS5vQSdXMQy1RwH9k4wJ/Yu8p U57xvFGh360qFa0vm+/aNTzH1blQLj9Ho1HNUgXAxjwCwoFsRchLjGfukFrAuWdN Wy+yqi7GP6ouUSqbwbnqGgz7RuE3+hy0Ss3l9/MLDef/Uazr2oO/tMNFWhvMLjF5 06wCgcd3dTkVJTTpQktskZ8TnhIWyvM= -----END CERTIFICATE-----Generated at Tue Apr 29 19:59:29 2025 by rpki-client