$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/579d1c98-5742-34d3-b46a-f6ce08b05c22.roa File: 579d1c98-5742-34d3-b46a-f6ce08b05c22.roa (raw, json) Hash identifier: 6kzolZTDwPE2xQe6gSLWRKzVoei2CzA7eMUGvG2sl7E= Subject key identifier: C5:40:F8:0C:3C:01:E6:B1:9A:2A:E6:95:23:72:7B:61:DA:FB:83:A4 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A374AE4E42D82C2E9C74C3040 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/579d1c98-5742-34d3-b46a-f6ce08b05c22.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11232 IP address blocks: 24.52.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:e4:e4:2d:82:c2:e9:c7:4c:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=ee29fd5d-1609-4f0b-b1d2-3a407af8fa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:37:3c:a5:a6:8d:d0:c1:06:67:04:e0:3e: d4:7f:02:97:71:9c:1e:da:81:c0:11:84:5e:97:2b: 5a:36:bf:e4:d9:ee:e5:e7:fd:2b:92:e1:17:1f:26: ac:fb:8d:1a:88:85:85:7f:c5:e8:0f:53:49:74:aa: 5a:d5:36:8f:41:fa:04:c3:c6:b8:d4:32:7d:51:da: cf:02:bb:0e:08:8a:64:cc:44:e8:7b:15:e6:cd:23: 77:5f:22:40:ca:6a:f1:6b:da:c7:ab:69:dc:89:3a: 75:91:40:2b:76:2f:13:0e:6a:86:4c:5d:89:2b:5a: 61:73:12:70:9b:a2:ab:08:14:39:3f:01:77:cc:54: 46:1d:c5:6d:a5:b2:f9:f6:d4:c8:32:39:36:b2:10: 45:58:b7:16:77:05:ac:65:4a:79:38:63:09:81:7c: a3:37:8d:9b:aa:8e:c0:b2:67:38:d1:6f:23:ec:b8: ca:80:bf:08:77:40:d4:42:a2:c9:5c:98:2a:08:97: 24:45:b5:9e:75:f5:97:bc:df:a1:44:c3:39:88:e4: c9:44:3e:5d:56:d5:52:25:e5:77:da:f2:a5:0c:15: 25:b1:0a:68:c4:94:c5:e2:54:31:c9:af:28:60:bc: 86:3b:c9:9a:88:66:45:db:cd:28:24:4a:68:ab:20: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:40:F8:0C:3C:01:E6:B1:9A:2A:E6:95:23:72:7B:61:DA:FB:83:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/579d1c98-5742-34d3-b46a-f6ce08b05c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:90:18:78:2a:8e:8b:ac:8c:a0:90:5a:22:22:6f:f5:95:f7: e3:a6:25:02:5d:4f:1e:21:0f:7f:8f:0a:b0:4d:c9:69:36:af: ae:f0:c4:ec:a2:1e:38:65:02:2e:a4:4c:6d:81:94:1a:84:d6: 60:39:bc:11:2a:73:8e:59:11:b1:71:78:04:a8:47:27:8a:32: fe:8c:54:48:b3:1d:0c:fa:84:c4:0f:c5:30:37:4e:0b:a9:bf: ac:e3:68:bc:da:2d:cb:eb:ed:cc:7d:58:f3:ea:e8:39:c5:22: 62:38:70:05:6e:38:f1:e9:84:49:6f:90:fd:fb:fb:de:f8:8a: d3:04:a5:bf:24:2c:9f:97:30:87:f2:f9:d7:d8:5a:ad:31:e5: 76:d1:9a:8d:d6:dc:a2:17:af:16:fe:64:f2:ef:51:02:0a:10: dc:90:af:37:0a:24:44:9c:05:b3:43:a2:be:6a:f2:e2:d3:f8: d5:39:f6:d5:26:96:50:30:27:af:30:ad:53:e8:e5:aa:c1:3e: 45:50:57:ce:a2:68:ce:b4:1a:9e:0e:a4:32:ab:de:ad:bc:03: 59:5f:87:68:4c:e1:dc:86:97:0c:7d:1f:93:28:12:e3:cb:76: f8:60:bd:30:07:33:be:e0:65:e8:ee:c6:11:a0:4c:67:60:38: e7:b2:fb:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SuTkLYLC6cdMMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZWUyOWZkNWQtMTYwOS00ZjBiLWIxZDItM2E0MDdhZjhmYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl03PKWmjdDBBmcE4D7UfwKXcZwe2oHAEYRe lytaNr/k2e7l5/0rkuEXHyas+40aiIWFf8XoD1NJdKpa1TaPQfoEw8a41DJ9UdrP ArsOCIpkzEToexXmzSN3XyJAymrxa9rHq2nciTp1kUArdi8TDmqGTF2JK1phcxJw m6KrCBQ5PwF3zFRGHcVtpbL59tTIMjk2shBFWLcWdwWsZUp5OGMJgXyjN42bqo7A smc40W8j7LjKgL8Id0DUQqLJXJgqCJckRbWedfWXvN+hRMM5iOTJRD5dVtVSJeV3 2vKlDBUlsQpoxJTF4lQxya8oYLyGO8maiGZF280oJEpoqyDNfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVA+Aw8AeaxmirmlSNye2Ha+4OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNTc5ZDFjOTgtNTc0Mi0z NGQzLWI0NmEtZjZjZTA4YjA1YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKQGHgqjousjKCQWiIib/WV9+OmJQJdTx4hD3+PCrBNyWk2r67wxOyi HjhlAi6kTG2BlBqE1mA5vBEqc45ZEbFxeASoRyeKMv6MVEizHQz6hMQPxTA3Tgup v6zjaLzaLcvr7cx9WPPq6DnFImI4cAVuOPHphElvkP37+974itMEpb8kLJ+XMIfy +dfYWq0x5XbRmo3W3KIXrxb+ZPLvUQIKENyQrzcKJEScBbNDor5q8uLT+NU59tUm llAwJ68wrVPo5arBPkVQV86iaM60Gp4OpDKr3q28A1lfh2hM4dyGlwx9H5MoEuPL dvhgvTAHM77gZejuxhGgTGdgOOey+5o= -----END CERTIFICATE-----Generated at Thu Jun 19 09:21:44 2025 by rpki-client