$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa File: a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa (raw, json) Hash identifier: sZX5erMMCDGdIsOO5N4zuy6g1rPRCiulgP1pk8i3GWk= Subject key identifier: C5:E3:03:79:08:08:43:EF:C5:70:60:BE:38:AB:8B:0D:69:77:E5:42 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A2C202602C5DEBF9225BB1F00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 11232 IP address blocks: 24.124.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:26:02:c5:de:bf:92:25:bb:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=e8b1539d-d75f-4e16-93c0-a9841496c310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:11:68:e2:98:15:e7:a5:d9:03:2e:37:49: 3d:70:1e:01:f8:70:5b:52:8d:36:28:92:d1:82:bc: d2:d2:73:1a:a3:9f:4c:8f:05:5b:d2:b8:4e:57:6a: 4a:35:4a:b8:bc:10:f6:f0:f7:ee:16:62:37:5f:64: 6d:1b:bf:4f:da:4b:32:2a:8c:04:c3:79:e1:94:6a: ad:8c:67:32:16:d8:53:f1:39:cc:37:80:92:cd:e8: 9f:1a:a7:1c:55:1c:e3:ae:06:f5:e6:4f:57:e4:b1: fb:35:a0:86:7e:34:75:77:3f:99:a7:20:88:4b:13: 01:e2:3d:af:17:0c:6d:8b:16:02:92:7f:21:c4:7e: ce:1d:86:94:2f:e5:25:05:31:38:74:ec:1e:12:0f: 84:d8:5c:a6:88:7e:59:b0:db:19:82:bc:7e:93:3f: 60:4a:3d:46:b5:09:73:be:71:b7:41:89:25:d1:12: d2:1a:a1:9b:f3:f7:ad:ff:76:fe:ec:03:84:24:40: b5:59:ef:96:2c:b7:f5:f5:1b:6c:f2:bc:a1:c8:2d: 81:ab:6a:1b:7e:dd:88:87:78:42:dd:f3:04:3a:05: e1:71:6c:67:21:a1:a1:99:4a:9d:ba:25:94:1e:62: a1:44:28:c2:49:b0:1d:2e:51:d2:a9:a7:ff:b0:58: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:03:79:08:08:43:EF:C5:70:60:BE:38:AB:8B:0D:69:77:E5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7c:6a:c9:eb:ff:db:81:bb:aa:90:a1:4f:42:d4:06:d9:c8: d0:4e:01:3d:aa:82:c7:4d:cb:e7:50:fd:2e:8c:a3:2a:ea:88: 58:a2:53:d9:93:bc:32:14:dc:cc:f1:d7:f7:0c:88:53:40:2b: f3:49:86:2e:72:a9:eb:08:3f:bb:f6:82:ee:7c:cd:81:a9:6c: 4b:87:08:87:6b:1a:6e:ce:a0:d6:db:27:ee:8a:39:39:aa:bf: 85:0e:3e:85:67:43:fc:44:58:bc:4b:90:f0:d8:78:a7:b0:a6: 0d:e8:5b:6a:3d:be:c7:24:3b:b1:6c:c9:0a:d0:b1:3e:a0:0e: cb:8d:b4:ee:a4:2d:58:4a:e5:6c:d8:1f:d3:48:9d:ff:2a:71: 26:62:fb:b0:03:00:cb:41:f1:b7:d7:93:76:81:9f:cc:f1:26: 16:b8:55:8e:6a:88:96:a4:c7:de:3d:11:f9:b0:d6:93:2f:94: 58:33:dd:26:1c:4c:ed:52:a3:ee:b0:f4:b2:70:c4:94:8d:e1: 64:1c:fe:c5:c9:ac:d4:d5:da:67:38:84:8a:7c:bb:d5:88:34: 8b:91:13:00:b9:9b:77:a2:e5:87:52:8f:3b:73:39:13:29:81: 07:be:e0:d3:6e:01:4c:57:c2:43:42:2e:6c:fe:cc:35:7a:3c: 18:52:fb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICYCxd6/kiW7HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZThiMTUzOWQtZDc1Zi00ZTE2LTkzYzAtYTk4NDE0OTZjMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBYRaOKYFeel2QMuN0k9cB4B+HBbUo02KJLR grzS0nMao59MjwVb0rhOV2pKNUq4vBD28PfuFmI3X2RtG79P2ksyKowEw3nhlGqt jGcyFthT8TnMN4CSzeifGqccVRzjrgb15k9X5LH7NaCGfjR1dz+ZpyCISxMB4j2v FwxtixYCkn8hxH7OHYaUL+UlBTE4dOweEg+E2FymiH5ZsNsZgrx+kz9gSj1GtQlz vnG3QYkl0RLSGqGb8/et/3b+7AOEJEC1We+WLLf19Rts8ryhyC2Bq2obft2Ih3hC 3fMEOgXhcWxnIaGhmUqduiWUHmKhRCjCSbAdLlHSqaf/sFjzzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXjA3kICEPvxXBgvjiriw1pd+VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTNiNjJmMDItMzRiZi0z ZjcwLWFhMmQtOTdkMmZhM2EzODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB8asnr/9uBu6qQoU9C1AbZyNBOAT2qgsdNy+dQ/S6MoyrqiFiiU9mT vDIU3Mzx1/cMiFNAK/NJhi5yqesIP7v2gu58zYGpbEuHCIdrGm7OoNbbJ+6KOTmq v4UOPoVnQ/xEWLxLkPDYeKewpg3oW2o9vsckO7FsyQrQsT6gDsuNtO6kLVhK5WzY H9NInf8qcSZi+7ADAMtB8bfXk3aBn8zxJha4VY5qiJakx949Efmw1pMvlFgz3SYc TO1So+6w9LJwxJSN4WQc/sXJrNTV2mc4hIp8u9WINIuREwC5m3ei5YdSjztzORMp gQe+4NNuAUxXwkNCLmz+zDV6PBhS+w4= -----END CERTIFICATE-----Generated at Thu Jun 19 09:15:41 2025 by rpki-client