$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa File: a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa (raw, json) Hash identifier: oY3ZCAsyL5YqascRSocgMdMBUX426qU6qTLnrgetPwk= Subject key identifier: 5E:C6:9E:35:97:5C:80:54:70:A2:8D:B8:DB:11:B7:74:12:92:14:F8 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC95255513BA4498D2D3400 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 24.124.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:52:55:51:3b:a4:49:8d:2d:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=06fb578f-4dc4-429e-830a-6605ba82c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:f6:4e:07:2d:6c:fd:ab:c2:6d:21:96:86: d6:f4:2d:4c:82:51:ea:d2:1b:44:85:93:31:8c:69: 6c:e5:71:ac:57:21:67:8e:59:95:d9:7d:19:b7:69: 7d:bd:93:9d:e3:f4:9d:a5:b1:63:b2:1b:0c:ad:77: 2f:31:91:89:65:54:10:6e:4f:3d:42:c4:59:e8:75: 2d:2f:1b:2b:8b:58:a9:f6:1c:49:42:ff:5e:d6:af: c2:d3:d6:bf:33:b2:c3:eb:33:40:50:83:dd:48:28: 2a:f4:65:eb:d3:0a:8b:c7:82:c1:bb:22:b8:19:c6: da:11:7a:95:9b:f9:9e:16:7a:91:e6:78:9e:22:f4: 30:82:e4:d6:aa:9d:45:bd:9c:a5:cb:23:e2:62:75: 56:89:4a:3c:1b:f0:2c:43:04:06:c3:87:29:8e:bb: 4f:02:4e:03:51:d9:23:6f:6b:0f:60:23:d7:75:59: 06:b2:48:f9:61:45:ab:91:be:44:14:35:d5:ac:f1: 2c:63:42:dc:28:00:07:c4:b6:7f:55:15:0f:01:fe: d2:89:e2:5d:3a:ec:a2:b6:5e:cd:5b:0f:98:bc:d6: a9:e5:a0:0e:00:81:6d:a1:08:2d:8b:f8:e7:a8:56: 7d:84:29:8b:0c:cc:ec:25:87:3c:2f:a7:7d:f8:bf: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:9E:35:97:5C:80:54:70:A2:8D:B8:DB:11:B7:74:12:92:14:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:27:72:d4:c7:cf:47:96:43:48:76:fb:7b:c5:fa:40:64:3f: bb:28:7f:72:c5:f4:a7:9b:6c:f5:6c:fb:3b:c9:6b:ef:fa:81: 41:e2:df:bb:ee:29:bd:45:2f:b5:4c:e6:59:eb:98:c1:62:73: b3:89:8a:08:5b:ee:1d:4a:4b:10:7b:49:1c:be:80:b3:dc:a2: 69:45:dd:a3:e8:e1:46:1f:d8:ff:51:1d:66:78:d9:f1:d5:30: 5c:f7:55:e6:05:1e:13:27:1f:6e:72:07:63:cb:9b:15:be:c0: f1:78:04:14:6b:9b:b8:00:8d:9d:17:80:ff:11:75:4a:c6:4a: fe:81:13:4f:f6:6f:4f:44:e8:0e:fe:0b:1c:7f:60:d6:1a:f2: b8:dd:d1:5c:ed:04:6a:c3:05:6e:d1:c9:e6:b7:c5:92:ef:a7: 76:22:ce:c6:76:76:c0:90:60:20:a5:c4:91:f7:df:8d:63:87: 6e:e5:87:32:0f:4d:cf:04:17:ab:34:bc:b9:a3:cc:74:92:79: 76:92:b7:f9:f7:64:87:68:a2:6e:ce:17:11:61:7f:fc:91:73: ee:8a:b4:19:ed:c0:a5:e6:03:e9:36:be:60:e7:c5:84:fd:80: 01:de:b8:51:1f:51:af:09:ff:da:63:63:cb:06:36:82:ed:e1: df:f0:a5:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVJVUTukSY0tNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDZmYjU3OGYtNGRjNC00MjllLTgzMGEtNjYwNWJhODJjOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4X2TgctbP2rwm0hlobW9C1MglHq0htEhZMx jGls5XGsVyFnjlmV2X0Zt2l9vZOd4/SdpbFjshsMrXcvMZGJZVQQbk89QsRZ6HUt Lxsri1ip9hxJQv9e1q/C09a/M7LD6zNAUIPdSCgq9GXr0wqLx4LBuyK4GcbaEXqV m/meFnqR5nieIvQwguTWqp1FvZylyyPiYnVWiUo8G/AsQwQGw4cpjrtPAk4DUdkj b2sPYCPXdVkGskj5YUWrkb5EFDXVrPEsY0LcKAAHxLZ/VRUPAf7SieJdOuyitl7N Ww+YvNap5aAOAIFtoQgti/jnqFZ9hCmLDMzsJYc8L6d9+L/FDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7GnjWXXIBUcKKNuNsRt3QSkhT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTNiNjJmMDItMzRiZi0z ZjcwLWFhMmQtOTdkMmZhM2EzODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcnctTHz0eWQ0h2+3vF+kBkP7sof3LF9KebbPVs+zvJa+/6gUHi37vu Kb1FL7VM5lnrmMFic7OJighb7h1KSxB7SRy+gLPcomlF3aPo4UYf2P9RHWZ42fHV MFz3VeYFHhMnH25yB2PLmxW+wPF4BBRrm7gAjZ0XgP8RdUrGSv6BE0/2b09E6A7+ Cxx/YNYa8rjd0VztBGrDBW7Ryea3xZLvp3YizsZ2dsCQYCClxJH3341jh27lhzIP Tc8EF6s0vLmjzHSSeXaSt/n3ZIdoom7OFxFhf/yRc+6KtBntwKXmA+k2vmDnxYT9 gAHeuFEfUa8J/9pjY8sGNoLt4d/wpfc= -----END CERTIFICATE-----Generated at Mon Apr 28 02:33:43 2025 by rpki-client