$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa File: cf326abc-d15b-3239-975e-23598674000e.roa (raw, json) Hash identifier: g/xGm1TKWJGrYMlG2QpKq8iQReMYT4hFSskWl+jNhJE= Subject key identifier: 36:B9:9B:0A:EB:3F:E0:F6:0E:05:87:63:E5:42:AF:74:03:CB:10:3D Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584957F419419B548FABF67E3000 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11232 IP address blocks: 24.52.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:19:41:9b:54:8f:ab:f6:7e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=6025f26d-02e5-4b19-b664-6ff1132046fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:4d:74:ce:77:0c:f8:e6:c5:52:22:cd:8a: 38:4c:12:c5:be:b5:40:20:af:b4:af:99:66:4c:bc: 63:f4:46:fd:ea:e5:c9:ab:83:4b:f9:73:7d:c6:7c: d4:55:82:36:c8:d8:44:f9:6e:1f:84:07:bc:2a:ac: f7:34:8c:3b:81:86:15:8a:02:39:2e:0a:d0:3c:1a: b4:41:93:24:bd:5a:81:fa:85:cd:bc:0c:ef:8e:75: de:37:e9:be:fc:38:73:55:c4:7a:69:5a:3e:13:ab: a9:cd:f9:09:41:13:3f:77:5e:80:a4:c9:d3:87:2b: 88:32:89:36:6d:db:89:40:86:68:89:44:34:9e:44: 23:fc:ce:a1:83:00:55:83:87:05:d2:68:04:b6:61: 21:ab:0a:63:fe:7a:33:f3:6f:cd:16:81:9a:5e:66: f4:9d:04:c2:28:48:15:a0:94:79:3b:fb:25:45:91: 1e:95:e9:06:6e:6a:59:53:fe:38:c1:12:00:3d:b7: 7c:d7:82:32:a6:bb:34:71:0e:08:90:c0:ad:5a:1b: b7:c6:46:a3:56:6f:62:6a:f9:0f:9b:10:40:a5:4e: 4b:8b:6a:bb:c6:c8:1d:1a:fc:cd:e9:05:6b:ac:fc: 3e:f7:d2:34:c4:7c:6a:47:06:a7:a6:ea:b0:04:f3: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B9:9B:0A:EB:3F:E0:F6:0E:05:87:63:E5:42:AF:74:03:CB:10:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:10:dc:88:e8:65:87:f8:10:02:a1:c6:e5:d0:0c:d7:55:35: 1f:dc:ff:60:e8:6e:17:49:43:c3:f6:a4:c2:7c:5e:27:ca:ee: 77:e4:82:d3:fb:a5:4d:e2:e6:0c:fe:a4:b8:a4:b7:9a:12:fb: 77:ed:f7:51:37:68:af:3b:f8:87:c7:a0:4d:51:b5:af:75:46: 74:cc:84:57:79:96:f2:72:86:1d:57:e6:ab:8c:e4:f9:bb:7b: a5:54:a2:eb:68:59:f1:0a:46:a3:b4:04:a5:51:72:5e:8e:32: 92:35:74:03:04:78:49:22:7c:04:fb:d9:1e:d0:ef:0c:36:30: 21:1d:1b:ef:0c:27:6c:14:db:28:e7:96:be:54:7f:1b:50:e0: 47:ec:49:97:34:d3:d3:d4:a2:bc:f5:95:71:9d:5e:a3:65:d4: 7a:0e:4b:78:26:73:a1:87:a5:da:ad:d4:28:b3:95:9d:45:54: f9:02:57:c9:86:e4:05:61:fe:28:0d:d0:18:12:59:a8:69:d9: 0b:8b:32:59:4f:41:2a:1f:94:1f:8f:1f:93:ee:45:fc:13:ca: c6:f2:28:3c:5e:35:7c:b2:53:91:46:a2:bb:d8:bf:5d:0d:85: 7e:1e:1f:f9:3f:da:c0:a4:e9:d1:06:b1:6f:b9:35:78:dc:2b: e2:34:67:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BlBm1SPq/Z+MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NjAyNWYyNmQtMDJlNS00YjE5LWI2NjQtNmZmMTEzMjA0NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp5NdM53DPjmxVIizYo4TBLFvrVAIK+0r5lm TLxj9Eb96uXJq4NL+XN9xnzUVYI2yNhE+W4fhAe8Kqz3NIw7gYYVigI5LgrQPBq0 QZMkvVqB+oXNvAzvjnXeN+m+/DhzVcR6aVo+E6upzfkJQRM/d16ApMnThyuIMok2 bduJQIZoiUQ0nkQj/M6hgwBVg4cF0mgEtmEhqwpj/noz82/NFoGaXmb0nQTCKEgV oJR5O/slRZEelekGbmpZU/44wRIAPbd814Iyprs0cQ4IkMCtWhu3xkajVm9iavkP mxBApU5Li2q7xsgdGvzN6QVrrPw+99I0xHxqRwanpuqwBPNXXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa5mwrrP+D2DgWHY+VCr3QDyxA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2YzMjZhYmMtZDE1Yi0z MjM5LTk3NWUtMjM1OTg2NzQwMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEQ3IjoZYf4EAKhxuXQDNdVNR/c/2DobhdJQ8P2pMJ8XifK7nfkgtP7 pU3i5gz+pLikt5oS+3ft91E3aK87+IfHoE1Rta91RnTMhFd5lvJyhh1X5quM5Pm7 e6VUoutoWfEKRqO0BKVRcl6OMpI1dAMEeEkifAT72R7Q7ww2MCEdG+8MJ2wU2yjn lr5UfxtQ4EfsSZc009PUorz1lXGdXqNl1HoOS3gmc6GHpdqt1CizlZ1FVPkCV8mG 5AVh/igN0BgSWahp2QuLMllPQSoflB+PH5PuRfwTysbyKDxeNXyyU5FGorvYv10N hX4eH/k/2sCk6dEGsW+5NXjcK+I0Z1s= -----END CERTIFICATE-----Generated at Mon Apr 28 05:15:40 2025 by rpki-client