$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa File: f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa (raw, json) Hash identifier: PMY6x7EjbyM3FO/3DQCAUtzGoaWSv4HjnSjXaDA+ezo= Subject key identifier: D3:C5:CC:E2:9A:29:AB:06:75:B2:FD:1E:BA:E6:2A:D8:8F:17:E4:BC Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC950F579E8D44AC7B86400 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 24.220.229.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:50:f5:79:e8:d4:4a:c7:b8:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=b0a19965-9c08-4f59-b004-90a1a1d45859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:06:3f:38:bb:0d:38:c3:05:42:b3:42:ee: fc:63:7f:e3:d7:bc:7b:d0:14:ea:d5:84:9c:fa:d2: 38:93:d2:54:c0:51:b0:14:dc:14:20:9e:d6:b6:6c: f3:cc:3a:fc:d0:6f:17:7e:fe:e5:8a:7f:c9:2c:36: 4b:15:65:28:eb:2f:e9:27:da:e8:39:56:f5:f2:0e: 6d:ae:11:80:9f:24:63:c9:1c:e8:a2:5c:60:a1:77: ca:79:6a:9c:8d:c8:b9:35:e9:76:4e:68:0a:da:c2: 1f:31:49:87:b7:1a:5a:5e:34:ca:5d:5e:32:a9:09: e0:7a:11:a4:01:66:0e:7f:b6:ea:47:54:84:54:1d: 70:4d:45:1d:b4:f1:ac:96:ef:f4:f8:a4:40:85:5e: 98:e9:36:83:4c:24:f1:4b:e3:17:0f:c8:7a:b9:35: 12:af:03:3e:ce:d8:1f:60:fa:39:a1:e8:9a:59:83: 73:bb:7f:21:a5:6b:81:ec:81:9b:db:2a:a8:d2:ec: 04:37:ea:82:8f:52:94:4c:e7:28:aa:7b:66:5d:ee: 47:9e:57:c5:cd:8e:87:a9:00:8d:52:d7:2f:24:4e: a7:a6:c5:aa:db:46:c3:64:7a:92:ce:19:0e:c7:59: 76:92:32:ed:87:ab:df:7c:c9:b2:83:73:e8:d5:19: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C5:CC:E2:9A:29:AB:06:75:B2:FD:1E:BA:E6:2A:D8:8F:17:E4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.220.229.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:de:f1:e7:ce:c6:97:00:9a:17:52:54:46:1d:af:e2:5b:58: bb:02:65:92:d0:50:12:7d:a2:50:c4:08:ff:62:61:83:56:4c: 21:be:ff:b4:89:f6:08:43:81:e8:6d:02:90:e5:8e:ec:e2:2d: 36:8d:c8:e5:0f:f3:04:ab:25:97:81:2e:96:18:a0:68:29:75: 6e:00:fc:e1:e4:39:bc:09:bf:5e:b3:0b:73:5f:f5:e2:85:fc: 89:a7:b1:e4:18:c4:62:a0:72:97:c0:e9:99:80:54:24:cc:e5: 98:24:3c:36:f8:e0:30:d0:41:e8:59:05:da:6a:b8:c8:fd:07: 26:42:74:cf:e8:5b:26:86:13:90:11:84:9b:1a:88:53:37:3e: 21:93:b0:19:20:5a:97:09:92:fc:05:4d:04:41:ae:67:9e:83: 8a:e5:cd:0c:4f:29:0e:9b:41:a9:39:1e:4c:ab:32:4f:b5:a2: c0:ab:c3:8a:84:61:7e:1c:a9:2f:58:05:13:da:49:03:3f:f3: b7:e7:03:d9:59:e4:82:f3:cb:bb:e2:c6:51:14:22:3e:7d:56: 10:b9:1b:09:dd:31:28:c4:ac:37:c1:4c:8f:0d:bc:19:43:b9: d8:e1:31:49:15:f1:f9:74:6b:4c:a4:5f:de:dc:18:f2:dd:2a: 0d:a8:b1:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElMyVD1eejUSse4ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjBhMTk5NjUtOWMwOC00ZjU5LWIwMDQtOTBhMWExZDQ1ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMAGPzi7DTjDBUKzQu78Y3/j17x70BTq1YSc +tI4k9JUwFGwFNwUIJ7WtmzzzDr80G8Xfv7lin/JLDZLFWUo6y/pJ9roOVb18g5t rhGAnyRjyRzoolxgoXfKeWqcjci5Nel2TmgK2sIfMUmHtxpaXjTKXV4yqQngehGk AWYOf7bqR1SEVB1wTUUdtPGslu/0+KRAhV6Y6TaDTCTxS+MXD8h6uTUSrwM+ztgf YPo5oeiaWYNzu38hpWuB7IGb2yqo0uwEN+qCj1KUTOcoqntmXe5HnlfFzY6HqQCN UtcvJE6npsWq20bDZHqSzhkOx1l2kjLth6vffMmyg3Po1Rl8TQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNPFzOKaKasGdbL9HrrmKtiPF+S8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjNiMTMzYTAtY2M3Ny0z YjZiLTk2ZTQtOWUxODZkMDJhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEGNzloDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA73vHnzsaXAJoXUlRGHa/iW1i7AmWS0FASfaJQxAj/YmGDVkwhvv+0 ifYIQ4HobQKQ5Y7s4i02jcjlD/MEqyWXgS6WGKBoKXVuAPzh5Dm8Cb9eswtzX/Xi hfyJp7HkGMRioHKXwOmZgFQkzOWYJDw2+OAw0EHoWQXaarjI/QcmQnTP6FsmhhOQ EYSbGohTNz4hk7AZIFqXCZL8BU0EQa5nnoOK5c0MTykOm0GpOR5MqzJPtaLAq8OK hGF+HKkvWAUT2kkDP/O35wPZWeSC88u74sZRFCI+fVYQuRsJ3TEoxKw3wUyPDbwZ Q7nY4TFJFfH5dGtMpF/e3Bjy3SoNqLH7 -----END CERTIFICATE-----Generated at Tue Apr 29 00:05:12 2025 by rpki-client