$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa File: be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa (raw, json) Hash identifier: lQn2lz8hkH814Cir1QvM4cMAIkMxjmPoVBv17lOVwpk= Subject key identifier: 81:B4:ED:94:F2:06:05:4A:72:AF:06:45:6F:AE:AD:94:08:98:63:12 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584988CF3366A00008D38D4FF400 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 395567 IP address blocks: 216.153.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:33:66:a0:00:08:d3:8d:4f:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=352dc76b-d8c1-43fe-92de-dd752f09175e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:68:9f:a6:2c:78:99:65:08:52:e0:3c:27: 48:26:5a:d8:eb:21:fa:cf:fa:6f:33:6d:61:21:ed: 1f:d3:1b:f5:5f:76:4b:dd:33:e8:ad:9d:f7:7a:c6: 07:84:d0:d6:3d:f2:5d:34:5e:68:7c:de:99:b9:ed: 29:82:27:6a:65:e9:3a:7a:32:bb:55:4c:1c:8b:0e: 36:58:4b:4d:19:60:7b:fd:5d:9f:0a:1e:25:72:aa: 71:0c:d7:25:9d:8f:13:52:85:4d:bc:93:30:2e:9f: 8f:07:99:6c:af:30:cd:01:c9:57:54:ac:09:d1:44: 02:1d:7d:71:98:32:c5:f1:be:86:71:55:20:9c:2b: 85:33:d4:f6:22:10:29:cb:90:1f:23:eb:e1:80:4e: 22:50:31:a9:f5:e7:12:90:9a:97:60:dd:6d:42:68: 54:95:2a:05:9a:34:84:88:4b:8f:88:f2:61:a4:be: 9a:20:64:08:d3:5a:be:fd:1b:2b:b0:3a:50:32:d1: d0:58:6f:6e:1a:0a:f9:0d:89:f5:28:da:71:0a:7e: e7:fb:33:41:d6:2c:5d:e6:e4:2d:28:b2:64:de:45: 98:97:f2:cc:f5:2d:f0:bc:96:34:d0:65:f1:fd:4f: 02:cd:6d:b1:93:41:5d:d4:91:d1:c6:54:2b:47:14: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:ED:94:F2:06:05:4A:72:AF:06:45:6F:AE:AD:94:08:98:63:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:11:fb:ce:3f:24:3b:69:a1:13:3d:97:5f:10:a7:12:f5:60: ef:07:5b:10:b5:db:1a:2b:dd:f2:2a:3c:dc:bf:94:29:f7:cf: 8f:ab:3d:70:93:34:a5:04:4f:a3:df:3a:87:db:57:4e:58:78: c9:d6:40:7c:37:81:02:37:0a:f5:9d:55:81:34:ca:5a:49:c2: 65:4a:0a:c7:a7:c3:69:33:37:34:43:df:4e:8b:3b:cd:a2:f5: 65:62:73:75:f6:15:94:47:fc:7e:76:8b:e9:89:6a:87:9d:32: 63:a6:06:62:b0:cf:41:e4:65:05:95:82:e7:b1:4b:80:1d:86: 1b:5f:e1:b3:df:49:c7:f4:68:05:5e:6d:98:d5:80:04:c3:2c: 0f:26:d3:94:82:0f:a5:be:1c:df:e4:a2:73:25:2b:4b:a1:53: fd:ef:ab:a0:56:39:00:97:cf:5f:47:c5:8e:7f:93:9c:74:e6: 26:70:73:c9:a9:16:39:66:53:cc:06:aa:3e:2c:4d:eb:b3:f9: fd:2e:db:47:a6:cf:ae:f3:72:ac:b0:fb:9e:64:04:cf:3c:e1: bb:57:a2:e8:be:dc:aa:87:11:65:20:3e:6e:f1:2e:9b:27:ef: 31:ae:74:94:44:39:bf:54:d4:f2:6a:92:a1:d8:9e:06:b4:26: ac:40:da:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzNmoAAI041P9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzUyZGM3NmItZDhjMS00M2ZlLTkyZGUtZGQ3NTJmMDkxNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLVon6YseJllCFLgPCdIJlrY6yH6z/pvM21h Ie0f0xv1X3ZL3TPorZ33esYHhNDWPfJdNF5ofN6Zue0pgidqZek6ejK7VUwciw42 WEtNGWB7/V2fCh4lcqpxDNclnY8TUoVNvJMwLp+PB5lsrzDNAclXVKwJ0UQCHX1x mDLF8b6GcVUgnCuFM9T2IhApy5AfI+vhgE4iUDGp9ecSkJqXYN1tQmhUlSoFmjSE iEuPiPJhpL6aIGQI01q+/RsrsDpQMtHQWG9uGgr5DYn1KNpxCn7n+zNB1ixd5uQt KLJk3kWYl/LM9S3wvJY00GXx/U8CzW2xk0Fd1JHRxlQrRxSL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG07ZTyBgVKcq8GRW+urZQImGMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYmUxNDkzNGYtYjNhYS0z YzhlLTlhYjMtZWFlYmFhMzExMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMR+84/JDtpoRM9l18QpxL1YO8HWxC12xor3fIqPNy/lCn3z4+rPXCT NKUET6PfOofbV05YeMnWQHw3gQI3CvWdVYE0ylpJwmVKCsenw2kzNzRD306LO82i 9WVic3X2FZRH/H52i+mJaoedMmOmBmKwz0HkZQWVguexS4Adhhtf4bPfScf0aAVe bZjVgATDLA8m05SCD6W+HN/konMlK0uhU/3vq6BWOQCXz19HxY5/k5x05iZwc8mp FjlmU8wGqj4sTeuz+f0u20emz67zcqyw+55kBM884btXoui+3KqHEWUgPm7xLpsn 7zGudJREOb9U1PJqkqHYnga0JqxA2r4= -----END CERTIFICATE-----Generated at Mon Apr 28 08:32:08 2025 by rpki-client