$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa File: a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa (raw, json) Hash identifier: 4idAQxOXDjE7kGa/4C+5Fh2tya8wZjO2IWUQOzZr6e0= Subject key identifier: B3:64:A7:CA:2F:1D:02:E3:5D:21:66:CC:01:CA:0E:ED:AA:48:14:5E Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F43285849446947AB204251AFADFDD380 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 4922 IP address blocks: 24.53.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:47:ab:20:42:51:af:ad:fd:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=bf01e1d3-2d0f-4cac-9ad8-7e374df95532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:34:f8:ee:e7:1f:1c:3c:fc:4f:c6:6e:32: 2f:7d:3a:66:ff:e2:e2:62:c6:19:9a:c4:2f:da:cf: 17:bc:f9:76:d0:64:ef:f7:dd:9d:33:53:1a:ec:3d: d2:b9:41:27:ea:61:dc:90:bb:0a:4e:75:47:fa:09: 99:86:62:eb:4c:46:00:9e:e1:7e:83:88:34:b1:c2: d7:cf:d6:cc:4e:2b:13:66:96:ab:a3:28:44:40:a2: 30:c4:ac:2f:7f:d5:53:3f:5f:d4:fd:17:75:7d:09: f2:c2:50:c6:b8:50:4a:96:8e:2c:7d:6b:fb:e7:eb: af:5a:83:ce:58:1a:e2:9b:1e:1d:a3:1e:d2:ac:95: ac:1b:b6:13:30:7e:fe:92:bb:04:e1:ba:4c:33:25: 17:38:88:1c:60:09:44:98:59:35:7c:b2:e9:e6:e0: c8:15:f1:d3:eb:51:f1:37:cb:60:b6:d8:bd:ea:97: bc:66:92:32:e4:b8:da:d1:52:e0:3e:08:86:5d:7e: 39:bd:4d:14:51:e3:7d:4e:a4:80:34:63:7b:ad:47: c1:78:3f:c8:8b:4e:7c:74:8b:ef:20:ed:85:dd:69: 40:b9:5b:06:7e:70:8b:94:1c:35:08:30:e4:f9:a9: 33:52:f2:fe:3f:9d:d4:a8:b5:b7:bb:12:3d:59:bf: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:64:A7:CA:2F:1D:02:E3:5D:21:66:CC:01:CA:0E:ED:AA:48:14:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 24.53.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f2:10:8f:0e:84:04:5f:a6:f4:cb:d1:39:29:38:44:6d:14: 2e:63:ee:c6:cc:52:bd:99:79:67:4c:1a:be:71:75:21:a1:9d: 16:2e:f0:f4:2b:f7:5c:5a:32:f5:67:5d:22:9a:ff:c9:f5:ad: 02:79:48:b2:f6:3a:d5:04:de:53:29:0e:ed:50:49:f4:38:07: cd:05:ba:2f:c6:2a:74:ce:aa:1c:82:ab:b9:e0:10:8e:33:fb: 47:a6:c0:8f:77:ec:eb:e9:eb:e1:bd:c5:6a:4d:0b:81:d1:e9: 1d:e1:81:c7:a5:f8:8a:70:57:d8:6a:4c:c8:d8:a4:ce:5e:99: 15:04:23:73:60:ee:3c:ed:02:81:3f:a6:70:43:93:13:91:fb: d6:c1:d3:30:d5:23:8f:a9:54:a0:bd:61:88:e7:c2:a5:e9:2e: 36:32:d9:54:e7:03:6c:d2:fd:7f:01:00:b8:aa:09:e3:ed:29: 7c:93:fc:7a:54:87:63:5a:56:20:c2:3f:57:9f:9f:f9:50:b7: fa:a6:e7:2c:00:b7:5e:68:aa:37:fd:26:a5:22:56:0c:c6:c5: 5f:82:0b:d9:a0:40:22:69:af:58:7c:dc:5a:3e:3e:b3:c0:8e: e9:6d:c7:bb:6b:7e:61:8a:4b:08:91:a4:0e:23:25:5d:f7:5d: 83:6a:9b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUerIEJRr63904AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YmYwMWUxZDMtMmQwZi00Y2FjLTlhZDgtN2UzNzRkZjk1NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P00+O7nHxw8/E/GbjIvfTpm/+LiYsYZmsQv 2s8XvPl20GTv992dM1Ma7D3SuUEn6mHckLsKTnVH+gmZhmLrTEYAnuF+g4g0scLX z9bMTisTZparoyhEQKIwxKwvf9VTP1/U/Rd1fQnywlDGuFBKlo4sfWv75+uvWoPO WBrimx4dox7SrJWsG7YTMH7+krsE4bpMMyUXOIgcYAlEmFk1fLLp5uDIFfHT61Hx N8tgtti96pe8ZpIy5Lja0VLgPgiGXX45vU0UUeN9TqSANGN7rUfBeD/Ii058dIvv IO2F3WlAuVsGfnCLlBw1CDDk+akzUvL+P53UqLW3uxI9Wb9xsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNkp8ovHQLjXSFmzAHKDu2qSBReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYTZkZTk4YzMtOWU0MC0z MTEwLTgxZWUtM2Q3ZDA0ZjBjMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELyEI8OhARfpvTL0TkpOERtFC5j7sbMUr2ZeWdMGr5xdSGhnRYu8PQr 91xaMvVnXSKa/8n1rQJ5SLL2OtUE3lMpDu1QSfQ4B80Fui/GKnTOqhyCq7ngEI4z +0emwI937Ovp6+G9xWpNC4HR6R3hgcel+IpwV9hqTMjYpM5emRUEI3Ng7jztAoE/ pnBDkxOR+9bB0zDVI4+pVKC9YYjnwqXpLjYy2VTnA2zS/X8BALiqCePtKXyT/HpU h2NaViDCP1efn/lQt/qm5ywAt15oqjf9JqUiVgzGxV+CC9mgQCJpr1h83Fo+PrPA jultx7trfmGKSwiRpA4jJV33XYNqm6M= -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:00 2025 by rpki-client