$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/645c1218-41a2-352a-ab02-4467bc3eeefd.roa File: 645c1218-41a2-352a-ab02-4467bc3eeefd.roa (raw, json) Hash identifier: ArxU4r8HeflEc6ctt6CE1ryJo/imCBY0Z4/OG9m2pAQ= Subject key identifier: 73:39:AC:25:F5:AC:C7:2A:A3:19:63:13:5B:F1:5D:86:90:CD:65:91 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F43285849F87A824C7920D535874B6D00 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/645c1218-41a2-352a-ab02-4467bc3eeefd.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 55209 IP address blocks: 24.38.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:82:4c:79:20:d5:35:87:4b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=d2db7e7a-5052-429e-8898-dc11c5b78539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:92:bc:4f:c1:ec:60:dc:32:10:2b:1e:e9: 6e:83:4f:0b:52:71:15:59:46:bc:14:48:bb:40:6d: cf:a4:80:93:8f:5e:4f:1b:4c:0c:f2:61:c8:9d:36: a1:de:11:46:06:1d:7c:06:23:91:74:93:62:72:95: 1a:f2:62:34:40:20:5b:0b:76:10:70:8b:bc:c1:9f: 18:1c:35:ab:dd:26:0e:f3:7f:8a:84:f7:b3:ea:23: 4d:b5:ad:3d:0a:96:aa:dd:0d:6d:79:72:d8:b3:99: 2b:b3:f2:b5:51:cb:3d:e8:4c:fe:68:73:11:0b:73: 93:a4:dc:05:c0:98:99:01:1d:43:52:b7:91:82:9e: f7:2e:d3:c7:a0:40:2a:7b:c6:89:5c:d5:26:3e:76: 2b:cb:5f:23:ff:f8:a6:1e:6b:72:7c:16:fb:f8:98: 9a:c8:b8:56:d7:7e:51:5e:1a:c9:df:d1:c8:ab:57: 44:a7:1e:57:b9:33:8b:c8:8f:fb:eb:dc:b5:a9:86: b7:8e:02:1b:df:8f:02:95:6f:bb:2f:30:60:36:97: b8:76:1e:26:2d:c6:48:9e:3e:02:0b:31:16:4a:81: eb:7b:b0:be:b4:a6:62:92:f3:d0:8a:4c:fe:f5:b8: 43:4c:64:35:3f:3b:a0:89:1b:cb:84:78:43:3b:82: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:AC:25:F5:AC:C7:2A:A3:19:63:13:5B:F1:5D:86:90:CD:65:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/645c1218-41a2-352a-ab02-4467bc3eeefd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:b8:99:82:d8:76:00:cc:72:2a:8c:d1:59:4e:bd:6b:64:20: c2:ce:2c:c9:4d:ab:ea:d5:71:54:0b:b7:ad:8d:08:68:1e:44: 73:7d:05:b3:85:55:8c:5f:86:cc:11:1d:7c:b4:d8:7c:27:a0: cc:6c:0a:25:48:aa:73:06:61:d8:71:a9:8f:94:17:81:50:45: 66:37:b9:8d:52:67:d6:e6:25:14:d3:09:1c:a3:43:44:fd:b2: b0:2b:52:b7:b0:46:97:9a:4f:e5:93:c9:65:fd:f6:93:13:85: 01:f4:f1:54:31:53:9a:ce:0e:36:91:72:fa:54:9d:1c:80:1d: ca:09:f9:93:a4:99:49:8b:9e:6c:b0:43:53:04:af:60:2f:e1: 15:cc:85:d7:10:08:6f:08:44:27:89:44:b9:9b:2f:8d:85:b3: d4:4c:70:83:99:70:99:5a:70:15:67:a1:79:1e:28:dc:87:05: 6d:bf:e6:ed:2c:ce:8e:38:ca:ea:32:82:12:83:81:ff:86:35: 49:31:35:f4:dc:7d:1c:8c:65:7f:6c:20:c8:6a:1a:45:12:f9: cb:79:0f:18:3c:1f:0d:16:ec:de:5b:65:ed:3e:df:81:a6:7f: 4d:01:8a:88:8f:6d:fd:a3:1e:51:a1:a4:8d:12:2d:eb:e5:6c: e3:56:6b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoJMeSDVNYdLbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZDJkYjdlN2EtNTA1Mi00MjllLTg4OTgtZGMxMWM1Yjc4NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7eSvE/B7GDcMhArHulug08LUnEVWUa8FEi7 QG3PpICTj15PG0wM8mHInTah3hFGBh18BiORdJNicpUa8mI0QCBbC3YQcIu8wZ8Y HDWr3SYO83+KhPez6iNNta09Cpaq3Q1teXLYs5krs/K1Ucs96Ez+aHMRC3OTpNwF wJiZAR1DUreRgp73LtPHoEAqe8aJXNUmPnYry18j//imHmtyfBb7+JiayLhW135R XhrJ39HIq1dEpx5XuTOLyI/769y1qYa3jgIb348ClW+7LzBgNpe4dh4mLcZInj4C CzEWSoHre7C+tKZikvPQikz+9bhDTGQ1PzugiRvLhHhDO4JdOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM5rCX1rMcqoxljE1vxXYaQzWWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNjQ1YzEyMTgtNDFhMi0z NTJhLWFiMDItNDQ2N2JjM2VlZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANO4mYLYdgDMciqM0VlOvWtkIMLOLMlNq+rVcVQLt62NCGgeRHN9BbOF VYxfhswRHXy02HwnoMxsCiVIqnMGYdhxqY+UF4FQRWY3uY1SZ9bmJRTTCRyjQ0T9 srArUrewRpeaT+WTyWX99pMThQH08VQxU5rODjaRcvpUnRyAHcoJ+ZOkmUmLnmyw Q1MEr2Av4RXMhdcQCG8IRCeJRLmbL42Fs9RMcIOZcJlacBVnoXkeKNyHBW2/5u0s zo44yuoyghKDgf+GNUkxNfTcfRyMZX9sIMhqGkUS+ct5Dxg8Hw0W7N5bZe0+34Gm f00BioiPbf2jHlGhpI0SLevlbONWa/s= -----END CERTIFICATE-----Generated at Sun Jun 15 13:56:03 2025 by rpki-client