$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa File: 1351a206-7659-3d84-bdf1-3748c7102b44.roa (raw, json) Hash identifier: V4+Jp5u3HQomfX8qkhOIQorCFjIaR/4ZVoF8k+b7Mas= Subject key identifier: FF:A2:AF:9D:FF:8D:77:59:7F:72:4C:EA:D9:F5:04:0A:A5:62:09:22 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F432858495ABEDE66664AEC345B26D400 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 40788 IP address blocks: 24.54.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:de:66:66:4a:ec:34:5b:26:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=3356e9b1-1bae-4398-9951-0439def57a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:90:d2:37:c1:62:25:7f:0d:32:59:d4:e7: 49:de:ec:97:e7:2e:b1:d1:9d:46:85:e8:f4:96:22: 49:18:cc:a4:ed:f8:06:fd:58:ec:a7:3b:6b:2b:2a: 3b:ed:67:e3:00:dd:18:cb:67:fe:ac:9b:d3:96:c2: 80:e5:5b:21:24:1b:72:f2:6e:5b:10:ac:45:e4:25: 15:d9:71:28:4e:df:4a:4b:3a:37:e1:be:7a:ee:88: 56:5c:df:87:2f:af:d5:ac:84:9d:44:3d:16:39:79: ba:53:24:32:dd:f1:08:3c:a6:ab:d3:7b:10:74:d8: 15:18:07:2b:cf:6d:71:68:0d:7b:34:44:44:4f:65: 0b:42:dc:18:8e:2f:1f:66:60:25:c6:00:20:a1:05: de:8c:b2:d3:e8:66:4e:85:33:b7:08:ec:d2:4d:23: d5:e0:69:56:99:d3:d3:96:e5:e4:c5:15:37:d3:9e: 85:89:c3:f4:82:46:a5:71:14:ef:75:3e:89:8c:07: ba:11:c8:c5:a2:16:26:15:e8:56:9c:21:d2:f5:50: 56:a4:bc:57:54:11:a0:2c:03:34:1e:70:c6:82:cb: e5:b8:64:ee:d1:75:65:07:29:9b:2a:db:a2:e4:9e: 4f:f5:39:a3:9c:e2:d6:82:39:ff:7e:64:74:6c:d4: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:AF:9D:FF:8D:77:59:7F:72:4C:EA:D9:F5:04:0A:A5:62:09:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 24.54.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:0b:47:2a:ac:de:cb:70:22:9a:5f:81:be:9f:53:81:71: b2:05:48:18:d8:84:f8:7c:2d:7f:4b:e8:67:39:65:54:84:ae: 13:ae:62:45:b2:f4:ce:19:a4:78:99:c7:a8:26:c3:f6:a7:fe: b5:f1:26:a0:3e:8f:bc:f9:61:62:87:76:a4:f4:a0:53:e6:5f: 44:e6:3d:bf:7d:6a:4b:26:01:8e:2b:b0:0b:ad:e3:c2:41:c1: 1e:d9:c1:fc:91:19:93:46:1f:d4:f9:4f:8a:45:f2:01:e4:c5: 67:e9:7e:61:ed:7d:cf:56:41:50:5b:93:e9:6b:2c:b1:20:23: 02:f6:02:01:e9:d7:6f:7a:a7:fb:11:a8:ac:88:9e:f5:62:ab: 99:6d:e8:e4:13:84:d8:8f:ae:53:5f:1b:6b:fb:bc:fb:4f:63: 7b:db:1c:36:ff:f6:79:80:e1:9e:6e:3e:37:6d:b8:a9:fe:78: fe:09:27:20:33:b5:1e:e5:68:83:79:75:4b:c0:92:31:04:2c: 60:fd:09:40:b7:9f:82:9e:f5:6b:dd:01:39:2b:81:4c:09:cd: 6d:9e:a4:3d:10:3d:18:0f:21:56:61:86:5e:61:dd:3b:20:39: cb:1d:b6:c6:e9:cb:4a:e3:13:cf:89:5a:e7:af:2e:a7:a7:d4: 64:b3:f1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt5mZkrsNFsm1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MzM1NmU5YjEtMWJhZS00Mzk4LTk5NTEtMDQzOWRlZjU3YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsSQ0jfBYiV/DTJZ1OdJ3uyX5y6x0Z1Ghej0 liJJGMyk7fgG/VjspztrKyo77WfjAN0Yy2f+rJvTlsKA5VshJBty8m5bEKxF5CUV 2XEoTt9KSzo34b567ohWXN+HL6/VrISdRD0WOXm6UyQy3fEIPKar03sQdNgVGAcr z21xaA17NERET2ULQtwYji8fZmAlxgAgoQXejLLT6GZOhTO3COzSTSPV4GlWmdPT luXkxRU3056FicP0gkalcRTvdT6JjAe6EcjFohYmFehWnCHS9VBWpLxXVBGgLAM0 HnDGgsvluGTu0XVlBymbKtui5J5P9TmjnOLWgjn/fmR0bNQilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+ir53/jXdZf3JM6tn1BAqlYgkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMTM1MWEyMDYtNzY1OS0z ZDg0LWJkZjEtMzc0OGM3MTAyYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGDZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrSC0cqrN7LcCKaX4G+n1OBcbIFSBjYhPh8LX9L6Gc5ZVSErhOuYkWy 9M4ZpHiZx6gmw/an/rXxJqA+j7z5YWKHdqT0oFPmX0TmPb99aksmAY4rsAut48JB wR7ZwfyRGZNGH9T5T4pF8gHkxWfpfmHtfc9WQVBbk+lrLLEgIwL2AgHp1296p/sR qKyInvViq5lt6OQThNiPrlNfG2v7vPtPY3vbHDb/9nmA4Z5uPjdtuKn+eP4JJyAz tR7laIN5dUvAkjEELGD9CUC3n4Ke9WvdATkrgUwJzW2epD0QPRgPIVZhhl5h3Tsg Ocsdtsbpy0rjE8+JWuevLqen1GSz8ZY= -----END CERTIFICATE-----Generated at Thu May 1 09:32:46 2025 by rpki-client