$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa File: df99f080-3f81-3a55-969f-3784b59f95b1.roa (raw, json) Hash identifier: SkhU1znVyLUkbjrmhQEfldISTSR0i8qoavSVIKE1GDQ= Subject key identifier: 1F:8E:B7:26:1C:CF:0F:9F:43:92:76:4E:7B:D2:13:5A:C1:C2:FB:E8 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584A103535CE7A135D65D239D980 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 398014 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:35:ce:7a:13:5d:65:d2:39:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=8c80d310-10ff-4ee8-9052-46ae8a07f6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:4e:c9:89:0d:e6:1d:b8:8a:94:79:4c:da: bb:0a:27:86:fd:8a:c0:9b:e3:c5:96:1a:c3:ef:1d: a2:b7:c4:ff:b4:6a:e8:18:90:d2:76:a3:82:71:97: a1:8e:f5:34:9e:74:8e:0b:0b:ab:e9:73:b4:b9:ec: b4:13:5f:3b:87:99:a4:25:d2:c3:95:ad:28:b1:ef: 28:5f:74:c1:73:58:c1:b0:4c:30:e7:33:45:ae:a0: aa:9a:95:fb:11:84:5f:6a:83:21:18:4a:45:cd:ea: 3c:65:51:34:5d:17:79:79:a9:9b:d1:dd:96:07:c7: 38:86:f0:a3:ee:32:43:f1:d1:c9:6b:da:0d:a9:38: a6:35:ab:aa:d4:8d:f2:e6:f6:71:5c:19:cd:bb:cc: fa:19:32:cd:5c:0c:83:18:43:8c:e8:86:4a:ec:ab: ce:b9:3e:a3:2b:89:3c:2b:ec:9f:aa:55:3f:ae:d7: 8d:6c:1c:f6:67:d6:6e:d7:d2:28:49:c0:7d:e0:c3: cb:ef:85:8c:b3:00:de:dd:c8:31:29:cf:0b:b1:dd: f9:b8:31:a3:06:53:19:d7:a5:3f:36:87:2f:9c:7d: c0:3f:2b:b5:4d:ee:81:ed:6e:07:28:af:08:80:2d: aa:9b:6e:57:8b:b1:93:de:94:b3:9f:b4:98:93:cd: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8E:B7:26:1C:CF:0F:9F:43:92:76:4E:7B:D2:13:5A:C1:C2:FB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2f:d6:a8:d8:29:50:cf:b4:71:e0:24:bd:a0:0a:97:fc:4d: d5:6e:7b:d4:b6:f2:8e:10:92:c1:72:92:41:98:a3:5d:12:62: 00:d3:f3:27:bb:2f:df:9a:d8:f7:48:6f:f5:b4:88:a5:09:c4: 30:54:f4:54:69:52:41:ab:6a:f0:c9:c0:24:25:3c:bb:bb:b4: 4b:ff:24:e4:1d:37:e5:67:10:08:04:c0:b4:a9:48:68:a7:1e: 35:7b:f7:e0:d6:43:21:bf:23:ae:3f:ee:97:3c:92:a5:35:35: 88:69:10:e0:72:b5:f8:90:82:b0:50:fc:10:d1:08:9a:67:6d: 49:53:91:a8:69:49:30:5c:03:e6:0c:bd:6a:b7:0c:c3:7d:7d: 8f:94:76:01:4b:96:cc:4d:ad:c9:c4:57:2d:d0:36:1e:e1:d3: 57:ba:b0:76:66:f1:e2:83:fa:9b:16:45:dd:26:c8:63:7b:2d: 05:88:69:aa:d2:e3:b5:0e:ab:5c:5e:db:7b:8e:ac:ad:53:1e: 27:25:f5:e7:05:47:0c:57:8e:8c:3b:b4:8f:77:78:b1:24:f4: f7:b2:ed:c6:c6:24:17:19:ca:23:bc:af:6f:16:fb:7b:8e:5c: b1:d0:7d:ba:3d:97:38:25:32:f2:d7:9f:9a:d6:55:ab:af:a5: 89:3d:ea:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTXOehNdZdI52YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk OGM4MGQzMTAtMTBmZi00ZWU4LTkwNTItNDZhZThhMDdmNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsdOyYkN5h24ipR5TNq7CieG/YrAm+PFlhrD 7x2it8T/tGroGJDSdqOCcZehjvU0nnSOCwur6XO0uey0E187h5mkJdLDla0ose8o X3TBc1jBsEww5zNFrqCqmpX7EYRfaoMhGEpFzeo8ZVE0XRd5eamb0d2WB8c4hvCj 7jJD8dHJa9oNqTimNauq1I3y5vZxXBnNu8z6GTLNXAyDGEOM6IZK7KvOuT6jK4k8 K+yfqlU/rteNbBz2Z9Zu19IoScB94MPL74WMswDe3cgxKc8Lsd35uDGjBlMZ16U/ NocvnH3APyu1Te6B7W4HKK8IgC2qm25Xi7GT3pSzn7SYk80xHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+OtyYczw+fQ5J2TnvSE1rBwvvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZGY5OWYwODAtM2Y4MS0z YTU1LTk2OWYtMzc4NGI1OWY5NWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwv1qjYKVDPtHHgJL2gCpf8TdVue9S28o4QksFykkGYo10SYgDT8ye7 L9+a2PdIb/W0iKUJxDBU9FRpUkGravDJwCQlPLu7tEv/JOQdN+VnEAgEwLSpSGin HjV79+DWQyG/I64/7pc8kqU1NYhpEOBytfiQgrBQ/BDRCJpnbUlTkahpSTBcA+YM vWq3DMN9fY+UdgFLlsxNrcnEVy3QNh7h01e6sHZm8eKD+psWRd0myGN7LQWIaarS 47UOq1xe23uOrK1THicl9ecFRwxXjow7tI93eLEk9Pey7cbGJBcZyiO8r28W+3uO XLHQfbo9lzglMvLXn5rWVauvpYk96vc= -----END CERTIFICATE-----Generated at Mon Jun 16 11:35:39 2025 by rpki-client