$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa File: 8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa (raw, json) Hash identifier: hqtK498/7gt59mKpIkpXTOk7bhMAcog40IRfwb5vofU= Subject key identifier: FF:55:E3:A4:EF:5A:3D:2A:4B:16:29:B2:44:90:33:08:CD:C3:5D:D8 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F43285849C4D4B77F82634DBE2EAE0380 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 6327 IP address blocks: 24.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b7:7f:82:63:4d:be:2e:ae:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=62d8025f-9191-4ab3-9441-f485d9333b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:43:15:af:1e:ca:d3:4e:a1:86:49:ac:8a: 4b:89:63:e7:c0:df:44:58:15:56:db:df:7f:46:1f: b2:25:5a:7a:00:1a:66:47:a9:79:ab:b2:00:df:41: 0d:da:1f:b6:7d:8a:b4:47:b5:ff:19:4f:2c:07:f0: 03:11:30:d3:1b:73:51:b1:af:08:e3:4e:dd:bc:d1: a2:9a:98:ba:9c:57:17:6c:84:a6:bc:9a:3c:4d:79: f8:6b:55:f0:6f:60:bb:61:40:e0:54:d6:ea:3f:ed: 4d:13:a3:2c:35:a2:6e:4a:43:8e:12:38:6a:18:a1: b7:07:d2:70:e0:61:75:ce:28:5e:de:69:67:89:62: 9b:3a:3e:50:19:a5:6d:81:18:a4:55:cc:92:ca:8a: 8c:75:32:a6:1b:78:ea:14:ec:5b:25:9c:cd:62:f6: 5c:ad:d0:f4:84:97:25:24:77:b6:84:ff:9d:34:22: 66:7d:22:d0:8f:7b:1a:7c:8e:33:66:01:5f:2f:c7: a6:bb:99:90:25:13:72:78:7b:7c:41:62:d7:2a:90: 6e:19:ee:73:33:e8:e2:b4:1f:ec:93:67:78:1a:6e: aa:8d:1c:dd:ed:9d:b2:a3:c0:0a:4c:e9:4d:60:64: 00:04:6d:db:fe:a6:91:43:5f:98:ca:a3:39:26:eb: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:E3:A4:EF:5A:3D:2A:4B:16:29:B2:44:90:33:08:CD:C3:5D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: 24.244.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:93:91:e7:1f:0f:2f:8d:45:6f:9a:3d:cc:f5:57:5b:9a:c0: 70:b7:21:76:e9:a4:67:5b:bf:25:a9:98:22:28:cc:6d:b9:e4: 72:55:d7:54:c1:34:a1:ac:64:6e:66:52:c0:15:f3:da:c1:19: 47:61:ea:87:3f:ed:a0:cc:2c:11:b7:12:4d:bb:12:2a:68:d3: e5:ec:fe:76:5f:db:9b:ca:67:87:f1:e5:e8:9a:be:0f:6d:5d: 48:98:15:c6:b6:0f:81:b4:1e:9f:2c:ba:ce:39:a9:1b:f0:f1: c6:17:8e:16:93:4f:bb:24:ea:13:9d:e8:b2:59:c2:1a:9a:91: 3c:b7:c9:6c:a4:ae:80:cf:4e:33:f6:8d:bc:44:7d:d7:06:a2: 94:81:66:07:f9:3a:df:90:da:90:51:c9:62:0d:9b:18:9b:99: 90:b6:c4:d2:ab:96:3b:ad:65:54:90:84:fd:ba:23:f6:f1:82: cc:10:82:c1:61:f2:ab:9b:47:2f:93:b3:b2:97:c0:89:3c:7c: d7:cc:ff:64:8a:61:3e:fc:93:d0:99:67:dc:20:f3:5e:8d:0a: d5:df:0a:b1:d2:ae:4a:34:04:40:40:80:03:a4:d7:8d:80:8d: f4:96:be:e4:58:2f:66:06:a3:62:9c:93:d2:86:7a:95:ec:4c: f1:ae:25:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Ld/gmNNvi6uA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NjJkODAyNWYtOTE5MS00YWIzLTk0NDEtZjQ4NWQ5MzMzYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZlDFa8eytNOoYZJrIpLiWPnwN9EWBVW299/ Rh+yJVp6ABpmR6l5q7IA30EN2h+2fYq0R7X/GU8sB/ADETDTG3NRsa8I407dvNGi mpi6nFcXbISmvJo8TXn4a1Xwb2C7YUDgVNbqP+1NE6MsNaJuSkOOEjhqGKG3B9Jw 4GF1zihe3mlniWKbOj5QGaVtgRikVcySyoqMdTKmG3jqFOxbJZzNYvZcrdD0hJcl JHe2hP+dNCJmfSLQj3safI4zZgFfL8emu5mQJRNyeHt8QWLXKpBuGe5zM+jitB/s k2d4Gm6qjRzd7Z2yo8AKTOlNYGQABG3b/qaRQ1+YyqM5Jut25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9V46TvWj0qSxYpskSQMwjNw13YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvODk1NmQyZDMtMWU3MC0z MjJiLWJmNGItMWY2ODQ1YmRmZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGPQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6TkecfDy+NRW+aPcz1V1uawHC3IXbppGdbvyWpmCIozG255HJV11TB NKGsZG5mUsAV89rBGUdh6oc/7aDMLBG3Ek27Eipo0+Xs/nZf25vKZ4fx5eiavg9t XUiYFca2D4G0Hp8sus45qRvw8cYXjhaTT7sk6hOd6LJZwhqakTy3yWykroDPTjP2 jbxEfdcGopSBZgf5Ot+Q2pBRyWINmxibmZC2xNKrljutZVSQhP26I/bxgswQgsFh 8qubRy+Ts7KXwIk8fNfM/2SKYT78k9CZZ9wg816NCtXfCrHSrko0BEBAgAOk142A jfSWvuRYL2YGo2Kck9KGepXsTPGuJWg= -----END CERTIFICATE-----Generated at Mon Jun 16 01:30:06 2025 by rpki-client