$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa File: 9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json) Hash identifier: 2nmeiLpfqCH3vf8o6yvRpZbwjGSZLVGeCuEGmbVDcv0= Subject key identifier: CC:04:EF:7F:C7:7C:16:0E:14:8C:1D:FC:27:E2:84:87:1D:01:F5:A1 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA06A6A11FF9EE7F976180 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 24.212.128.0/17 maxlen: 17 24.212.240.0/21 maxlen: 21 24.212.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:06:a6:a1:1f:f9:ee:7f:97:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=a5209cd5-18fd-41e8-b93e-f9276be9d4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:4f:08:e9:00:9a:cd:43:c1:ec:80:53:45: 47:ad:a4:63:22:2b:a8:67:38:e1:cb:13:dc:7f:4f: 54:08:d1:fa:5d:9e:fd:de:b8:57:2f:f4:07:6a:b8: e1:ad:dc:87:20:73:9f:16:93:97:24:ca:c7:1a:88: 76:7c:5a:10:de:bf:cc:e8:1e:29:bf:94:82:55:90: ac:d5:af:d6:7e:7d:a1:c4:04:f7:d5:b5:a7:82:6b: f6:18:b6:76:cf:0f:5c:93:88:6b:7d:43:0d:ca:1d: d2:ec:44:29:5b:5e:e0:14:42:87:bf:f9:0c:ca:64: 00:69:28:33:f9:0f:48:52:d2:d0:26:85:f6:65:cb: c0:64:94:df:6d:1d:96:f7:9c:dc:87:9c:40:bb:41: 12:69:ca:d6:bd:79:e5:4b:b3:09:75:81:00:bc:28: d5:35:94:25:4b:c5:fb:13:21:42:18:7f:af:e1:7e: 0a:39:7d:a5:38:3e:21:14:b9:9d:3f:9e:f5:13:0b: 27:f2:d9:f7:67:46:21:79:c8:2c:dd:60:e7:5f:4a: 5b:fd:b9:70:3f:13:ec:8e:0e:c1:06:b9:70:b8:0f: bf:29:3c:13:dd:f2:08:e0:61:37:3f:8b:d1:69:8d: 78:91:11:f1:db:01:0a:0d:51:c7:6e:99:65:8c:16: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:EF:7F:C7:7C:16:0E:14:8C:1D:FC:27:E2:84:87:1D:01:F5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:6c:d2:c3:52:94:c7:a7:d4:de:81:71:11:b1:f1:8a:47:87: 82:83:4c:f8:af:72:5f:6e:52:a2:ce:33:e5:e9:77:0c:c1:f0: 07:bd:c1:31:46:80:3a:39:60:fa:06:31:a5:ea:73:4e:40:7b: f7:a5:96:a1:97:6b:27:b6:fc:6b:b8:d8:66:6b:88:d2:e7:f4: 70:5a:51:79:ea:1e:58:1d:97:ee:21:e0:ac:83:f5:50:16:5a: f5:81:ec:aa:a2:d6:c1:26:2c:26:18:95:6b:03:c1:aa:b5:43: ee:9c:c6:bc:3e:68:7b:3c:a7:30:aa:4a:00:7b:1e:e9:4f:00: 45:ad:e7:21:1c:53:ba:76:7f:60:21:ed:91:f7:c7:51:4b:2c: 55:f7:8e:d3:65:c3:ab:b6:d5:33:91:82:8c:5a:f1:cb:ae:8b: f4:df:c0:55:e8:27:01:75:24:7b:57:58:46:5f:51:15:a7:fb: e7:91:7c:e8:a9:45:36:d6:5c:80:ea:ec:ca:07:4b:7d:f8:72: 90:0a:01:9a:01:7d:ca:be:e4:10:4d:94:5d:84:b3:98:6b:d2: a5:49:47:08:0e:f2:e4:95:72:ea:54:fe:b5:46:1b:85:fc:e6: 8f:05:f9:eb:48:97:41:58:8b:f6:e7:49:c7:ef:ed:23:b4:f5: 1e:67:2a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgamoR/57n+XYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YTUyMDljZDUtMThmZC00MWU4LWI5M2UtZjkyNzZiZTlkNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7dPCOkAms1DweyAU0VHraRjIiuoZzjhyxPc f09UCNH6XZ793rhXL/QHarjhrdyHIHOfFpOXJMrHGoh2fFoQ3r/M6B4pv5SCVZCs 1a/Wfn2hxAT31bWngmv2GLZ2zw9ck4hrfUMNyh3S7EQpW17gFEKHv/kMymQAaSgz +Q9IUtLQJoX2ZcvAZJTfbR2W95zch5xAu0ESacrWvXnlS7MJdYEAvCjVNZQlS8X7 EyFCGH+v4X4KOX2lOD4hFLmdP571Ewsn8tn3Z0Yhecgs3WDnX0pb/blwPxPsjg7B BrlwuA+/KTwT3fII4GE3P4vRaY14kRHx2wEKDVHHbplljBZeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwE73/HfBYOFIwd/CfihIcdAfWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOTc2N2Y3YWEtYzBhNS0z OWY2LTk4ODEtOTFhMTVjNTNlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZs0sNSlMen1N6BcRGx8YpHh4KDTPivcl9uUqLOM+XpdwzB8Ae9wTFG gDo5YPoGMaXqc05Ae/ellqGXaye2/Gu42GZriNLn9HBaUXnqHlgdl+4h4KyD9VAW WvWB7Kqi1sEmLCYYlWsDwaq1Q+6cxrw+aHs8pzCqSgB7HulPAEWt5yEcU7p2f2Ah 7ZH3x1FLLFX3jtNlw6u21TORgoxa8cuui/TfwFXoJwF1JHtXWEZfURWn++eRfOip RTbWXIDq7MoHS334cpAKAZoBfcq+5BBNlF2Es5hr0qVJRwgO8uSVcupU/rVGG4X8 5o8F+etIl0FYi/bnScfv7SO09R5nKqE= -----END CERTIFICATE-----Generated at Sun Jun 15 19:42:44 2025 by rpki-client