$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa File: bc371c38-7917-3988-a5f6-0263a408b6ba.roa (raw, json) Hash identifier: JGQVfjHWtkj7B+gWjNlbrESqqML+GlFS7O2YNrfOHww= Subject key identifier: 85:E0:B1:FA:57:9C:EA:14:17:F0:6E:5C:C9:6D:FC:CC:F3:8C:BD:51 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584957F41862CB4BCD646D7A9700 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11232 IP address blocks: 24.56.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:18:62:cb:4b:cd:64:6d:7a:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=62dc06cc-6b91-4262-841e-98e4377b7f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:3a:16:41:93:64:1d:72:68:19:46:00:c7: 74:2a:2c:39:cf:4c:a5:f9:bc:ff:9e:50:b3:ab:f4: 0c:f5:57:55:b6:26:06:43:47:03:7c:40:0f:41:0f: 37:cf:45:16:47:dc:27:01:b3:a5:f5:72:9a:2d:d4: 37:77:fa:94:d2:76:0d:81:d9:21:c0:74:d0:b6:82: 21:c7:a3:e1:02:3d:70:2a:56:a5:f7:b0:21:6f:00: 12:32:2b:80:68:03:c1:92:60:94:ee:9c:57:df:f6: c3:7e:29:ab:45:a8:b9:2c:7d:79:bd:7d:dd:f1:3b: 73:4a:f2:44:bd:7a:25:f9:39:e7:56:6c:3a:3c:4c: 1c:f8:f8:2d:18:a2:47:5b:6e:07:d8:10:ab:44:8e: fc:3d:bb:f1:36:23:af:51:1f:7a:12:fd:2a:d8:bf: 71:14:cc:6f:3d:d4:3a:d9:0f:a1:2a:56:7e:87:10: 35:ea:b2:68:21:45:d9:c5:f2:17:8b:a9:e8:3e:ea: 9c:a4:bf:c8:bf:3d:88:72:cd:83:6e:55:77:dc:dc: 8f:a1:b4:23:f6:0c:d4:ab:a3:0e:83:99:dc:cd:00: ea:9f:ba:54:1d:c6:fe:8d:ee:ec:62:0c:f6:01:0a: d3:50:70:da:b2:f7:62:60:d6:fb:39:d4:3c:26:b2: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E0:B1:FA:57:9C:EA:14:17:F0:6E:5C:C9:6D:FC:CC:F3:8C:BD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.56.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e6:65:f8:e5:9f:5b:93:1f:4e:0d:57:31:0f:8b:13:e4:a6: 08:f0:76:f6:1a:a6:98:8a:58:78:01:32:27:b5:0e:b1:4e:83: d5:2d:de:37:51:3e:ad:ce:44:2b:dd:1a:40:b7:17:c8:d4:8d: ee:b5:6c:1f:4c:01:49:f1:01:75:84:86:a5:18:bb:69:0a:d2: ee:f1:77:a5:44:d0:b8:a7:f6:5d:eb:53:c2:11:c8:c4:48:d9: 0e:64:72:96:4d:59:ba:4a:1d:5b:89:f4:85:f6:a8:c8:7c:9b: 29:2f:c6:3a:b3:03:43:e1:e1:6c:b9:6e:f0:f0:36:66:70:24: b9:f8:7a:9a:4d:5b:a1:5c:45:26:a6:2b:b0:8c:9e:2e:29:3a: 72:d6:80:a1:58:75:59:4f:5a:a6:7c:c9:7e:5f:df:90:5d:54: e2:bb:42:c2:3d:cd:99:ad:7d:cd:63:6b:ad:0d:07:b2:fb:dd: e2:97:43:af:3f:d3:09:2c:bf:71:55:98:bb:6c:1c:2a:74:05: 44:65:2b:64:f5:4f:0d:d0:6f:bb:88:39:0d:35:66:a4:67:c7: 41:fb:c5:63:07:cb:60:09:9d:1e:7f:95:17:e7:48:bb:c8:33: 64:73:ab:11:09:96:02:b4:75:b6:75:6f:42:49:9c:5d:90:1d: f0:00:bf:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Bhiy0vNZG16lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NjJkYzA2Y2MtNmI5MS00MjYyLTg0MWUtOThlNDM3N2I3ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ46FkGTZB1yaBlGAMd0Kiw5z0yl+bz/nlCz q/QM9VdVtiYGQ0cDfEAPQQ83z0UWR9wnAbOl9XKaLdQ3d/qU0nYNgdkhwHTQtoIh x6PhAj1wKlal97AhbwASMiuAaAPBkmCU7pxX3/bDfimrRai5LH15vX3d8TtzSvJE vXol+TnnVmw6PEwc+PgtGKJHW24H2BCrRI78PbvxNiOvUR96Ev0q2L9xFMxvPdQ6 2Q+hKlZ+hxA16rJoIUXZxfIXi6noPuqcpL/Ivz2Ics2DblV33NyPobQj9gzUq6MO g5nczQDqn7pUHcb+je7sYgz2AQrTUHDasvdiYNb7OdQ8JrJe6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXgsfpXnOoUF/BuXMlt/MzzjL1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYmMzNzFjMzgtNzkxNy0z OTg4LWE1ZjYtMDI2M2E0MDhiNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGDioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHmZfjln1uTH04NVzEPixPkpgjwdvYappiKWHgBMie1DrFOg9Ut3jdR Pq3ORCvdGkC3F8jUje61bB9MAUnxAXWEhqUYu2kK0u7xd6VE0Lin9l3rU8IRyMRI 2Q5kcpZNWbpKHVuJ9IX2qMh8mykvxjqzA0Ph4Wy5bvDwNmZwJLn4eppNW6FcRSam K7CMni4pOnLWgKFYdVlPWqZ8yX5f35BdVOK7QsI9zZmtfc1ja60NB7L73eKXQ68/ 0wksv3FVmLtsHCp0BURlK2T1Tw3Qb7uIOQ01ZqRnx0H7xWMHy2AJnR5/lRfnSLvI M2RzqxEJlgK0dbZ1b0JJnF2QHfAAvxM= -----END CERTIFICATE-----Generated at Mon May 12 07:24:47 2025 by rpki-client