$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa File: f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa (raw, json) Hash identifier: Ug9VTMDs12Iygdpc61MKsZUKsC3Fl/To3Cx4WgP2EVc= Subject key identifier: E4:B0:20:53:64:86:7D:CB:04:27:0B:C8:32:34:FA:AF:B6:AC:C5:20 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584957F419538262254BAC6E3080 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11232 IP address blocks: 24.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:19:53:82:62:25:4b:ac:6e:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=b0c4a963-a467-4c3c-b7bd-73801574149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6e:cb:3c:b3:d4:de:3c:dd:91:fa:60:e8:f5: 10:ba:11:3c:d8:11:07:e8:52:76:de:18:74:86:0d: 3c:a7:c3:aa:59:e0:93:49:22:54:d0:a9:e1:86:90: 38:70:32:3d:11:d7:09:3f:fa:c2:f4:c9:19:cd:13: 03:1f:d7:eb:87:ce:0a:8c:36:1d:40:14:62:3d:bb: b6:8d:6c:07:48:a3:5e:5b:49:8d:5b:22:cd:b9:6a: 6d:bd:88:12:ce:b7:5d:49:06:ff:32:d9:03:22:87: e0:39:2a:8f:4a:74:15:31:85:fa:88:fd:cb:c7:be: 69:57:f4:4d:be:7e:82:cc:96:4d:a8:1d:15:a5:2b: 86:46:10:64:2c:7b:2f:3f:50:74:6c:1a:7d:ba:49: 5e:1e:04:3e:98:4d:d3:d5:03:48:a2:27:ee:51:eb: 86:0a:7b:36:09:5c:ab:20:8c:3c:5c:fd:d9:95:50: c7:25:fc:4d:c2:ff:ad:eb:5b:98:12:3a:2a:ed:09: be:d0:a0:33:64:ee:5f:53:a7:ca:f4:9e:41:da:5b: b3:0d:51:ed:e0:b2:9f:76:37:9a:ae:a1:f7:c7:71: a3:1b:3e:23:d7:cc:ee:e0:28:d6:c3:59:fd:d0:89: dd:c9:25:a2:40:19:5d:3c:9e:20:68:94:fc:98:80: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B0:20:53:64:86:7D:CB:04:27:0B:C8:32:34:FA:AF:B6:AC:C5:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cf:ce:98:f4:55:b6:6f:51:80:83:ec:47:45:23:4e:76:9f: aa:dd:2e:9d:f8:88:aa:28:d0:e3:e9:e2:86:07:a9:c0:2c:e9: 7c:b0:c0:c0:a1:76:e4:ac:04:5b:56:ff:7e:b0:e6:f1:0e:17: 11:60:21:7e:31:ef:75:20:a6:d2:ea:5b:17:06:b5:1b:ba:d9: 33:06:85:c9:9b:72:fe:37:6d:ae:89:44:e4:9d:45:7e:9a:e7: ee:50:ef:0f:dc:02:00:ef:17:dc:f8:cd:b8:ef:c6:5c:03:03: 8e:17:0d:14:fd:f3:03:6b:48:df:ca:8f:af:b3:79:75:13:91: 5f:1f:df:9c:74:f2:6b:ae:93:10:c6:71:ff:fe:a5:7d:3f:11: f0:07:80:e4:31:0b:41:b2:e3:bf:14:9c:19:aa:fa:df:72:dd: 25:66:ba:e5:1d:97:35:c2:9b:fb:e4:f0:ff:c1:3c:e9:89:e5: e4:f3:0a:d0:c1:52:9c:cb:5f:f5:fa:fb:92:a8:cf:97:7c:1e: 1b:0d:91:88:b4:a4:9c:51:a4:4e:89:64:f7:00:30:9d:7e:0c: 99:41:68:4a:08:d7:01:b0:00:49:d3:d3:71:5d:45:3b:ec:19: 83:be:44:3a:04:92:4f:e6:44:71:9f:6e:bb:29:68:b8:05:80: b2:c0:92:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BlTgmIlS6xuMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YjBjNGE5NjMtYTQ2Ny00YzNjLWI3YmQtNzM4MDE1NzQxNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm7LPLPU3jzdkfpg6PUQuhE82BEH6FJ23hh0 hg08p8OqWeCTSSJU0KnhhpA4cDI9EdcJP/rC9MkZzRMDH9frh84KjDYdQBRiPbu2 jWwHSKNeW0mNWyLNuWptvYgSzrddSQb/MtkDIofgOSqPSnQVMYX6iP3Lx75pV/RN vn6CzJZNqB0VpSuGRhBkLHsvP1B0bBp9ukleHgQ+mE3T1QNIoifuUeuGCns2CVyr IIw8XP3ZlVDHJfxNwv+t61uYEjoq7Qm+0KAzZO5fU6fK9J5B2luzDVHt4LKfdjea rqH3x3GjGz4j18zu4CjWw1n90IndySWiQBldPJ4gaJT8mIDFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSwIFNkhn3LBCcLyDI0+q+2rMUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjFmNjM1NWQtZTExZi0z YWE5LWE1MjQtMDZlMjRlZDNlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbPzpj0VbZvUYCD7EdFI052n6rdLp34iKoo0OPp4oYHqcAs6XywwMCh duSsBFtW/36w5vEOFxFgIX4x73UgptLqWxcGtRu62TMGhcmbcv43ba6JROSdRX6a 5+5Q7w/cAgDvF9z4zbjvxlwDA44XDRT98wNrSN/Kj6+zeXUTkV8f35x08muukxDG cf/+pX0/EfAHgOQxC0Gy478UnBmq+t9y3SVmuuUdlzXCm/vk8P/BPOmJ5eTzCtDB UpzLX/X6+5Koz5d8HhsNkYi0pJxRpE6JZPcAMJ1+DJlBaEoI1wGwAEnT03FdRTvs GYO+RDoEkk/mRHGfbrspaLgFgLLAkuk= -----END CERTIFICATE-----Generated at Sat May 10 10:48:24 2025 by rpki-client