$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa File: ae620bfa-78a7-3a5f-81dc-363d02245b93.roa (raw, json) Hash identifier: g+K8DR/9ZttRRw8jQqaq2fGQAgMD+8KjHL8cth9PtEo= Subject key identifier: 75:49:88:9B:77:24:DB:E2:97:09:05:C8:16:DF:B7:51:F0:DA:90:FF Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F43285849E7BA73A07C43BF5340E172C0 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 53766 IP address blocks: 216.221.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:73:a0:7c:43:bf:53:40:e1:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=264e4ec8-5eed-4f8a-9803-99142d5d7fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:20:06:e5:7d:99:72:ac:fd:ea:94:00:d6: 67:7f:fe:cf:13:5d:73:53:00:98:1c:d3:84:06:05: c7:74:54:15:01:09:7f:00:77:20:63:48:be:91:61: 37:7d:bd:da:f4:05:f4:74:46:8e:39:75:b2:74:c6: c3:22:87:4b:94:97:74:2c:32:89:81:5c:4a:b7:5c: ed:fb:e3:cb:1d:4a:c6:83:84:03:33:a2:f0:34:7e: d6:e4:2f:31:70:6a:29:ea:99:dc:03:f6:b7:33:c9: 9e:9b:16:db:c3:56:78:88:31:8d:07:a5:62:cd:4e: c7:ff:18:5b:33:ca:2e:70:75:a0:c7:92:83:1f:8c: e8:74:a5:ab:c7:14:5d:36:7c:a1:38:1d:af:35:76: eb:ef:1d:de:b8:d5:da:c4:36:b0:32:1b:d9:b5:49: b4:f8:90:a2:cb:c4:6e:35:13:9d:51:ad:3e:43:70: 6f:0b:06:d6:23:98:51:d7:06:90:2f:08:ab:fb:fa: e3:80:b9:eb:2e:0a:98:4d:91:61:db:b5:77:91:62: b4:ea:95:e6:03:fa:55:f7:2b:bb:1a:9f:d7:b3:d4: bc:99:ba:42:2a:d2:db:38:10:09:7a:2f:ce:24:40: d0:b5:f9:d5:ea:04:63:ba:07:8d:1c:10:34:42:f0: 98:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:88:9B:77:24:DB:E2:97:09:05:C8:16:DF:B7:51:F0:DA:90:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv4: 216.221.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:98:f7:5d:26:14:55:96:1a:10:fb:5c:83:d1:87:0b:d9:62: 1a:9a:be:9f:aa:d7:5d:c0:c0:8e:51:32:a3:ed:f1:1d:89:2b: 62:cd:52:10:23:ea:de:a6:58:1b:d9:2a:47:ab:ba:d9:90:56: b8:84:03:d2:d3:37:8b:be:7a:c8:74:f0:b2:51:83:1c:74:7e: 44:e7:9f:80:ce:ec:ca:cd:56:10:17:ce:a5:01:b9:96:d0:dc: d7:a3:c0:42:63:68:68:89:94:aa:34:87:fa:fc:ee:1b:3c:1a: a3:ed:18:65:d6:32:3f:e3:5b:fc:a9:86:a9:76:b0:56:a9:e5: 0e:e0:50:c2:41:04:24:26:33:04:8a:5e:51:70:3a:79:6b:bf: d2:ea:18:ff:61:6d:d2:6d:a7:53:9d:b8:e1:85:ef:39:ff:70: 81:a0:11:f8:65:f9:6f:aa:86:ff:eb:de:f8:bd:0b:6c:b5:dd: a4:da:2e:f4:2c:b3:d2:42:f0:2c:52:b1:be:d5:a9:26:ef:63: 4b:56:b2:ae:b7:d8:4c:58:f0:c7:7e:f2:d4:0e:12:ff:c1:77: 74:67:07:07:c2:2f:dc:eb:7a:44:09:f9:4a:9f:38:0a:39:8d: 9c:b5:c3:e9:61:1c:d2:5d:c8:bb:e4:fb:be:8a:73:c5:34:3a: 88:1c:72:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunOgfEO/U0DhcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MjY0ZTRlYzgtNWVlZC00ZjhhLTk4MDMtOTkxNDJkNWQ3ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZkgBuV9mXKs/eqUANZnf/7PE11zUwCYHNOE BgXHdFQVAQl/AHcgY0i+kWE3fb3a9AX0dEaOOXWydMbDIodLlJd0LDKJgVxKt1zt ++PLHUrGg4QDM6LwNH7W5C8xcGop6pncA/a3M8memxbbw1Z4iDGNB6VizU7H/xhb M8oucHWgx5KDH4zodKWrxxRdNnyhOB2vNXbr7x3euNXaxDawMhvZtUm0+JCiy8Ru NROdUa0+Q3BvCwbWI5hR1waQLwir+/rjgLnrLgqYTZFh27V3kWK06pXmA/pV9yu7 Gp/Xs9S8mbpCKtLbOBAJei/OJEDQtfnV6gRjugeNHBA0QvCYYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVJiJt3JNvilwkFyBbft1Hw2pD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvYWU2MjBiZmEtNzhhNy0z YTVmLTgxZGMtMzYzZDAyMjQ1YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2N0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmY910mFFWWGhD7XIPRhwvZYhqavp+q113AwI5RMqPt8R2JK2LNUhAj 6t6mWBvZKkerutmQVriEA9LTN4u+esh08LJRgxx0fkTnn4DO7MrNVhAXzqUBuZbQ 3NejwEJjaGiJlKo0h/r87hs8GqPtGGXWMj/jW/yphql2sFap5Q7gUMJBBCQmMwSK XlFwOnlrv9LqGP9hbdJtp1OduOGF7zn/cIGgEfhl+W+qhv/r3vi9C2y13aTaLvQs s9JC8CxSsb7VqSbvY0tWsq632ExY8Md+8tQOEv/Bd3RnBwfCL9zrekQJ+UqfOAo5 jZy1w+lhHNJdyLvk+76Kc8U0Oogcclk= -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:08 2025 by rpki-client