$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/6c07a066-d417-32fd-ba35-53269b17f457.roa File: 6c07a066-d417-32fd-ba35-53269b17f457.roa (raw, json) Hash identifier: m9zPZPHIDFW5aV9z5jHWWd8WJCMoB8++TLwHjdXTMHE= Subject key identifier: 94:29:C6:29:05:7A:8F:84:09:6E:F1:14:9F:37:D2:63:A5:35:E7:AC Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584A3A1584F4C5583E7E75AB8CC0 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/6c07a066-d417-32fd-ba35-53269b17f457.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 40788 IP address blocks: 24.53.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:84:f4:c5:58:3e:7e:75:ab:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=0c4fe387-6e62-4489-8816-473cadb12115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:43:a1:eb:fb:65:0c:06:8b:46:57:18:25: 06:c0:bf:7c:f7:29:7f:58:09:7f:6b:95:90:b1:76: f9:4f:f0:80:6b:f8:40:ab:47:b4:17:27:f0:b5:ab: 86:1a:db:52:5d:3c:05:67:f7:f7:80:3b:de:89:bc: 2e:e9:1a:c3:92:ed:55:ba:cf:93:ad:38:ab:ee:3c: 2a:ad:11:64:4d:aa:3f:5a:b0:c8:82:b6:09:93:f8: 7e:11:08:f7:5d:d4:64:a1:0d:b7:26:15:93:7f:e4: d8:d2:05:93:62:aa:ab:88:39:14:ee:e1:34:cd:ee: f6:0a:e6:39:9d:21:3e:8f:d1:59:89:a1:af:80:a6: 47:5e:da:ac:6d:e3:08:c4:b6:5d:74:b3:be:24:15: 8c:05:f3:8b:b8:6b:65:54:23:49:36:2a:20:1f:2b: f5:5d:b6:0c:65:5e:35:a9:12:b6:c1:41:13:a4:06: 9e:28:a7:44:4b:7b:92:00:81:e2:45:bf:39:ee:58: 1b:46:15:66:64:81:ce:21:5a:5d:e5:3c:a6:77:49: c9:00:4a:45:3c:27:1f:db:de:39:f8:ce:42:9c:6c: e8:cd:c4:2c:dc:78:0b:7c:78:da:44:2a:27:47:cd: 3f:3f:4b:f8:c3:bf:81:94:f8:18:6c:6a:7f:b4:83: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:29:C6:29:05:7A:8F:84:09:6E:F1:14:9F:37:D2:63:A5:35:E7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/6c07a066-d417-32fd-ba35-53269b17f457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 24.53.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:af:d1:c8:86:63:a2:44:1e:58:2e:2b:b6:f1:01:aa:f8:f3: 45:f5:1b:51:99:19:14:e4:f0:4e:2b:7c:c0:64:10:fe:3a:9e: 36:41:15:f8:3a:fb:4a:b2:f6:1f:8b:01:96:79:0a:d7:04:47: 78:90:41:55:98:15:cb:9a:38:ed:47:39:a2:99:37:30:20:bc: 6d:43:2b:2e:42:b6:78:73:b4:b8:20:8e:e0:d1:98:15:97:03: 6a:06:86:05:43:74:f1:2b:58:f3:86:4e:75:f2:4e:0b:e1:a2: 8f:ff:27:70:26:2e:7d:40:e3:51:93:62:f1:6a:5c:7f:c8:14: a6:8c:dd:51:1d:f4:8e:cd:76:c5:cb:61:64:6b:68:bd:38:09: fb:d9:9c:99:dd:dd:2f:f2:1a:c3:27:a4:67:d9:01:4c:08:62: 73:42:ac:87:4a:50:d6:9e:00:10:ef:86:4b:3f:e2:58:0a:63: 62:90:5d:ca:93:5d:b4:02:2d:ee:98:d4:20:89:40:b6:1a:e1: 23:06:ec:24:01:09:ca:cf:c0:69:bb:37:12:92:a9:ad:49:40: 59:c4:c6:68:b6:a3:b3:34:a3:9e:40:00:d3:52:48:42:6f:ad: 16:4b:cf:82:a8:78:ec:a2:54:23:67:1e:0b:e9:08:21:0d:d1: 58:2c:c0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYT0xVg+fnWrjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MGM0ZmUzODctNmU2Mi00NDg5LTg4MTYtNDczY2FkYjEyMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCRDoev7ZQwGi0ZXGCUGwL989yl/WAl/a5WQ sXb5T/CAa/hAq0e0FyfwtauGGttSXTwFZ/f3gDveibwu6RrDku1Vus+TrTir7jwq rRFkTao/WrDIgrYJk/h+EQj3XdRkoQ23JhWTf+TY0gWTYqqriDkU7uE0ze72CuY5 nSE+j9FZiaGvgKZHXtqsbeMIxLZddLO+JBWMBfOLuGtlVCNJNiogHyv1XbYMZV41 qRK2wUETpAaeKKdES3uSAIHiRb857lgbRhVmZIHOIVpd5Tymd0nJAEpFPCcf2945 +M5CnGzozcQs3HgLfHjaRConR80/P0v4w7+BlPgYbGp/tINjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQpxikFeo+ECW7xFJ830mOlNeesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvNmMwN2EwNjYtZDQxNy0z MmZkLWJhMzUtNTMyNjliMTdmNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGDXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2v0ciGY6JEHlguK7bxAar480X1G1GZGRTk8E4rfMBkEP46njZBFfg6 +0qy9h+LAZZ5CtcER3iQQVWYFcuaOO1HOaKZNzAgvG1DKy5CtnhztLggjuDRmBWX A2oGhgVDdPErWPOGTnXyTgvhoo//J3AmLn1A41GTYvFqXH/IFKaM3VEd9I7NdsXL YWRraL04CfvZnJnd3S/yGsMnpGfZAUwIYnNCrIdKUNaeABDvhks/4lgKY2KQXcqT XbQCLe6Y1CCJQLYa4SMG7CQBCcrPwGm7NxKSqa1JQFnExmi2o7M0o55AANNSSEJv rRZLz4KoeOyiVCNnHgvpCCEN0VgswGM= -----END CERTIFICATE-----Generated at Mon Jun 30 11:55:29 2025 by rpki-client