$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa File: d78030db-8b0b-346d-bbfe-bc1ab103241e.roa (raw, json) Hash identifier: Ds49JxszIlMOEMAVwzhv7TpAAse/qv/wJockwvcQ0PQ= Subject key identifier: BF:E0:35:A2:49:1C:4B:D9:2B:B8:7A:3E:B5:70:00:A4:BD:53:AC:F1 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584A3A1585188BC72B77C56EE680 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 40788 IP address blocks: 24.156.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:85:18:8b:c7:2b:77:c5:6e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=524cf81a-a87c-406b-b51d-d2db74bf4d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:42:81:df:be:4c:e7:6d:c0:8e:e6:09:80: 3d:71:db:6c:08:bc:2b:32:76:9f:1d:91:11:e3:58: 0c:1e:b3:69:6e:0f:4a:9c:b7:19:78:7c:b9:a4:f3: af:d7:12:eb:65:44:6c:39:63:f2:95:59:ee:cc:26: d4:8d:9a:8f:9c:fd:3c:a5:87:12:d8:f9:21:34:c6: 00:a3:24:66:57:b8:b8:ed:63:c5:45:30:11:60:01: 25:41:f7:8a:60:c2:aa:61:eb:fb:99:9c:da:10:19: 8a:85:c0:96:b9:50:c1:c9:bc:71:ed:11:36:13:80: 29:44:2f:a0:d3:dd:71:ec:12:87:7f:15:7c:49:8b: f2:bf:ed:bf:8f:4d:6e:e6:e0:93:bd:a7:f2:3a:a3: 7f:da:f7:6d:41:24:03:f9:dc:f4:47:bc:cc:c3:54: 07:3e:e8:48:53:23:ca:48:12:0f:4d:c6:c5:b4:c9: 47:00:2f:46:a9:1d:29:e8:80:66:60:c9:d3:7f:b8: 02:42:12:76:14:de:dc:3a:05:8c:22:af:f9:e5:22: da:b3:93:25:b3:1a:27:70:dd:f6:9d:79:52:b1:7f: 87:30:82:6c:96:9e:85:78:fb:54:ae:be:1e:e9:93: 42:44:b9:82:f6:89:8e:6c:d8:ea:cc:21:9e:d8:e2: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E0:35:A2:49:1C:4B:D9:2B:B8:7A:3E:B5:70:00:A4:BD:53:AC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 24.156.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:de:18:4d:ec:b7:90:29:d5:d3:ad:95:89:0f:eb:75:e4:bf: 3c:ac:23:9e:f7:df:f5:93:3a:4e:77:c0:71:28:18:15:34:4f: 7b:90:06:de:86:f2:6d:eb:51:c1:a6:dc:ae:e4:dc:e0:9c:8f: 8c:3f:ee:03:d7:55:72:42:1a:4b:ac:99:ef:eb:8f:b7:b3:90: e5:0e:97:c3:ca:65:e2:eb:a2:e4:d4:bf:ac:6a:0c:69:fc:e4: b4:1c:10:76:72:aa:ac:fe:f1:58:5b:69:4e:be:d7:d2:75:d3: da:54:0d:be:31:32:5b:09:7f:a9:be:59:68:87:c7:e2:2b:24: b1:58:9b:a6:98:c0:e1:80:d5:f0:18:6a:30:b4:52:18:96:05: bc:af:13:ca:bd:be:27:72:c7:bf:60:71:2f:23:34:3e:ff:fa: 7f:bd:4a:71:d6:8c:02:fd:86:bb:48:22:90:81:29:db:52:26: 00:41:62:57:13:58:3a:ae:e3:8b:85:29:14:d3:56:f7:8c:dd: dc:0f:eb:8a:f1:91:b3:77:a5:73:29:fc:68:b7:e9:39:2e:a9: 89:05:db:62:32:a1:5b:ce:a2:bd:99:8d:a1:ea:33:a1:77:45: 45:91:33:36:b4:cd:11:0f:bf:70:df:41:f3:05:12:76:15:6f: 38:1c:e3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYUYi8crd8Vu5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NTI0Y2Y4MWEtYTg3Yy00MDZiLWI1MWQtZDJkYjc0YmY0ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9xCgd++TOdtwI7mCYA9cdtsCLwrMnafHZER 41gMHrNpbg9KnLcZeHy5pPOv1xLrZURsOWPylVnuzCbUjZqPnP08pYcS2PkhNMYA oyRmV7i47WPFRTARYAElQfeKYMKqYev7mZzaEBmKhcCWuVDBybxx7RE2E4ApRC+g 091x7BKHfxV8SYvyv+2/j01u5uCTvafyOqN/2vdtQSQD+dz0R7zMw1QHPuhIUyPK SBIPTcbFtMlHAC9GqR0p6IBmYMnTf7gCQhJ2FN7cOgWMIq/55SLas5MlsxoncN32 nXlSsX+HMIJslp6FePtUrr4e6ZNCRLmC9omObNjqzCGe2OKKxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/gNaJJHEvZK7h6PrVwAKS9U6zxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvZDc4MDMwZGItOGIwYi0z NDZkLWJiZmUtYmMxYWIxMDMyNDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfeGE3st5Ap1dOtlYkP63XkvzysI5733/WTOk53wHEoGBU0T3uQBt6G 8m3rUcGm3K7k3OCcj4w/7gPXVXJCGkusme/rj7ezkOUOl8PKZeLrouTUv6xqDGn8 5LQcEHZyqqz+8VhbaU6+19J109pUDb4xMlsJf6m+WWiHx+IrJLFYm6aYwOGA1fAY ajC0UhiWBbyvE8q9vidyx79gcS8jND7/+n+9SnHWjAL9hrtIIpCBKdtSJgBBYlcT WDqu44uFKRTTVveM3dwP64rxkbN3pXMp/Gi36TkuqYkF22IyoVvOor2ZjaHqM6F3 RUWRMza0zREPv3DfQfMFEnYVbzgc41k= -----END CERTIFICATE-----Generated at Mon Jun 30 10:16:13 2025 by rpki-client