$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: UuC1tyClplt3O3Ao4sDt0J0gyxXL+/4NE87ZLfEhL0I= Subject key identifier: 07:C8:9C:48:77:BB:53:34:AE:1F:6D:DD:08:4F:63:97:94:36:C5:0D Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A23F4EA95A87C22FD3E80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:23:f4:ea:95:a8:7c:22:fd:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=29ea67e2-21e8-46d2-834b-f7657e6db149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:71:bf:a8:62:98:be:0c:85:5c:36:e0:63: 6d:ec:5b:ec:12:18:cd:71:18:1f:11:77:82:22:5a: ed:4b:7e:5a:67:cd:98:cc:5f:05:ee:96:44:5c:61: 5e:e4:ce:94:fc:ce:7c:c8:d6:8e:d7:35:07:c8:0c: f3:10:8c:ac:98:ed:e2:c6:43:c6:59:f0:ec:2d:18: f3:ea:bf:e6:25:cf:b2:df:bf:82:11:81:cd:f2:65: a3:79:2a:49:53:fd:8f:bb:50:5e:b5:1c:69:20:a8: 96:3c:34:fa:30:49:96:b5:05:9b:af:3e:20:56:bc: 20:28:7d:da:70:44:d4:ec:a6:07:e7:0f:07:6d:1e: 6a:6d:fe:04:f6:c0:14:50:6f:a1:64:04:0b:ae:9e: 4c:c0:33:64:02:8c:7e:1b:e8:d4:e9:88:ba:28:4e: 72:bb:37:7e:55:10:d6:68:43:a8:3d:b8:9e:40:12: 47:0c:ab:23:aa:92:a3:7e:7b:08:77:49:29:bb:40: 58:14:18:70:e5:c5:a5:29:21:5a:5f:b5:4d:6c:92: 3d:0d:73:54:1f:ca:46:8f:09:c8:b7:81:ad:0b:5d: bc:24:53:76:b5:a7:b1:ad:b9:cf:d4:01:2a:00:bc: 28:76:38:f3:bd:6f:0c:55:e6:61:98:01:cd:46:e4: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:9C:48:77:BB:53:34:AE:1F:6D:DD:08:4F:63:97:94:36:C5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c1:5d:8b:a0:e6:f3:9a:5e:9a:37:2d:e6:54:8a:73:53:35: 50:47:3e:a0:43:76:07:a3:34:86:e5:84:9f:6d:f9:0b:1f:2f: db:94:44:f5:47:c4:ca:e6:f7:41:98:d9:76:3a:7b:7b:90:45: 6f:93:87:58:54:14:cd:1f:d6:6c:a6:be:84:b9:47:81:ff:3c: d6:1a:b0:a6:30:44:72:6d:7f:9e:df:f3:b2:5a:6b:9d:dc:e0: 2c:a4:85:c3:02:e8:d2:2a:92:6d:98:39:e5:b3:27:96:7d:5e: d9:00:c3:ce:f8:7e:94:4e:32:22:9b:b9:c2:38:0e:ce:d9:3e: 71:36:e3:c2:14:ca:bb:e2:85:f1:57:fe:ca:e1:f4:87:78:d7: 9b:6f:68:91:38:d0:3e:00:8a:88:25:36:11:14:3f:28:92:a3: fc:e3:62:e8:8c:39:25:1a:60:1f:e6:4a:86:e1:41:8a:c7:f7: 1b:77:13:bb:13:58:a9:71:21:f6:e2:e3:ca:8e:6d:24:cc:85: 04:9e:0b:6f:31:f6:a8:c6:3c:df:e9:bb:d3:d6:fa:5d:66:33: 82:af:8c:f1:06:62:d6:83:e5:36:be:3e:0c:b5:7d:39:40:3d: b5:ca:71:d4:51:01:74:af:19:3d:57:2d:f8:fd:ab:29:b4:d1: df:68:b0:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiP06pWofCL9PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MjllYTY3ZTItMjFlOC00NmQyLTgzNGItZjc2NTdlNmRiMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQtxv6himL4MhVw24GNt7FvsEhjNcRgfEXeC IlrtS35aZ82YzF8F7pZEXGFe5M6U/M58yNaO1zUHyAzzEIysmO3ixkPGWfDsLRjz 6r/mJc+y37+CEYHN8mWjeSpJU/2Pu1BetRxpIKiWPDT6MEmWtQWbrz4gVrwgKH3a cETU7KYH5w8HbR5qbf4E9sAUUG+hZAQLrp5MwDNkAox+G+jU6Yi6KE5yuzd+VRDW aEOoPbieQBJHDKsjqpKjfnsId0kpu0BYFBhw5cWlKSFaX7VNbJI9DXNUH8pGjwnI t4GtC128JFN2taexrbnP1AEqALwodjjzvW8MVeZhmAHNRuT5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfInEh3u1M0rh9t3QhPY5eUNsUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbBXYug5vOaXpo3LeZUinNTNVBHPqBDdgejNIblhJ9t+QsfL9uURPVH xMrm90GY2XY6e3uQRW+Th1hUFM0f1mymvoS5R4H/PNYasKYwRHJtf57f87Jaa53c 4CykhcMC6NIqkm2YOeWzJ5Z9XtkAw874fpROMiKbucI4Ds7ZPnE248IUyrvihfFX /srh9Id415tvaJE40D4AioglNhEUPyiSo/zjYuiMOSUaYB/mSobhQYrH9xt3E7sT WKlxIfbi48qObSTMhQSeC28x9qjGPN/pu9PW+l1mM4KvjPEGYtaD5Ta+Pgy1fTlA PbXKcdRRAXSvGT1XLfj9qym00d9osLQ= -----END CERTIFICATE-----Generated at Mon May 12 05:22:53 2025 by rpki-client