$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa File: ae3340b6-cbcc-303e-9541-8e0411b269e1.roa (raw, json) Hash identifier: Mn3VRXFqJM5Y/DWo0WYUTZGMC9yMi0fGbu1YVeuxkPY= Subject key identifier: 72:B1:4E:3E:BC:92:30:2E:81:C0:35:BC:02:35:16:F8:E5:9B:2E:F3 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584A23C0026F569ECDB1A8B23480 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 13807 IP address blocks: 24.51.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:02:6f:56:9e:cd:b1:a8:b2:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=d68ce13c-5c7e-4f63-bcba-7e0d4e709d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:ab:ba:89:a7:5d:92:aa:f3:85:de:5e:0f: b1:3f:c4:f0:5f:db:49:d9:7d:2f:fb:7d:6e:57:69: f9:53:2b:24:ff:d6:ad:f6:c7:50:89:50:6d:aa:fe: cf:3e:b6:33:0e:49:79:26:76:87:5e:db:d7:d6:91: d8:a5:33:66:75:df:71:bd:03:a2:f9:52:22:23:4f: 6a:5a:a9:45:c0:80:78:7e:ef:26:e6:34:b8:b7:d7: 50:a3:15:12:48:97:07:9c:3e:61:7b:44:d8:8e:9e: 17:05:a9:54:23:83:e7:a4:4f:02:20:ee:f0:9c:bb: de:e5:ce:c5:4d:60:45:b8:7b:e8:70:22:60:52:52: 38:a5:c9:af:79:b7:29:2a:42:bc:eb:56:4b:9e:6d: b5:14:0f:f3:26:74:9b:05:6c:5d:5d:32:1f:2f:88: 1a:2e:de:59:fb:4e:fc:74:95:95:00:2a:bd:65:50: 06:a4:6c:2c:31:7e:5f:24:84:1e:59:98:7f:69:00: be:19:35:29:12:c2:71:9b:30:22:64:5a:66:93:95: 11:b8:40:4f:c6:b8:5b:6e:30:36:aa:de:67:71:73: 53:c7:5d:01:39:43:31:84:c6:ae:60:96:2c:5d:ad: 1f:0f:6b:a7:e3:98:0b:c8:e4:8a:74:9b:50:93:82: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:4E:3E:BC:92:30:2E:81:C0:35:BC:02:35:16:F8:E5:9B:2E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.51.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:48:03:3e:ea:0d:15:2b:b3:55:3f:b6:68:e6:2b:1f:43:cd: 04:e7:40:04:86:e4:c2:de:b8:e3:bb:e3:42:a6:92:42:49:a8: 71:08:20:a5:2e:4e:0d:ba:a9:c4:a2:92:6e:24:d2:c2:9f:2e: 3a:37:bd:7c:2c:97:36:b7:4c:9e:ea:43:60:18:17:34:d5:83: b0:8a:a6:f0:44:ff:b6:ed:b7:e5:bb:fe:09:ca:cb:0a:2a:a1: e5:da:d6:ad:df:7b:7c:f3:b4:82:40:91:6c:55:36:07:f9:ad: 77:bd:88:a1:f3:2d:12:7f:5d:da:53:39:bb:fd:89:fe:7f:2b: cb:88:7e:a4:c8:f2:cb:dc:0e:3e:f1:a8:8c:5c:f4:36:85:89: e2:cb:32:fa:d0:ae:7b:47:dd:e1:38:fc:1b:7a:cf:da:3a:a3: 70:2d:99:b0:27:18:a1:29:60:9c:1d:19:04:4e:6e:20:71:bb: c9:e3:5a:25:bf:4f:fd:fd:d5:4b:ec:ba:5f:a0:b9:44:e8:de: 6d:3c:73:0e:d8:97:f3:7e:eb:4c:b2:55:4e:5f:ad:86:84:63: 3a:9c:74:a0:61:40:63:c3:93:c3:e2:3b:1c:e4:74:2e:c2:3f: fe:32:1d:72:3c:5b:ad:32:37:ab:ee:e5:66:c7:6e:b3:7e:5b: e7:2f:2a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAJvVp7NsaiyNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZDY4Y2UxM2MtNWM3ZS00ZjYzLWJjYmEtN2UwZDRlNzA5ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+ruomnXZKq84XeXg+xP8TwX9tJ2X0v+31u V2n5Uysk/9at9sdQiVBtqv7PPrYzDkl5JnaHXtvX1pHYpTNmdd9xvQOi+VIiI09q WqlFwIB4fu8m5jS4t9dQoxUSSJcHnD5he0TYjp4XBalUI4PnpE8CIO7wnLve5c7F TWBFuHvocCJgUlI4pcmvebcpKkK861ZLnm21FA/zJnSbBWxdXTIfL4gaLt5Z+078 dJWVACq9ZVAGpGwsMX5fJIQeWZh/aQC+GTUpEsJxmzAiZFpmk5URuEBPxrhbbjA2 qt5ncXNTx10BOUMxhMauYJYsXa0fD2un45gLyOSKdJtQk4LJEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKxTj68kjAugcA1vAI1Fvjlmy7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYWUzMzQwYjYtY2JjYy0z MDNlLTk1NDEtOGUwNDExYjI2OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVIAz7qDRUrs1U/tmjmKx9DzQTnQASG5MLeuOO740KmkkJJqHEIIKUu Tg26qcSikm4k0sKfLjo3vXwslza3TJ7qQ2AYFzTVg7CKpvBE/7btt+W7/gnKywoq oeXa1q3fe3zztIJAkWxVNgf5rXe9iKHzLRJ/XdpTObv9if5/K8uIfqTI8svcDj7x qIxc9DaFieLLMvrQrntH3eE4/Bt6z9o6o3AtmbAnGKEpYJwdGQRObiBxu8njWiW/ T/391Uvsul+guUTo3m08cw7Yl/N+60yyVU5frYaEYzqcdKBhQGPDk8PiOxzkdC7C P/4yHXI8W60yN6vu5WbHbrN+W+cvKtg= -----END CERTIFICATE-----Generated at Tue Jul 1 12:24:57 2025 by rpki-client