$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa File: 5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa (raw, json) Hash identifier: NWwTmFcCHFvMzqQy+3cR33o7Skgkyioz3/WxeZEU57k= Subject key identifier: 02:6A:F3:CF:BC:03:EB:71:DD:9D:73:72:71:03:85:76:40:72:41:BD Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858499AF479789CD8100F15B1AFC0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3561 IP address blocks: 208.128.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:79:78:9c:d8:10:0f:15:b1:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5b33a5d8-c1d7-4b2b-8a4d-1952678a198a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:e3:f2:e5:bf:ed:2f:23:f8:99:ae:4b:8c: 4e:bb:6c:bf:22:61:e6:78:eb:10:8b:98:fb:c7:64: e6:b1:e7:d3:c2:5d:2a:21:cd:b9:f3:1c:36:e3:2e: 2d:8f:17:c7:71:19:01:4b:e2:1d:99:5c:ba:24:53: f2:16:27:d4:9d:22:1d:10:fa:64:f5:61:e5:ee:0e: 3b:35:20:2b:23:1e:77:08:fb:8a:ec:61:1d:da:8c: 9b:53:b8:7a:fe:66:9e:99:25:cc:06:5c:af:d3:29: 96:11:38:be:8e:1f:6b:1a:5a:f7:ed:fe:86:fe:f7: d7:d9:17:db:b5:6f:60:89:62:ac:83:e4:af:2b:f6: 41:f6:ea:c1:df:5b:2d:88:79:4a:68:45:cb:45:84: eb:72:24:66:88:47:d5:4b:50:a7:ff:4f:43:aa:aa: b2:38:ba:96:3d:b6:c7:67:dd:b6:a1:12:07:db:81: 97:ce:86:99:40:6b:3a:ae:ff:04:d7:c4:6d:dc:90: e3:fa:5c:20:a5:c3:c2:5f:14:e3:33:c6:58:c4:b3: 59:31:38:c7:69:56:aa:c8:d1:41:03:22:fb:aa:a1: ed:a4:a2:92:b9:33:45:f4:18:cd:22:72:1b:fe:ec: a4:5b:a4:eb:33:da:48:f8:f1:2e:7a:38:7c:51:44: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6A:F3:CF:BC:03:EB:71:DD:9D:73:72:71:03:85:76:40:72:41:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.128.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:16:5c:6d:46:4f:c1:02:42:bf:1c:76:22:5e:72:d3:dc:9b: b1:79:41:2e:fe:2f:31:97:c9:3f:53:f1:4a:c6:f4:5d:ec:68: ca:7e:2f:82:a9:59:78:46:b0:88:5b:a4:81:ca:03:89:65:9f: 40:6b:c4:e6:ef:ad:97:ed:84:3e:98:bb:83:db:e2:70:79:fd: 26:5e:20:1b:a1:a6:06:e3:1c:be:6c:08:fb:01:a1:c1:47:52: 01:9c:ff:42:ac:9a:73:a2:2f:b8:f5:44:15:e6:17:40:c7:5b: ec:d6:a9:08:9c:f3:f5:cb:8c:97:8a:6f:1f:10:ab:4e:9b:90: 25:ce:04:af:05:78:62:42:c6:21:91:87:9a:0c:36:38:2e:f7: c0:2f:83:26:99:e0:35:e3:9c:3a:26:7a:57:f2:e2:b1:f5:a9: 35:ae:2f:67:4e:45:b2:a9:e9:0f:90:db:fd:b8:56:6a:fe:cf: 4f:84:e7:86:ea:77:53:71:15:7c:67:33:6b:64:9c:dc:d7:af: e3:bf:e1:5c:43:a9:ca:20:f3:51:18:96:e0:fa:8e:71:b1:75: d7:51:b2:96:4f:d2:aa:1d:c7:1f:25:59:f6:c7:f2:c3:d5:68: 23:ea:79:26:0c:d4:75:82:75:9a:c4:a3:93:6f:25:da:d9:f0: af:a4:29:c3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9Hl4nNgQDxWxr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWIzM2E1ZDgtYzFkNy00YjJiLThhNGQtMTk1MjY3OGExOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uLj8uW/7S8j+JmuS4xOu2y/ImHmeOsQi5j7 x2TmsefTwl0qIc258xw24y4tjxfHcRkBS+IdmVy6JFPyFifUnSIdEPpk9WHl7g47 NSArIx53CPuK7GEd2oybU7h6/maemSXMBlyv0ymWETi+jh9rGlr37f6G/vfX2Rfb tW9giWKsg+SvK/ZB9urB31stiHlKaEXLRYTrciRmiEfVS1Cn/09DqqqyOLqWPbbH Z922oRIH24GXzoaZQGs6rv8E18Rt3JDj+lwgpcPCXxTjM8ZYxLNZMTjHaVaqyNFB AyL7qqHtpKKSuTNF9BjNInIb/uykW6TrM9pI+PEuejh8UUSrSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAJq88+8A+tx3Z1zcnEDhXZAckG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNWNjYWU4ZTUtOWZlOS0z Njk4LThlN2YtMzk4ZDRjOWMyYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0IAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsRZcbUZPwQJCvxx2Il5y09ybsXlBLv4vMZfJP1PxSsb0Xexoyn4vgqlZ eEawiFukgcoDiWWfQGvE5u+tl+2EPpi7g9vicHn9Jl4gG6GmBuMcvmwI+wGhwUdS AZz/Qqyac6IvuPVEFeYXQMdb7NapCJzz9cuMl4pvHxCrTpuQJc4ErwV4YkLGIZGH mgw2OC73wC+DJpngNeOcOiZ6V/LisfWpNa4vZ05FsqnpD5Db/bhWav7PT4Tnhup3 U3EVfGcza2Sc3Nev47/hXEOpyiDzURiW4PqOcbF111Gylk/Sqh3HHyVZ9sfyw9Vo I+p5JgzUdYJ1msSjk28l2tnwr6Qpww== -----END CERTIFICATE-----Generated at Sun Apr 27 04:14:42 2025 by rpki-client