$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa File: 1e413a1a-5431-33a4-918b-b141173b37d2.roa (raw, json) Hash identifier: 3sQVsaupIRRDxdW3vNBZ0qC7BpTJO2B/Ou5QDOS9lrI= Subject key identifier: AF:52:7A:3D:A9:C2:BF:4F:E9:52:C1:54:2A:A7:98:96:83:5A:52:3C Certificate issuer: /CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Certificate serial: 010D0C9F43285848EC969100BEBBF0189F31CFB0 Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 2552 IP address blocks: 128.252.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:91:00:be:bb:f0:18:9f:31:cf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=88601a1e-2faa-4a6d-9e20-c42fdf9ee58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:76:35:65:78:87:1a:be:71:7d:67:be:f6: a8:cf:84:a3:fc:ba:37:5b:7f:eb:8a:7f:07:35:7e: 23:9e:f8:40:6b:40:ad:f3:90:ad:15:da:ef:66:4d: 57:92:c8:b2:2e:f6:31:f6:d6:f2:61:95:71:4a:f7: 8a:99:f9:3f:eb:61:eb:b6:c6:f5:5f:10:9e:2c:2b: 8b:37:1c:c5:95:33:8b:98:5c:f4:00:10:34:c8:50: 4b:54:e5:86:87:19:f2:87:c4:47:e2:6d:9a:c8:94: 26:dd:29:a1:9d:73:dd:93:71:62:e3:c2:71:38:00: e1:d1:41:66:1c:8c:7b:37:9a:6d:6e:31:79:98:a9: e7:26:c2:01:58:eb:e9:82:2b:ed:39:3f:c9:68:b8: 26:02:53:ce:99:db:07:ff:6d:e1:4a:fa:36:5e:7f: 8e:b6:89:5e:5c:c9:7c:9a:a6:fc:b4:7e:c3:81:af: 21:2c:53:2a:7e:79:ce:09:a4:10:5a:c1:c4:30:d2: 5a:df:4c:0b:26:8a:a3:8e:79:21:a7:11:9c:67:07: 95:18:34:f1:c8:0b:91:ee:b4:47:d0:73:2d:2c:fd: 29:21:4b:4d:26:64:9c:52:6d:84:4a:8c:42:92:59: 4f:46:96:40:f4:16:83:57:da:93:24:39:ef:6f:0a: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:7A:3D:A9:C2:BF:4F:E9:52:C1:54:2A:A7:98:96:83:5A:52:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl X509v3 Authority Key Identifier: keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer sbgp-ipAddrBlock: critical IPv4: 128.252.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bd:0d:4b:69:af:4b:df:f2:83:91:16:12:cb:e3:c2:a8:9a: 2d:9e:4b:9c:47:00:3c:f1:62:66:f4:f9:45:de:e0:de:d9:b7: f1:bb:f1:03:8f:49:e4:eb:f8:2f:7a:89:22:4d:62:90:84:04: 80:5d:8e:01:47:e1:ca:d8:3e:1e:47:f1:d9:18:83:fa:c6:d7: 2c:6b:ab:21:40:fa:52:0a:c2:0b:fe:a8:ef:56:79:02:ca:9a: 91:dd:d9:0c:81:24:36:9d:a5:e1:7e:ee:65:7c:30:07:a3:fd: 6d:38:85:f8:8c:87:be:71:ec:02:7c:58:f2:d4:dd:49:5e:2f: c7:63:63:05:20:0b:14:35:65:eb:28:21:05:80:cf:7e:1d:5c: b2:d7:ca:c0:5c:5e:97:97:64:b0:92:a3:f6:fc:60:d4:10:2a: 74:43:b3:d9:30:31:6e:5f:d5:68:4a:79:a7:ca:21:a6:62:ab: a7:30:fd:87:cb:01:0e:c7:c2:a1:aa:4f:34:62:55:f9:75:75: 6d:76:57:41:05:a1:70:2d:48:66:9b:ff:6f:c9:95:a3:42:9c: 13:1b:bc:2f:2f:b0:cd:2b:3b:f6:2d:5d:ce:ae:95:02:30:20: 9d:7f:18:c3:6f:74:9e:da:2b:50:78:b3:e9:d0:7b:61:60:bc: 56:bc:5a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpEAvrvwGJ8xz7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2 YTY0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODg2MDFhMWUtMmZhYS00YTZkLTllMjAtYzQyZmRmOWVlNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM52NWV4hxq+cX1nvvaoz4Sj/Lo3W3/rin8H NX4jnvhAa0Ct85CtFdrvZk1XksiyLvYx9tbyYZVxSveKmfk/62Hrtsb1XxCeLCuL NxzFlTOLmFz0ABA0yFBLVOWGhxnyh8RH4m2ayJQm3SmhnXPdk3Fi48JxOADh0UFm HIx7N5ptbjF5mKnnJsIBWOvpgivtOT/JaLgmAlPOmdsH/23hSvo2Xn+OtoleXMl8 mqb8tH7Dga8hLFMqfnnOCaQQWsHEMNJa30wLJoqjjnkhpxGcZweVGDTxyAuR7rRH 0HMtLP0pIUtNJmScUm2ESoxCkllPRpZA9BaDV9qTJDnvbwrpCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Sej2pwr9P6VLBVCqnmJaDWlI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJh MGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvMWU0MTNhMWEtNTQzMS0z M2E0LTkxOGItYjE0MTE3M2IzN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZiYTBmZDItYjUyNi00OTg1LTkz MTQtYmY2NDg1MDU2YTY0L2E2YmEwZmQyLWI1MjYtNDk4NS05MzE0LWJmNjQ4NTA1 NmE2NC5jcmwwHwYDVR0jBBgwFoAUzCOVeI0Cs7E5PNhJCdAxa08cphIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0 ODUwNTZhNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS9DUtpr0vf8oORFhLL48Komi2eS5xHADzxYmb0+UXe4N7Zt/G78QOP SeTr+C96iSJNYpCEBIBdjgFH4crYPh5H8dkYg/rG1yxrqyFA+lIKwgv+qO9WeQLK mpHd2QyBJDadpeF+7mV8MAej/W04hfiMh75x7AJ8WPLU3UleL8djYwUgCxQ1Zeso IQWAz34dXLLXysBcXpeXZLCSo/b8YNQQKnRDs9kwMW5f1WhKeafKIaZiq6cw/YfL AQ7HwqGqTzRiVfl1dW12V0EFoXAtSGab/2/JlaNCnBMbvC8vsM0rO/YtXc6ulQIw IJ1/GMNvdJ7aK1B4s+nQe2FgvFa8Wl8= -----END CERTIFICATE-----Generated at Tue Apr 29 07:55:10 2025 by rpki-client