$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0020e303-932f-3d61-9744-eeec211c8c44.roa File: 0020e303-932f-3d61-9744-eeec211c8c44.roa (raw, json) Hash identifier: wK1fvbOTcGBhJhzr3JVuPmR/yfGxTO5I7Y1qSkLzVP8= Subject key identifier: 79:52:79:46:DA:5A:E1:FF:B0:2E:9A:66:AD:6B:11:05:27:68:2E:5D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858497B2FE5CC623770D5DADE1080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0020e303-932f-3d61-9744-eeec211c8c44.roa Signing time: Thu 10 Apr 2025 15:54:46 +0000 ROA not before: Thu 10 Apr 2025 15:54:46 +0000 ROA not after: Wed 09 Jul 2025 15:54:46 +0000 asID: 400427 IP address blocks: 128.242.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7b:2f:e5:cc:62:37:70:d5:da:de:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 10 15:54:46 2025 GMT Not After : Jul 9 15:54:46 2025 GMT Subject: CN=05fd18b3-e4a9-4f33-90fb-681e5665f353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:0d:b0:86:cd:41:19:13:5c:38:1c:cf:5c: 18:22:3c:78:f2:7c:99:6d:78:29:95:0f:5d:e6:19: 3a:31:2a:d3:06:7a:97:b5:d4:1d:9b:40:cb:1b:38: 94:c6:e0:cb:ef:8c:a4:e6:d4:05:18:d5:de:b7:e0: f7:0e:80:4e:f0:64:6d:5f:1c:61:6b:27:89:a3:6e: 78:c9:81:84:ee:4f:cf:cf:2e:da:c6:46:b0:8a:5a: 9c:f3:c1:94:65:e3:44:a3:83:34:7a:bc:e7:91:71: 48:62:33:dd:67:36:32:e1:5a:e5:48:bc:77:e3:74: 7d:45:a8:ba:c5:71:ba:5d:01:0d:9b:d4:db:49:14: f3:1d:d5:8d:d8:b9:67:59:48:a8:5d:c0:17:6c:c4: 28:69:54:d7:bd:16:14:88:fd:e6:c6:85:11:71:1e: f5:67:1a:d9:53:a9:06:8f:17:68:5b:83:b9:f9:e2: 61:3a:b8:e4:c9:bb:c7:92:44:24:d7:32:2d:94:51: f1:19:0b:83:7e:d1:00:cc:f0:e5:1e:6d:55:80:54: 4a:5f:34:90:e4:7a:b7:97:44:d0:8e:c3:f9:70:da: 2e:e3:43:16:82:a5:3b:a2:a7:7c:0d:38:60:28:09: 53:e6:10:a3:02:cb:03:fa:ca:4f:db:96:19:ff:21: 3f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:52:79:46:DA:5A:E1:FF:B0:2E:9A:66:AD:6B:11:05:27:68:2E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0020e303-932f-3d61-9744-eeec211c8c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7b:e2:96:8c:96:7e:fe:32:51:49:4c:52:c1:f3:a1:24:2d: fd:62:be:f1:3c:ec:64:44:83:a1:7e:28:c1:09:13:6b:f2:63: ab:f0:b1:d3:53:de:37:1c:32:ec:30:e2:8f:d4:8b:53:08:7f: 68:e3:ae:ff:d8:fd:6a:ce:e1:92:c5:d9:1d:41:28:81:b6:90: 3e:b7:49:08:41:34:dd:0a:e0:bc:d0:37:e0:94:a3:2f:ed:63: 54:d4:28:6a:30:f4:e6:80:d7:d6:63:93:05:33:5f:36:aa:47: 53:b2:3a:ff:4a:fd:ed:61:93:2c:a7:02:81:36:57:0d:42:99: d1:e3:97:3a:41:0b:54:a3:b1:bd:9c:09:20:87:f7:8f:3e:67: f5:17:c7:ac:1c:5a:cd:f4:69:fe:01:a7:47:ef:73:48:b9:1f: a6:f8:0f:84:fb:16:5c:de:0b:c9:66:74:64:63:29:db:6d:48: 02:0d:40:00:e0:46:d4:6f:fc:3a:52:35:67:3f:f3:55:d9:29: b7:b4:0f:3c:12:59:05:37:97:38:7b:c0:fe:14:5f:5b:a3:b5: 08:c7:69:d1:d9:83:db:b1:a7:83:dc:69:a8:b5:07:c6:bb:db: d6:24:dd:52:31:04:6d:85:ae:9c:72:1f:82:40:e9:47:a9:2b: 18:5e:4f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl7L+XMYjdw1dreEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQxMDE1NTQ0NloXDTI1MDcwOTE1NTQ0NlowLzEtMCsGA1UEAxMk MDVmZDE4YjMtZTRhOS00ZjMzLTkwZmItNjgxZTU2NjVmMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WMNsIbNQRkTXDgcz1wYIjx48nyZbXgplQ9d 5hk6MSrTBnqXtdQdm0DLGziUxuDL74yk5tQFGNXet+D3DoBO8GRtXxxhayeJo254 yYGE7k/Pzy7axkawilqc88GUZeNEo4M0erznkXFIYjPdZzYy4VrlSLx343R9Rai6 xXG6XQENm9TbSRTzHdWN2LlnWUioXcAXbMQoaVTXvRYUiP3mxoURcR71ZxrZU6kG jxdoW4O5+eJhOrjkybvHkkQk1zItlFHxGQuDftEAzPDlHm1VgFRKXzSQ5Hq3l0TQ jsP5cNou40MWgqU7oqd8DThgKAlT5hCjAssD+spP25YZ/yE/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlSeUbaWuH/sC6aZq1rEQUnaC5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDAyMGUzMDMtOTMyZi0z ZDYxLTk3NDQtZWVlYzIxMWM4YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgPIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR74paMln7+MlFJTFLB86EkLf1ivvE87GREg6F+KMEJE2vyY6vwsdNT 3jccMuww4o/Ui1MIf2jjrv/Y/WrO4ZLF2R1BKIG2kD63SQhBNN0K4LzQN+CUoy/t Y1TUKGow9OaA19ZjkwUzXzaqR1OyOv9K/e1hkyynAoE2Vw1CmdHjlzpBC1Sjsb2c CSCH948+Z/UXx6wcWs30af4Bp0fvc0i5H6b4D4T7FlzeC8lmdGRjKdttSAINQADg RtRv/DpSNWc/81XZKbe0DzwSWQU3lzh7wP4UX1ujtQjHadHZg9uxp4Pcaai1B8a7 29Yk3VIxBG2FrpxyH4JA6UepKxheT1A= -----END CERTIFICATE-----Generated at Sun Jun 15 17:15:55 2025 by rpki-client