$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa File: 45005f29-389f-31e2-80b8-8e673e32200b.roa (raw, json) Hash identifier: o77Ka6lFKi9R5s/T6gFE4rGn21QvoNOcpw1Nbv4Q3Zs= Subject key identifier: 13:6E:8A:AA:D0:CF:B0:50:B9:E7:A7:B4:66:4D:64:60:83:FB:E2:44 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848E0065D7B33DD6343AD18D7A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 204670 IP address blocks: 128.121.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5d:7b:33:dd:63:43:ad:18:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=3f89f091-5b1c-4f58-9025-a94bad6902a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:cd:2d:bc:34:ad:a7:d1:fd:f0:5d:80:8a: 33:9f:14:d3:2d:69:ba:b1:57:31:bf:9b:28:6c:ad: 59:31:be:26:8a:b5:83:a7:1f:ed:c9:c3:aa:cc:fe: 4d:45:fc:b6:1b:a6:19:46:8e:55:5e:f1:8e:8e:38: 29:89:ba:79:45:19:74:d8:30:f7:d5:e5:5a:9f:77: df:45:14:47:3d:e3:83:b1:54:d3:23:f6:f1:3d:2e: d6:d1:15:c6:b9:aa:ff:54:29:c5:51:c5:c3:12:d9: cb:e0:17:d3:b3:66:fb:d9:40:88:05:b4:65:44:19: 6e:41:d5:25:a4:35:2a:69:e4:d5:73:a0:f2:e7:c1: 94:ad:2a:84:b6:46:5f:48:36:87:1a:d6:de:ec:d4: a0:01:fe:b3:47:d9:73:a3:2e:0a:09:31:7c:c6:89: 73:5d:2f:9f:cf:0b:d4:63:48:d0:60:d7:21:ed:c8: f3:bf:97:c6:75:e8:76:b3:49:42:e1:bc:a3:d7:02: 01:f0:71:fd:3e:a6:fd:61:9d:50:2c:1b:ba:09:1c: 04:e6:a5:8e:bb:00:ae:2b:40:c7:62:ce:27:45:22: 69:4c:16:c9:9a:51:19:e5:33:d6:cd:af:53:72:24: 8f:97:78:0f:c5:0c:56:f4:90:95:a1:5a:ea:e5:4b: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:8A:AA:D0:CF:B0:50:B9:E7:A7:B4:66:4D:64:60:83:FB:E2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:41:cd:ee:8d:58:f4:8b:13:3b:5b:ae:06:53:54:23:05:a4: cd:ce:f7:cf:c0:57:ed:56:89:6a:69:e6:33:1e:21:ec:29:c3: 1b:ed:c4:d7:af:3a:38:7c:8a:1a:70:30:f0:ef:4b:f3:aa:12: ec:7f:5f:74:54:60:19:9d:58:8b:cf:ec:13:73:b4:e5:12:6d: 74:0f:80:0f:43:0b:a9:6f:65:d1:aa:1c:bf:57:09:21:48:86: 21:76:6e:39:97:a5:99:64:2b:4f:be:d8:5b:fd:3a:b7:b9:fc: e6:c4:38:a8:8f:fa:e1:4c:9b:f8:01:bb:e5:66:b7:89:f4:da: 69:5f:f3:86:88:15:0d:fb:a7:c0:b3:ad:38:65:97:d6:90:b7: d3:a1:60:dd:20:02:55:6b:82:e5:e5:2b:85:f2:16:14:12:80: 33:1e:77:c6:48:e2:10:67:ae:a0:22:5a:1c:66:29:0a:77:ef: 69:02:76:69:92:56:f6:07:92:d1:47:14:94:b6:ec:c8:e5:27: ab:29:66:0e:25:00:b8:ea:6b:c0:95:98:c9:ad:22:5b:be:bb: 14:8b:97:78:7a:59:5a:35:f2:9a:3f:3f:0d:44:9d:d2:e0:32: fa:d7:2a:da:ab:39:7e:aa:29:65:93:a5:bc:cb:f9:13:7d:e5: d3:8f:f4:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl17M91jQ60Y16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk M2Y4OWYwOTEtNWIxYy00ZjU4LTkwMjUtYTk0YmFkNjkwMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFrNLbw0rafR/fBdgIoznxTTLWm6sVcxv5so bK1ZMb4mirWDpx/tycOqzP5NRfy2G6YZRo5VXvGOjjgpibp5RRl02DD31eVan3ff RRRHPeODsVTTI/bxPS7W0RXGuar/VCnFUcXDEtnL4BfTs2b72UCIBbRlRBluQdUl pDUqaeTVc6Dy58GUrSqEtkZfSDaHGtbe7NSgAf6zR9lzoy4KCTF8xolzXS+fzwvU Y0jQYNch7cjzv5fGdeh2s0lC4byj1wIB8HH9Pqb9YZ1QLBu6CRwE5qWOuwCuK0DH Ys4nRSJpTBbJmlEZ5TPWza9TciSPl3gPxQxW9JCVoVrq5UsflQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNuiqrQz7BQueentGZNZGCD++JEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDUwMDVmMjktMzg5Zi0z MWUyLTgwYjgtOGU2NzNlMzIyMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNBze6NWPSLEztbrgZTVCMFpM3O98/AV+1WiWpp5jMeIewpwxvtxNev Ojh8ihpwMPDvS/OqEux/X3RUYBmdWIvP7BNztOUSbXQPgA9DC6lvZdGqHL9XCSFI hiF2bjmXpZlkK0++2Fv9Ore5/ObEOKiP+uFMm/gBu+Vmt4n02mlf84aIFQ37p8Cz rThll9aQt9OhYN0gAlVrguXlK4XyFhQSgDMed8ZI4hBnrqAiWhxmKQp372kCdmmS VvYHktFHFJS27MjlJ6spZg4lALjqa8CVmMmtIlu+uxSLl3h6WVo18po/Pw1EndLg MvrXKtqrOX6qKWWTpbzL+RN95dOP9K4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:30 2025 by rpki-client