$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/59770758-9a67-3995-b7e8-21275c9e48f0.roa File: 59770758-9a67-3995-b7e8-21275c9e48f0.roa (raw, json) Hash identifier: CuonG213qi+M1B3vqHVONZGFYoK1kiAeD8aDfkaF4hc= Subject key identifier: DF:32:98:49:3C:85:9E:83:C2:19:F8:D1:FC:4F:95:8A:FA:EA:AD:96 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849BF3F63DEA5695E04F5594B80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/59770758-9a67-3995-b7e8-21275c9e48f0.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 204670 IP address blocks: 128.121.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:63:de:a5:69:5e:04:f5:59:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=697c466b-c6f6-4b2c-b554-fe03b2a8e905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:e5:d0:57:0e:fc:4d:bb:31:3c:f0:8e:7d: 97:94:39:58:13:18:15:4f:5b:7c:47:cb:79:45:9d: fe:bf:52:c0:47:24:3f:75:38:1a:91:d8:b2:44:54: 46:56:68:41:ef:0b:e8:0d:5c:10:30:90:02:da:d5: 91:5b:20:6a:7d:09:2a:e9:4e:0f:be:11:9e:34:09: 03:03:e2:16:f7:62:29:e3:18:d9:90:ef:97:e0:f8: 73:8d:43:56:b1:6e:31:9f:9a:1c:0d:47:07:86:0d: 77:72:45:ef:35:7b:89:53:36:44:43:f7:b2:12:7c: 38:96:73:df:2c:7b:d0:6b:c7:0e:e0:ce:a9:d2:15: c0:86:7b:ad:9e:8b:47:77:16:9f:65:56:f7:20:c1: 83:66:2f:2a:80:87:bf:22:2c:30:39:60:32:95:6f: 9f:22:15:04:ce:14:08:6b:f7:79:ad:8a:d8:8c:4b: e6:c9:3d:1c:72:57:d1:b5:e7:5c:65:cd:8f:fe:81: 6c:8f:c6:41:d1:26:71:3f:45:73:82:35:67:6d:6d: d2:5e:0b:af:63:30:4a:57:d1:0a:96:68:a7:05:df: 0d:c2:a1:22:ad:56:10:b6:f5:0c:3f:1b:49:32:82: 8d:70:37:16:59:99:90:a0:17:fa:ed:d3:16:53:b3: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:32:98:49:3C:85:9E:83:C2:19:F8:D1:FC:4F:95:8A:FA:EA:AD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/59770758-9a67-3995-b7e8-21275c9e48f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:08:45:63:55:03:6c:47:e2:7b:a6:43:ff:f1:38:42:b0:93: 66:64:09:05:30:13:53:85:4a:fb:e4:72:59:93:6c:55:a3:f4: c2:86:af:95:58:27:78:de:99:4e:64:ae:e8:71:11:7a:72:9d: cd:f3:b6:88:90:25:04:a2:20:d6:d7:f4:64:48:95:9e:4b:4c: 30:37:ff:44:bc:ee:a5:a0:97:d9:50:52:89:92:d7:fb:30:7d: 8e:f1:31:dd:0f:af:4a:84:79:25:10:5b:fa:a0:00:e4:2f:1c: 8d:18:0b:4a:5f:c3:25:df:31:b6:24:2e:91:5d:9d:59:9c:13: b5:fb:8c:f1:fe:1e:02:cd:04:46:4d:76:c6:84:d1:c2:29:1f: 88:b5:b1:e5:58:c8:68:68:b0:3f:a8:44:ab:d3:60:ec:a1:bd: 51:d0:cc:ab:98:43:06:69:f0:a0:20:25:ee:ce:d6:95:20:d6: d5:c4:3e:c4:c1:db:27:f0:73:6a:59:b5:27:29:3f:2d:7c:2d: f8:29:8c:d1:a9:c8:00:f0:e5:9a:17:66:0b:ee:f7:14:fb:e9: 1d:f4:35:12:12:36:e8:f5:80:a2:79:15:51:f3:14:75:9c:13: 5f:18:a0:e0:1f:b4:88:2c:43:c2:08:46:8e:fc:a5:70:73:36: f9:a7:4b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2PepWleBPVZS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Njk3YzQ2NmItYzZmNi00YjJjLWI1NTQtZmUwM2IyYThlOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c7l0FcO/E27MTzwjn2XlDlYExgVT1t8R8t5 RZ3+v1LARyQ/dTgakdiyRFRGVmhB7wvoDVwQMJAC2tWRWyBqfQkq6U4PvhGeNAkD A+IW92Ip4xjZkO+X4PhzjUNWsW4xn5ocDUcHhg13ckXvNXuJUzZEQ/eyEnw4lnPf LHvQa8cO4M6p0hXAhnutnotHdxafZVb3IMGDZi8qgIe/IiwwOWAylW+fIhUEzhQI a/d5rYrYjEvmyT0cclfRtedcZc2P/oFsj8ZB0SZxP0VzgjVnbW3SXguvYzBKV9EK lminBd8NwqEirVYQtvUMPxtJMoKNcDcWWZmQoBf67dMWU7Ob1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8ymEk8hZ6Dwhn40fxPlYr66q2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTk3NzA3NTgtOWE2Ny0z OTk1LWI3ZTgtMjEyNzVjOWU0OGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIIRWNVA2xH4numQ//xOEKwk2ZkCQUwE1OFSvvkclmTbFWj9MKGr5VY J3jemU5kruhxEXpync3ztoiQJQSiINbX9GRIlZ5LTDA3/0S87qWgl9lQUomS1/sw fY7xMd0Pr0qEeSUQW/qgAOQvHI0YC0pfwyXfMbYkLpFdnVmcE7X7jPH+HgLNBEZN dsaE0cIpH4i1seVYyGhosD+oRKvTYOyhvVHQzKuYQwZp8KAgJe7O1pUg1tXEPsTB 2yfwc2pZtScpPy18LfgpjNGpyADw5ZoXZgvu9xT76R30NRISNuj1gKJ5FVHzFHWc E18YoOAftIgsQ8IIRo78pXBzNvmnS1Q= -----END CERTIFICATE-----Generated at Sun Jun 15 17:40:24 2025 by rpki-client