$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d62f8bac-399b-3f3d-842c-6366b20ec27b.roa File: d62f8bac-399b-3f3d-842c-6366b20ec27b.roa (raw, json) Hash identifier: DqILZLqv4J5h+PRJtxwE+E25HrPF6SuuSziS8n2Exoc= Subject key identifier: C6:63:5B:4F:CE:B5:DF:71:5C:2D:08:42:D9:37:32:FF:E4:AF:90:AA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848E0065D6A6EED47A41A0AA680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d62f8bac-399b-3f3d-842c-6366b20ec27b.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 19893 IP address blocks: 128.121.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5d:6a:6e:ed:47:a4:1a:0a:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=b29a7bc6-99d1-4520-a3e2-b9a8338d48c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7e:3f:5d:8d:75:6f:8b:ac:a8:78:76:b0:3b: 81:af:e8:2b:3e:04:57:1b:cf:1e:a9:47:f3:7f:ca: 68:78:a5:71:50:94:7f:05:ef:1e:5b:f9:0d:5f:af: 88:a2:6a:9a:6c:97:66:6a:b1:30:5f:29:cd:d4:37: 78:e1:0b:3d:05:99:15:4d:86:3f:a1:b5:c4:1f:5d: 92:81:04:09:46:a1:92:5e:91:50:ab:19:64:8e:8c: 00:ce:5f:10:e7:03:56:62:ab:82:bb:6a:a8:20:68: f7:fa:b5:59:9a:87:e2:66:8c:44:a7:ec:12:8f:80: 80:bc:01:cd:70:ae:05:84:8e:97:20:f3:42:ed:78: 27:c7:c7:bd:eb:35:c1:c7:26:78:44:35:c1:8e:2b: c3:43:18:9e:98:45:c9:f8:0b:2c:f3:c3:cd:68:a7: 7d:0f:f2:ae:6f:8e:71:5d:10:2e:b4:b4:b2:24:2b: 22:35:2e:b8:7c:1a:50:df:62:75:c6:cf:47:70:c8: 64:ca:37:b3:d3:28:ce:87:00:d5:78:ee:74:fe:d0: d2:2a:dd:f8:83:6e:0f:83:c9:ed:63:ef:29:a0:01: 21:ba:6d:b4:2a:54:1a:19:31:c4:f0:25:a2:8b:9f: 00:03:c5:93:1d:2c:23:cd:a5:fc:3a:52:72:7d:ee: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:5B:4F:CE:B5:DF:71:5C:2D:08:42:D9:37:32:FF:E4:AF:90:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d62f8bac-399b-3f3d-842c-6366b20ec27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5c:79:d0:10:70:14:31:91:33:28:16:41:c5:e2:ec:fb:0a: 10:d9:fe:8a:a0:fa:92:b1:ac:ca:17:f2:7e:29:b7:b5:38:f7: 8a:f1:6f:5f:6f:81:c1:37:1a:ca:ce:45:54:30:ad:54:5d:ff: d1:f3:fc:f2:db:7f:52:82:39:57:61:1d:10:10:7a:79:37:8f: 31:70:28:68:d6:2b:50:c1:79:ae:85:d0:fb:a9:6c:15:3a:90: 1e:85:a6:6a:af:f1:fd:11:28:80:1a:cf:a6:8f:a8:b8:57:78: 18:71:76:84:8f:88:3a:d9:5f:68:d2:d9:a2:0d:2f:45:64:88: 23:db:6b:36:26:e0:e1:9c:2b:6c:cb:dd:0d:d0:da:e0:4f:6c: 7d:e1:03:1e:34:55:da:29:6a:97:70:67:a3:ed:1f:1d:55:f5: 43:1f:04:12:fe:2d:31:42:6f:b2:4c:77:60:e4:8f:ee:a9:36: 01:b7:88:94:ba:b0:a3:d5:9c:de:0b:bb:16:14:ea:e2:db:f9: d4:d7:49:e6:f2:ec:63:94:2e:df:73:e4:b2:e8:74:07:c9:26: 44:5d:d4:a1:f5:c1:6c:d6:9b:3f:97:6d:4e:de:15:b9:2a:f5: f6:a3:61:a8:6e:d5:a4:0a:10:b8:45:74:17:72:6f:6b:fb:3f: fb:b9:65:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl1qbu1HpBoKpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YjI5YTdiYzYtOTlkMS00NTIwLWEzZTItYjlhODMzOGQ0OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX4/XY11b4usqHh2sDuBr+grPgRXG88eqUfz f8poeKVxUJR/Be8eW/kNX6+IomqabJdmarEwXynN1Dd44Qs9BZkVTYY/obXEH12S gQQJRqGSXpFQqxlkjowAzl8Q5wNWYquCu2qoIGj3+rVZmofiZoxEp+wSj4CAvAHN cK4FhI6XIPNC7Xgnx8e96zXBxyZ4RDXBjivDQxiemEXJ+Ass88PNaKd9D/Kub45x XRAutLSyJCsiNS64fBpQ32J1xs9HcMhkyjez0yjOhwDVeO50/tDSKt34g24Pg8nt Y+8poAEhum20KlQaGTHE8CWii58AA8WTHSwjzaX8OlJyfe7k2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZjW0/Otd9xXC0IQtk3Mv/kr5CqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDYyZjhiYWMtMzk5Yi0z ZjNkLTg0MmMtNjM2NmIyMGVjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpcedAQcBQxkTMoFkHF4uz7ChDZ/oqg+pKxrMoX8n4pt7U494rxb19v gcE3GsrORVQwrVRd/9Hz/PLbf1KCOVdhHRAQenk3jzFwKGjWK1DBea6F0PupbBU6 kB6Fpmqv8f0RKIAaz6aPqLhXeBhxdoSPiDrZX2jS2aINL0VkiCPbazYm4OGcK2zL 3Q3Q2uBPbH3hAx40VdopapdwZ6PtHx1V9UMfBBL+LTFCb7JMd2Dkj+6pNgG3iJS6 sKPVnN4LuxYU6uLb+dTXSeby7GOULt9z5LLodAfJJkRd1KH1wWzWmz+XbU7eFbkq 9fajYahu1aQKELhFdBdyb2v7P/u5ZdQ= -----END CERTIFICATE-----Generated at Sun Apr 27 03:37:11 2025 by rpki-client