$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa File: f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa (raw, json) Hash identifier: TmUSn9q0FDUGatu2uS5q3p4sxfI0yzAPQxgQZsia/Xk= Subject key identifier: 84:84:5D:A9:46:88:36:44:F5:2E:9F:0F:B3:8F:AB:46:7C:97:EC:B7 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F43285849A61F3A674F1135F2EA089E00 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 272106 IP address blocks: 8.243.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3a:67:4f:11:35:f2:ea:08:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=28c8f748-15d8-47a0-b957-2600da7a397b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:c0:61:96:2e:5f:dc:ee:76:a1:d1:69:b2: 08:85:ad:1f:6a:72:7b:8e:e1:2a:3b:2b:b2:5a:a6: c8:63:c3:68:a2:55:90:16:e6:ae:e5:0e:63:c4:a7: 62:84:7f:25:e6:02:d9:f0:f2:46:c2:aa:5d:c4:67: 12:13:85:eb:40:ce:8a:0c:93:e7:86:a0:a6:46:88: ad:15:78:37:b1:16:f9:49:08:64:c4:0b:7d:f9:b0: db:11:0c:d1:92:12:57:ff:64:29:42:a2:0c:56:5a: 04:df:e5:d6:a8:e6:52:74:89:98:b1:e3:af:f7:40: e7:36:85:b0:79:a2:ed:ff:5a:8e:e1:6e:62:cb:09: de:a6:ce:fd:ab:64:9a:0c:64:7c:8a:cd:d1:bd:3d: 65:aa:80:5d:3f:11:e4:05:65:b4:f7:74:b2:f8:e8: 48:88:58:18:e7:7b:28:51:23:8f:0d:3a:c0:38:26: 84:0a:a4:a0:f0:a1:89:2f:ae:26:7a:e4:6d:8b:f0: e2:42:0c:e5:a2:b7:a9:84:9a:2b:8d:64:da:82:67: d0:2a:ef:d9:8c:2f:8d:35:55:83:d5:65:22:d3:61: 92:4f:1c:f5:b3:32:78:30:4b:bf:28:1e:9b:cb:94: a2:93:c4:f4:51:69:a5:fb:0b:7f:e6:c8:5b:11:5b: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:84:5D:A9:46:88:36:44:F5:2E:9F:0F:B3:8F:AB:46:7C:97:EC:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 8.243.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2d:f3:a9:25:62:4f:ae:1e:27:f4:99:36:22:69:d5:fa:18: b1:80:a1:6b:c6:d5:ed:ec:7c:3c:98:92:1f:64:37:68:4b:9f: 89:00:57:c1:1c:2c:97:77:7a:2e:14:6e:c6:ad:cf:13:df:ab: 00:4c:c1:a6:ed:22:7c:a3:c5:5b:9d:46:d3:ca:24:fc:62:6d: 8e:f6:d2:9e:da:af:c6:2b:04:14:65:06:0a:ed:ab:8e:91:c9: f6:e1:9a:32:ab:1b:a2:5f:73:79:e6:08:07:21:54:4b:e3:e7: 86:e9:66:96:79:36:f2:88:4f:1e:c2:42:01:91:87:13:e0:f7: db:1d:86:c5:4d:38:16:f1:06:7a:b0:bf:31:bf:a6:73:0d:31: c9:9b:47:0f:d5:85:dc:40:99:00:50:ce:6f:fc:18:16:a8:f5: 93:3e:10:ca:25:18:d4:37:bc:4b:7c:e6:26:1a:e5:c7:eb:41: af:d3:7a:fa:7c:bc:d3:52:80:1f:49:29:d7:42:1f:2d:66:15: a3:dc:15:43:7a:1f:bb:67:ba:0c:7d:28:56:e3:7e:ea:05:0a: f6:dd:6d:89:a5:a3:3d:b9:10:0a:b0:3a:c9:f0:86:9d:48:53: cd:7d:59:72:84:89:1f:11:c4:82:7c:70:d4:2e:f7:2c:c8:cd: 2f:46:40:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzpnTxE18uoIngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MjhjOGY3NDgtMTVkOC00N2EwLWI5NTctMjYwMGRhN2EzOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSrAYZYuX9zudqHRabIIha0fanJ7juEqOyuy WqbIY8NoolWQFuau5Q5jxKdihH8l5gLZ8PJGwqpdxGcSE4XrQM6KDJPnhqCmRoit FXg3sRb5SQhkxAt9+bDbEQzRkhJX/2QpQqIMVloE3+XWqOZSdImYseOv90DnNoWw eaLt/1qO4W5iywneps79q2SaDGR8is3RvT1lqoBdPxHkBWW093Sy+OhIiFgY53so USOPDTrAOCaECqSg8KGJL64meuRti/DiQgzlorephJorjWTagmfQKu/ZjC+NNVWD 1WUi02GSTxz1szJ4MEu/KB6by5Sik8T0UWml+wt/5shbEVtTxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISEXalGiDZE9S6fD7OPq0Z8l+y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvZjMyMGZkMWMtZTk5My0z YmE5LTg4Y2MtOGVjYjBhNzJjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACPN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwt86klYk+uHif0mTYiadX6GLGAoWvG1e3sfDyYkh9kN2hLn4kAV8Ec LJd3ei4UbsatzxPfqwBMwabtInyjxVudRtPKJPxibY720p7ar8YrBBRlBgrtq46R yfbhmjKrG6Jfc3nmCAchVEvj54bpZpZ5NvKITx7CQgGRhxPg99sdhsVNOBbxBnqw vzG/pnMNMcmbRw/VhdxAmQBQzm/8GBao9ZM+EMolGNQ3vEt85iYa5cfrQa/Tevp8 vNNSgB9JKddCHy1mFaPcFUN6H7tnugx9KFbjfuoFCvbdbYmloz25EAqwOsnwhp1I U819WXKEiR8RxIJ8cNQu9yzIzS9GQOs= -----END CERTIFICATE-----Generated at Tue Apr 29 10:19:03 2025 by rpki-client