$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json) Hash identifier: yaScqUoPnHyGw9PsijEW0qNq0h4MVlA4Agl5vjlyvVI= Subject key identifier: DA:77:1B:F8:6F:51:FA:6A:FA:FB:E2:FE:57:23:91:28:E9:69:35:E4 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F432858492E13BBD2D7E4FB237C629F00 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 7311 IP address blocks: 96.125.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bb:d2:d7:e4:fb:23:7c:62:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=32426ba6-9e70-4a95-9cc2-ce7dfee2af67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:6f:4b:35:48:fd:9e:e6:ee:22:6c:e0:cf: 90:e7:bf:f2:3b:71:91:6c:0d:be:d9:cf:b6:ec:ed: ab:3d:46:3b:1f:4a:b4:82:d2:a5:08:2f:7d:38:e3: da:ae:ef:07:5e:81:bf:2e:6a:b2:c9:e0:4b:ee:e6: d2:70:ae:71:98:9b:21:06:1d:bd:34:18:f3:f8:23: a2:28:2f:ca:cd:28:81:af:ed:14:f8:ca:f2:fe:41: 4d:39:34:25:af:b5:f0:2f:3b:b4:0e:45:89:f0:35: 72:6e:94:69:00:da:3a:89:64:70:09:3d:24:9b:df: ba:15:0d:b2:41:af:37:28:8c:b4:ac:cc:04:4d:da: ad:ad:49:46:60:ef:31:6d:f4:b3:44:dc:61:c7:be: 59:78:60:0a:c1:13:21:6c:dc:f8:cb:cc:14:ef:5a: 02:9f:f7:d2:a2:ec:1b:d7:a0:75:6f:31:f6:76:4b: dd:74:7c:87:6e:1f:02:c8:5d:3b:62:42:25:b0:52: 7e:f6:50:b2:22:fe:57:5d:17:c4:8e:14:95:24:d9: ae:89:c3:62:f2:c9:8b:ee:48:d7:d9:04:e6:d3:7e: 34:19:4d:24:32:d0:64:19:34:f8:4d:c0:81:50:44: e7:93:c5:27:bb:0d:0f:9f:fa:36:e9:c5:37:19:6f: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:1B:F8:6F:51:FA:6A:FA:FB:E2:FE:57:23:91:28:E9:69:35:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 96.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:22:c0:47:2d:57:c2:94:a9:c3:3a:e6:70:e9:a4:ce:59:38: f0:da:5a:50:7c:54:b5:cc:7d:ce:97:14:41:1a:d3:73:ce:03: ba:81:a3:d0:5c:67:5d:57:c5:e1:8c:df:2d:7d:8f:6b:43:41: f8:0e:32:2c:ae:10:41:1b:27:ee:fa:cd:59:c7:b6:a4:55:fd: 32:c7:80:fb:f2:21:20:21:02:18:17:92:86:94:5f:d8:89:f4: 15:59:e8:3c:19:00:30:6b:50:ee:a5:92:ba:b0:e0:45:9b:56: 73:14:c5:90:6b:4c:7b:ee:aa:68:db:3a:6a:92:5b:45:ef:41: e8:be:9b:3b:b5:74:ba:cf:bd:8d:90:a9:c7:f1:08:c6:cf:25: 8c:a1:17:68:b3:7d:b9:3d:8a:c6:7f:82:8d:50:7d:31:4a:21: 33:f2:eb:97:7a:71:d9:04:5b:d9:60:4b:31:52:8c:44:a2:56: 52:48:54:96:0b:87:9d:dd:d8:1f:13:c0:3a:bf:8e:35:93:3b: 84:fe:f2:a3:0e:53:3a:13:28:95:07:4e:20:31:d8:4f:a4:03: dc:56:46:5b:cc:99:28:5d:58:cc:5b:21:40:63:51:51:7a:88: 23:fa:a2:c1:2a:4f:df:85:40:14:85:1c:d9:0d:99:15:79:b1: 39:03:06:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7vS1+T7I3xinwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk MzI0MjZiYTYtOWU3MC00YTk1LTljYzItY2U3ZGZlZTJhZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAVvSzVI/Z7m7iJs4M+Q57/yO3GRbA2+2c+2 7O2rPUY7H0q0gtKlCC99OOParu8HXoG/LmqyyeBL7ubScK5xmJshBh29NBjz+COi KC/KzSiBr+0U+Mry/kFNOTQlr7XwLzu0DkWJ8DVybpRpANo6iWRwCT0km9+6FQ2y Qa83KIy0rMwETdqtrUlGYO8xbfSzRNxhx75ZeGAKwRMhbNz4y8wU71oCn/fSouwb 16B1bzH2dkvddHyHbh8CyF07YkIlsFJ+9lCyIv5XXRfEjhSVJNmuicNi8smL7kjX 2QTm0340GU0kMtBkGTT4TcCBUETnk8Unuw0Pn/o26cU3GW8I0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp3G/hvUfpq+vvi/lcjkSjpaTXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDM0ZWIwZDgtZmEwYy0z MGQ2LWIzMjItYzYxYWYzMDQ1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4iwEctV8KUqcM65nDppM5ZOPDaWlB8VLXMfc6XFEEa03POA7qBo9Bc Z11XxeGM3y19j2tDQfgOMiyuEEEbJ+76zVnHtqRV/TLHgPvyISAhAhgXkoaUX9iJ 9BVZ6DwZADBrUO6lkrqw4EWbVnMUxZBrTHvuqmjbOmqSW0XvQei+mzu1dLrPvY2Q qcfxCMbPJYyhF2izfbk9isZ/go1QfTFKITPy65d6cdkEW9lgSzFSjESiVlJIVJYL h53d2B8TwDq/jjWTO4T+8qMOUzoTKJUHTiAx2E+kA9xWRlvMmShdWMxbIUBjUVF6 iCP6osEqT9+FQBSFHNkNmRV5sTkDBig= -----END CERTIFICATE-----Generated at Mon Apr 28 19:53:24 2025 by rpki-client