$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa File: 50638985-01ed-37b5-8f1a-7c3230a86a9d.roa (raw, json) Hash identifier: L+Q98G2GwDmHdenikB5cC5tJ6pe7xvid29qw/rpPAqA= Subject key identifier: 2E:7A:C6:E5:89:08:13:85:BC:C3:EF:08:DA:E7:16:4C:65:9E:AB:7C Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D684BAE6BCD6588DD020 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:84:ba:e6:bc:d6:58:8d:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=6e965b03-0244-460c-a611-545f9ddf32f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:bf:60:a0:b1:42:e2:49:83:b4:c1:c0:f8: d5:93:57:79:a5:a4:24:db:e1:bf:98:2c:d8:67:24: bf:c3:c1:8d:3e:08:0a:49:70:04:f3:ab:79:33:72: 28:9e:7b:dc:18:04:be:a2:49:0d:99:5c:2c:de:35: 00:b0:4d:ca:da:c4:8f:0a:c5:ea:c2:b0:35:53:3a: 96:61:b9:72:cc:ee:39:83:f5:da:a9:8d:e2:85:cb: 92:f9:f0:9b:d6:24:15:fb:4b:38:6f:da:76:79:21: 93:b6:fc:86:07:10:6b:04:46:20:a1:6a:a8:5e:b9: 83:75:43:8b:3c:37:a5:9a:de:dc:d0:5b:2d:54:54: 68:8e:d1:a9:62:5d:f6:56:a5:dc:b2:40:75:43:8d: 63:82:b6:6b:29:68:fb:3d:73:d6:ef:88:65:7a:a9: 76:46:57:0e:24:8d:66:43:6a:33:c7:3a:dc:c6:39: 8a:5c:04:a0:f3:71:1b:4b:22:37:92:b6:8d:9b:56: 1c:82:3b:0b:6a:0f:60:a2:cb:8b:af:4b:62:4f:7c: 0f:a1:54:15:69:50:13:19:53:6d:f7:6c:67:d7:51: 0b:f1:04:da:26:2e:67:87:5b:90:eb:dd:e4:6d:4d: 9d:64:f9:3c:35:e7:fb:f2:2e:93:f1:7a:6e:50:41: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7A:C6:E5:89:08:13:85:BC:C3:EF:08:DA:E7:16:4C:65:9E:AB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e4:e3:66:ba:f7:2d:7a:f9:79:12:48:c0:14:37:8d:87:c9: fc:85:ed:39:6d:84:fe:02:74:9c:d7:18:8f:26:b9:b6:96:20: 8b:8c:48:7f:8d:62:b8:55:ff:46:25:d4:2c:17:0d:f7:af:e2: b2:71:e1:80:74:52:34:26:56:35:b9:c9:19:33:97:0a:9a:82: f7:52:57:fd:a6:46:e6:66:ec:ef:af:8d:7a:c6:fd:7e:70:dd: c7:e5:88:f0:1d:a7:cf:f6:ff:9c:07:a6:80:99:7a:8b:82:87: 5f:ac:26:4f:6c:da:63:40:2a:29:e1:8a:72:e1:ff:8e:d4:e0: 13:af:3b:d5:d9:5c:34:52:72:11:cd:e4:c0:39:63:bc:5c:2f: 36:51:41:c4:b2:2a:e4:39:9a:b2:b4:10:df:6f:0b:97:86:58: 5b:7a:a0:0d:08:1e:4a:5c:f0:da:cb:e7:c1:b9:a4:d1:30:ed: 09:bc:c4:06:c3:7c:02:88:de:4a:26:5d:c7:0a:9f:62:c0:32: c2:39:17:43:71:ed:00:5f:a5:1c:61:0d:c9:d3:ac:c2:f9:6d: 54:70:60:2b:b2:d5:87:26:76:3c:4c:39:27:27:f7:f6:10:9c: 91:13:87:ba:f0:a0:cd:5b:e9:a5:78:3e:91:3d:d6:cd:ad:bf: 0c:a3:0c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidaEuua81liN0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NmU5NjViMDMtMDI0NC00NjBjLWE2MTEtNTQ1ZjlkZGYzMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Bu/YKCxQuJJg7TBwPjVk1d5paQk2+G/mCzY ZyS/w8GNPggKSXAE86t5M3IonnvcGAS+okkNmVws3jUAsE3K2sSPCsXqwrA1UzqW YblyzO45g/XaqY3ihcuS+fCb1iQV+0s4b9p2eSGTtvyGBxBrBEYgoWqoXrmDdUOL PDelmt7c0FstVFRojtGpYl32VqXcskB1Q41jgrZrKWj7PXPW74hleql2RlcOJI1m Q2ozxzrcxjmKXASg83EbSyI3kraNm1YcgjsLag9gosuLr0tiT3wPoVQVaVATGVNt 92xn11EL8QTaJi5nh1uQ693kbU2dZPk8Nef78i6T8XpuUEGeDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC56xuWJCBOFvMPvCNrnFkxlnqt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNTA2Mzg5ODUtMDFlZC0z N2I1LThmMWEtN2MzMjMwYTg2YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3k42a69y16+XkSSMAUN42HyfyF7TlthP4CdJzXGI8mubaWIIuMSH+N YrhV/0Yl1CwXDfev4rJx4YB0UjQmVjW5yRkzlwqagvdSV/2mRuZm7O+vjXrG/X5w 3cfliPAdp8/2/5wHpoCZeouCh1+sJk9s2mNAKinhinLh/47U4BOvO9XZXDRSchHN 5MA5Y7xcLzZRQcSyKuQ5mrK0EN9vC5eGWFt6oA0IHkpc8NrL58G5pNEw7Qm8xAbD fAKI3komXccKn2LAMsI5F0Nx7QBfpRxhDcnTrML5bVRwYCuy1YcmdjxMOScn9/YQ nJETh7rwoM1b6aV4PpE91s2tvwyjDI0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:02 2025 by rpki-client