$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa File: 672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json) Hash identifier: w/+Wx5ArJ5Z/g/pGt0vPrJ7ebTHx9sgrx6/iUGQMRAQ= Subject key identifier: BF:C1:05:C4:35:01:B9:E9:1C:59:B5:6E:96:79:40:47:82:A8:3B:60 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D49F047209F8C5D19AC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d4:9f:04:72:09:f8:c5:d1:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=4120a9ee-1195-45b5-87b3-bd85fc5c183c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:78:44:97:63:cc:9d:45:ba:23:5e:2b:56: 7b:b4:b3:c6:32:74:db:cf:ec:6e:21:46:9f:6c:06: 1b:5d:ee:ff:34:40:06:8a:a0:41:a7:88:51:72:67: 98:93:66:6e:bd:8d:4d:1f:f6:26:4e:75:0c:dd:e7: 79:ab:03:12:93:34:48:5e:85:4f:50:0e:39:c2:aa: 90:cf:d1:51:7d:6a:86:45:f6:ee:35:d9:cc:1d:f2: 72:e8:fe:17:c2:40:09:6c:a5:00:90:74:37:31:0a: ef:de:d0:1a:a0:e2:7f:39:dc:03:0d:41:3e:56:4b: 47:82:42:25:b2:4f:c8:78:ff:d9:52:e2:93:50:41: ef:c1:88:6b:d2:3b:e5:f2:e3:0c:7b:99:68:46:4a: 65:8d:c0:c6:51:9e:85:6a:1f:2e:0c:b5:97:73:0f: 29:bc:91:01:9c:c4:b1:7b:50:48:a0:27:dc:f9:db: f1:4f:f6:d3:e5:3c:9b:5e:f2:46:1b:71:ca:a1:52: 75:e9:6b:63:db:eb:13:34:d8:89:9b:37:4b:27:39: e7:1f:27:04:8b:38:d7:f1:92:59:1c:71:db:98:4e: fc:cd:9f:2c:e0:c4:e6:f0:74:a0:c7:46:a0:91:cf: 07:72:b8:81:c6:70:a0:4f:1e:d5:ae:18:a1:65:94: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:05:C4:35:01:B9:E9:1C:59:B5:6E:96:79:40:47:82:A8:3B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:89:01:ae:9b:38:72:8b:8d:9b:41:81:d9:f3:f5:ee:f9:06: d0:3d:54:0e:15:3e:56:62:53:bf:5f:90:8d:8e:0f:b2:cd:4c: c7:59:18:75:ac:51:e6:fb:de:f2:1d:ce:78:9a:c0:98:ef:2c: 0f:fe:37:d7:fd:5d:86:f7:42:15:49:ef:c3:19:ba:99:b9:8b: 60:c1:9f:d5:ab:04:dd:1b:5a:fe:62:ba:88:62:3f:2d:80:b5: 59:65:49:88:5c:b0:b6:6f:38:dd:84:05:bf:c5:4b:3f:4a:9c: 41:d9:eb:05:7c:14:1f:1e:8a:5a:53:7f:a4:46:f5:11:c7:85: f5:19:e7:ce:04:ac:e5:f6:d4:e0:38:55:63:b6:40:a5:ca:c8: 69:c4:8d:05:42:ce:6f:12:c1:c6:9b:99:85:1b:b8:aa:8a:b2: 0e:72:c3:f6:5b:d6:f2:f9:59:62:39:57:ba:f5:c7:34:1f:15: 63:74:9d:85:b5:e0:69:f1:64:c9:8e:35:c4:81:62:bf:08:d6: 3b:a5:7a:71:cb:00:f7:34:d8:70:49:6d:86:58:82:b8:67:95: 8f:f4:d2:f8:6e:bd:35:d2:cf:49:7a:59:50:95:91:d0:0c:d9: d0:80:e2:d7:f9:c8:23:79:13:3a:15:92:04:b6:8b:98:77:0c: 71:d6:6a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidSfBHIJ+MXRmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NDEyMGE5ZWUtMTE5NS00NWI1LTg3YjMtYmQ4NWZjNWMxODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHx4RJdjzJ1FuiNeK1Z7tLPGMnTbz+xuIUaf bAYbXe7/NEAGiqBBp4hRcmeYk2ZuvY1NH/YmTnUM3ed5qwMSkzRIXoVPUA45wqqQ z9FRfWqGRfbuNdnMHfJy6P4XwkAJbKUAkHQ3MQrv3tAaoOJ/OdwDDUE+VktHgkIl sk/IeP/ZUuKTUEHvwYhr0jvl8uMMe5loRkpljcDGUZ6Fah8uDLWXcw8pvJEBnMSx e1BIoCfc+dvxT/bT5TybXvJGG3HKoVJ16Wtj2+sTNNiJmzdLJznnHycEizjX8ZJZ HHHbmE78zZ8s4MTm8HSgx0agkc8HcriBxnCgTx7VrhihZZSvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/BBcQ1AbnpHFm1bpZ5QEeCqDtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjcyMTk0YzItNGFhMS0z Yzg0LWE5ZDgtYjhlODk1NjZmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyJAa6bOHKLjZtBgdnz9e75BtA9VA4VPlZiU79fkI2OD7LNTMdZGHWs Ueb73vIdzniawJjvLA/+N9f9XYb3QhVJ78MZupm5i2DBn9WrBN0bWv5iuohiPy2A tVllSYhcsLZvON2EBb/FSz9KnEHZ6wV8FB8eilpTf6RG9RHHhfUZ584ErOX21OA4 VWO2QKXKyGnEjQVCzm8SwcabmYUbuKqKsg5yw/Zb1vL5WWI5V7r1xzQfFWN0nYW1 4GnxZMmONcSBYr8I1julenHLAPc02HBJbYZYgrhnlY/00vhuvTXSz0l6WVCVkdAM 2dCA4tf5yCN5EzoVkgS2i5h3DHHWaro= -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:53 2025 by rpki-client