$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa File: 9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa (raw, json) Hash identifier: GLRDEGrP3aBt8Je7a4EZYRWVrKt7rukpFXwswnyPaUA= Subject key identifier: 49:18:E0:DC:90:33:6A:B3:AD:96:35:C1:43:B5:97:E8:A2:5B:19:B9 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D6A7FC0251341D74BE80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 128.254.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:a7:fc:02:51:34:1d:74:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=0237c341-ca36-4226-bf5f-6409b6a12535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:cd:37:e3:8b:7f:e2:37:65:f2:a5:26:13: 19:be:c3:3f:63:9d:2b:d3:c9:f0:d6:52:38:92:4d: 5b:f1:00:22:db:a3:d0:10:3a:88:3e:5e:88:b0:a4: 66:e7:de:ae:9e:aa:3c:63:f2:0d:3e:4e:32:eb:48: 63:9a:74:31:de:60:d5:6b:1f:96:ae:28:b5:11:71: d3:8d:ed:1f:07:8a:fa:68:70:d4:e0:eb:60:1f:06: 65:9d:22:a5:5a:7a:b9:37:a2:48:6d:dc:ad:7e:82: 4b:18:35:07:c7:6e:c3:1a:df:73:0e:4c:a7:6a:b8: 2c:92:4c:dd:0c:fc:f8:d1:33:2a:0c:38:df:67:eb: 4d:82:53:c9:af:80:c2:8e:27:da:df:c5:93:af:33: 15:37:7c:e3:91:f6:90:f5:b1:9f:8c:49:40:b8:0e: a5:4e:7d:c4:88:45:3f:14:1c:6e:65:a7:9f:cd:c5: 6a:c1:90:01:8f:80:dd:9a:7e:cc:5e:21:6f:3d:f9: a9:c4:c1:c9:65:85:75:56:69:50:4b:31:77:c3:91: b3:fe:74:0d:0d:fb:ca:ca:f8:86:4f:57:88:36:51: 3d:e9:62:7f:24:37:9e:46:d1:51:e1:2f:1e:2f:0c: a8:01:1f:24:30:d4:d2:0f:29:e6:85:81:e8:af:5d: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:E0:DC:90:33:6A:B3:AD:96:35:C1:43:B5:97:E8:A2:5B:19:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:29:17:00:0b:5a:b1:6c:d5:a1:6d:f0:81:7b:76:30:80:b2: 7c:79:57:f2:58:b8:fe:cd:5b:e9:71:b7:3e:9a:a6:6c:50:0e: d3:f2:99:e1:0f:7b:c8:dd:eb:1b:83:b7:27:35:d6:ce:ed:ad: bf:c7:26:81:7c:fc:01:fc:94:a5:0b:de:06:c1:a3:0a:e5:ca: 9b:59:22:c7:e9:29:9e:ee:4f:73:8f:97:f4:37:c4:a4:ea:8f: 2c:45:4d:d0:4e:0c:e0:ee:08:6f:d1:ac:af:f7:3e:a2:90:c3: fb:81:3e:93:b2:93:75:42:da:6c:1e:6a:5f:bb:2f:29:9e:30: 87:98:9d:31:72:b2:10:e4:bb:09:73:15:3d:48:aa:d2:24:89: fc:89:c7:eb:5b:1f:73:df:9b:bf:71:ff:5a:fd:56:47:7b:2a: 05:d3:0b:e3:d2:67:fe:b0:4b:03:37:52:b7:c7:2b:35:2f:7c: ef:fb:f5:45:30:23:77:8c:20:0c:ff:0e:1d:3b:cf:ab:e7:e2: 03:f7:1f:ba:34:c1:f7:e3:2b:14:dd:4c:64:73:06:a1:b4:0b: 87:41:75:a8:aa:56:aa:04:70:61:3f:63:82:0c:d3:37:cd:36: 3e:14:52:df:44:95:5c:d2:79:26:1d:33:d1:be:8f:6c:82:dd: 8e:3c:74:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidan/AJRNB10voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MDIzN2MzNDEtY2EzNi00MjI2LWJmNWYtNjQwOWI2YTEyNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRLNN+OLf+I3ZfKlJhMZvsM/Y50r08nw1lI4 kk1b8QAi26PQEDqIPl6IsKRm596unqo8Y/INPk4y60hjmnQx3mDVax+Wrii1EXHT je0fB4r6aHDU4OtgHwZlnSKlWnq5N6JIbdytfoJLGDUHx27DGt9zDkynargskkzd DPz40TMqDDjfZ+tNglPJr4DCjifa38WTrzMVN3zjkfaQ9bGfjElAuA6lTn3EiEU/ FBxuZaefzcVqwZABj4Ddmn7MXiFvPfmpxMHJZYV1VmlQSzF3w5Gz/nQNDfvKyviG T1eINlE96WJ/JDeeRtFR4S8eLwyoAR8kMNTSDynmhYHor116tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkY4NyQM2qzrZY1wUO1l+iiWxm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOWE0YjY3ZDgtMmNjMS0z YWI3LThmZmUtMWZmZThkM2FhZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABApFwALWrFs1aFt8IF7djCAsnx5V/JYuP7NW+lxtz6apmxQDtPymeEP e8jd6xuDtyc11s7trb/HJoF8/AH8lKUL3gbBowrlyptZIsfpKZ7uT3OPl/Q3xKTq jyxFTdBODODuCG/RrK/3PqKQw/uBPpOyk3VC2mweal+7LymeMIeYnTFyshDkuwlz FT1IqtIkifyJx+tbH3Pfm79x/1r9Vkd7KgXTC+PSZ/6wSwM3UrfHKzUvfO/79UUw I3eMIAz/Dh07z6vn4gP3H7o0wffjKxTdTGRzBqG0C4dBdaiqVqoEcGE/Y4IM0zfN Nj4UUt9ElVzSeSYdM9G+j2yC3Y48dNg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:55 2025 by rpki-client