$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa File: b1e66ddd-f5af-39e8-93f9-c38eff664429.roa (raw, json) Hash identifier: J51yteCk38NKOVqB5CuqP9L/jRY7FEonmIFvmlhrc0s= Subject key identifier: 86:FD:14:4E:9E:27:F2:81:FA:70:01:93:8E:F4:A8:F8:20:CA:C1:FD Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D6747AC57264444388C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d6:74:7a:c5:72:64:44:43:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=f95db69c-f5a3-4cb5-b7d1-3099bab72526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:85:06:a0:97:d4:2f:99:0d:41:78:94:ba: ef:ac:03:74:68:de:98:67:09:66:dc:8c:64:e7:7e: ba:e3:c6:52:b3:7b:61:93:3e:a9:75:48:fb:20:80: 28:a6:2a:53:64:01:d7:57:1e:15:32:2d:bb:64:d1: a6:46:1f:cc:a7:4b:67:27:01:c4:f3:5f:4e:fc:08: d7:4c:36:d6:e6:ca:21:0a:06:7a:5a:04:13:ea:06: 0e:96:31:a5:33:8c:30:7e:d6:d6:05:c3:eb:bd:af: 8a:dc:79:3a:a8:1b:9e:c3:3f:a0:9a:58:25:e0:81: bc:20:c2:d0:c0:1e:13:17:24:3b:72:89:ec:f5:22: 9f:37:c0:02:d2:f5:bb:03:24:82:da:a2:34:2a:b1: 8b:9a:e4:ca:34:3e:cc:d1:72:9b:db:52:6b:4c:a4: e0:92:53:1f:e6:11:f5:8c:3d:b0:50:db:a3:b8:fd: 60:a5:b3:22:61:e8:e5:7b:0d:86:33:75:f6:44:00: 44:18:b9:b0:d0:12:6d:b4:a6:96:f5:8b:2d:15:7d: d9:af:8b:36:13:98:ca:9d:e7:6b:32:8e:3a:bc:dd: 92:c2:e2:b5:b1:4b:97:1b:17:cf:44:e4:aa:11:0f: 24:51:f7:90:f5:42:d9:be:5a:a0:6c:98:e6:bb:56: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FD:14:4E:9E:27:F2:81:FA:70:01:93:8E:F4:A8:F8:20:CA:C1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:99:10:d2:b5:55:02:db:07:1b:ba:5f:3a:90:4a:e1:85:af: 4a:87:d1:33:3a:68:bd:d1:4b:a7:25:59:47:39:13:ed:bf:29: 56:ab:b0:26:03:ec:4a:c9:9c:4f:8f:5a:c0:78:73:fd:29:87: e4:af:ab:d3:e9:96:d2:31:b2:64:3a:b6:b0:61:a5:19:c0:79: da:3c:5d:a2:44:e7:a8:94:07:0d:0d:31:f7:e8:bc:5b:d5:12: 7b:15:d8:7e:3f:79:c7:fa:b1:66:91:64:1c:dc:5e:34:e7:27: 0e:67:03:44:24:8d:53:00:9c:1c:bf:b3:7b:b9:a3:44:25:06: de:11:e0:4c:b4:0a:c7:46:41:2e:53:29:dd:2b:7d:54:50:ad: 87:d7:fe:14:10:17:92:00:91:a1:50:b3:a3:0d:a8:7d:4b:68: a9:ba:12:77:44:33:12:af:7f:c9:48:16:b4:27:71:9b:be:5b: 3d:17:11:22:bc:3f:5f:54:e7:51:9f:66:92:98:ef:44:3e:7f: 0d:87:ab:9b:0b:72:e0:99:34:07:05:e4:78:31:60:58:1f:07: 1a:91:9d:40:57:43:71:27:5c:67:d6:ba:97:fc:f1:77:aa:e8: fe:dc:a4:04:f7:3d:5e:c2:47:ff:9b:8e:fa:aa:bd:c5:f7:1f: ee:54:6b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidZ0esVyZERDiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk Zjk1ZGI2OWMtZjVhMy00Y2I1LWI3ZDEtMzA5OWJhYjcyNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4qFBqCX1C+ZDUF4lLrvrAN0aN6YZwlm3Ixk 536648ZSs3thkz6pdUj7IIAopipTZAHXVx4VMi27ZNGmRh/Mp0tnJwHE819O/AjX TDbW5sohCgZ6WgQT6gYOljGlM4wwftbWBcPrva+K3Hk6qBuewz+gmlgl4IG8IMLQ wB4TFyQ7cons9SKfN8AC0vW7AySC2qI0KrGLmuTKND7M0XKb21JrTKTgklMf5hH1 jD2wUNujuP1gpbMiYejlew2GM3X2RABEGLmw0BJttKaW9YstFX3Zr4s2E5jKnedr Mo46vN2SwuK1sUuXGxfPROSqEQ8kUfeQ9ULZvlqgbJjmu1YekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb9FE6eJ/KB+nABk470qPggysH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYjFlNjZkZGQtZjVhZi0z OWU4LTkzZjktYzM4ZWZmNjY0NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASZENK1VQLbBxu6XzqQSuGFr0qH0TM6aL3RS6clWUc5E+2/KVarsCYD 7ErJnE+PWsB4c/0ph+Svq9PpltIxsmQ6trBhpRnAedo8XaJE56iUBw0NMffovFvV EnsV2H4/ecf6sWaRZBzcXjTnJw5nA0QkjVMAnBy/s3u5o0QlBt4R4Ey0CsdGQS5T Kd0rfVRQrYfX/hQQF5IAkaFQs6MNqH1LaKm6EndEMxKvf8lIFrQncZu+Wz0XESK8 P19U51GfZpKY70Q+fw2Hq5sLcuCZNAcF5HgxYFgfBxqRnUBXQ3EnXGfWupf88Xeq 6P7cpAT3PV7CR/+bjvqqvcX3H+5Uaw8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:21:04 2025 by rpki-client