$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa File: 100036a5-3ecc-3953-ad52-6114836271e0.roa (raw, json) Hash identifier: oQIU/lZP9XrQayC4+8NaTSPb7VWU+HRV+RdgjsA61ug= Subject key identifier: ED:CC:5B:32:D1:60:7D:F6:73:E0:A7:22:D9:88:08:8C:BB:2B:BF:18 Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F432858498769BA56933129CC4B1B3380 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 15046 IP address blocks: 128.230.152.0/24 maxlen: 24 128.230.157.128/25 maxlen: 25 128.230.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ba:56:93:31:29:cc:4b:1b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=3f6c60d4-9843-4b99-a668-5f58a274495d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:23:2a:f1:12:12:fe:35:72:22:63:f8:ac: 80:58:07:08:53:db:64:e4:c9:43:f2:9e:4b:ab:7b: 03:f9:4f:06:74:e2:b7:bb:81:c6:27:4f:56:03:6e: 9d:1a:8a:b9:0d:b2:27:1a:13:f4:aa:13:d4:ab:dd: 61:93:8c:5a:6d:52:3f:42:d5:d8:21:42:fa:fa:3a: e3:9a:da:ba:c3:7c:e4:4f:07:ae:57:7d:75:9a:94: 75:a5:f1:ed:d6:af:18:91:87:78:ac:2f:3f:35:ff: 5b:c6:ee:d8:77:4e:ed:e9:50:13:e6:ab:ee:ee:6b: e5:06:c8:6e:fc:2e:a0:14:4c:b1:36:c0:23:d0:c0: be:9f:4d:56:af:1e:11:eb:87:db:91:a7:89:cf:b2: c6:82:d4:ae:ea:c7:cc:71:37:b3:5a:22:22:93:c0: 78:a0:c5:68:30:ee:78:e0:b8:af:16:c3:bc:f7:1e: 05:9d:90:e6:e3:cf:ea:fb:31:44:1e:46:d6:f8:71: 20:94:58:1c:f5:c4:51:36:37:a1:01:99:a4:16:46: 76:ed:e6:8c:82:f5:17:b2:f9:a2:36:b6:15:e5:e2: 4d:a8:fa:56:09:70:76:13:cb:6b:7d:e2:3e:99:80: d0:ed:41:bf:71:96:40:0e:da:de:90:8c:c6:b0:0f: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CC:5B:32:D1:60:7D:F6:73:E0:A7:22:D9:88:08:8C:BB:2B:BF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: 128.230.152.0/24 128.230.157.128/25 128.230.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b7:11:76:7a:82:e6:d9:9a:94:48:4d:6b:3b:83:67:0e:3b: dd:ab:90:55:2f:5e:28:e4:8a:36:dd:26:40:55:a1:55:a9:c9: 13:63:d4:7a:71:83:2f:eb:aa:6d:73:5e:18:df:27:92:c0:2a: 88:45:66:bb:07:c9:17:e5:89:b5:9f:30:00:e8:85:fb:ac:9e: fd:15:b9:72:99:72:4c:66:65:80:3c:90:c1:8f:be:ae:4a:48: 98:77:20:bf:dd:12:6a:a3:48:c2:32:e6:92:2a:ba:76:2a:e9: 0f:fb:17:78:5d:56:e7:9c:71:b0:79:af:d6:b1:ce:48:e5:d8: 95:32:52:fe:af:58:5c:32:1c:af:21:09:90:a2:43:93:43:05: 0a:57:94:45:63:9b:50:26:ea:11:06:65:24:32:6f:54:0d:01: d2:05:b3:f8:c5:c0:b6:06:d0:3b:f5:bc:12:48:04:d0:57:e5: 80:66:43:2f:a0:e4:de:07:bc:e3:e3:f7:ba:75:d1:4d:32:02: ec:a5:c2:70:00:6f:69:62:1e:11:22:59:af:28:24:30:89:50: 8e:de:79:ef:56:8c:60:f2:66:2a:bb:76:3c:3a:2b:2a:a1:4a: f1:2a:41:df:67:c1:a2:e7:42:42:be:b1:56:ee:4e:b8:12:c2: c2:fe:20:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmHabpWkzEpzEsbM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk M2Y2YzYwZDQtOTg0My00Yjk5LWE2NjgtNWY1OGEyNzQ0OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnMjKvESEv41ciJj+KyAWAcIU9tk5MlD8p5L q3sD+U8GdOK3u4HGJ09WA26dGoq5DbInGhP0qhPUq91hk4xabVI/QtXYIUL6+jrj mtq6w3zkTweuV311mpR1pfHt1q8YkYd4rC8/Nf9bxu7Yd07t6VAT5qvu7mvlBshu /C6gFEyxNsAj0MC+n01Wrx4R64fbkaeJz7LGgtSu6sfMcTezWiIik8B4oMVoMO54 4LivFsO89x4FnZDm48/q+zFEHkbW+HEglFgc9cRRNjehAZmkFkZ27eaMgvUXsvmi NrYV5eJNqPpWCXB2E8trfeI+mYDQ7UG/cZZADtrekIzGsA83awIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO3MWzLRYH32c+CnItmICIy7K78YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMTAwMDM2YTUtM2VjYy0z OTUzLWFkNTItNjExNDgzNjI3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQAgOaYAwUH gOadgAMEAIDmvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUtxF2eoLm2ZqUSE1rO4NnDjvdq5BVL14o5Io2 3SZAVaFVqckTY9R6cYMv66ptc14Y3yeSwCqIRWa7B8kX5Ym1nzAA6IX7rJ79Fbly mXJMZmWAPJDBj76uSkiYdyC/3RJqo0jCMuaSKrp2KukP+xd4XVbnnHGwea/Wsc5I 5diVMlL+r1hcMhyvIQmQokOTQwUKV5RFY5tQJuoRBmUkMm9UDQHSBbP4xcC2BtA7 9bwSSATQV+WAZkMvoOTeB7zj4/e6ddFNMgLspcJwAG9pYh4RIlmvKCQwiVCO3nnv Voxg8mYqu3Y8OisqoUrxKkHfZ8Gi50JCvrFW7k64EsLC/iDn -----END CERTIFICATE-----Generated at Fri May 2 04:08:18 2025 by rpki-client