$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa File: 7044c074-f82f-3009-90ff-30495d0626b0.roa (raw, json) Hash identifier: +DNdz9YIemAKJ1hnieBinZCnhF6pMMRoKsIOCsCh4/c= Subject key identifier: 0A:32:C2:A7:25:A3:DC:7A:D1:65:42:9C:B8:D2:67:4F:87:1E:3F:64 Certificate issuer: /CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Certificate serial: 010D0C9F432858499AF4868504F4413766BF9D58 Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 15830 IP address blocks: 129.176.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:86:85:04:f4:41:37:66:bf:9d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ff35224d-52c1-444c-8fda-34223250e882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:28:9a:6f:e1:4e:0e:1f:39:5f:90:bb:3a: d3:f7:ac:45:8e:78:8e:a4:57:67:d1:ee:95:b3:25: 70:54:92:01:b6:75:21:94:87:00:45:d1:2f:45:4b: 71:25:1c:f5:84:15:aa:e4:2e:2c:30:76:74:24:8c: b8:1b:9c:e6:fd:70:d2:02:75:88:15:4d:e9:52:c8: 8d:45:5e:2a:c0:cf:48:80:0f:4f:52:c6:4a:df:c9: bc:09:4b:b3:02:87:fe:9d:a9:bc:3e:c4:15:3b:8c: 45:90:c8:92:fb:fc:f1:16:5b:bc:91:d6:1d:b9:98: f6:2b:9c:b9:95:87:af:22:bc:91:19:22:c7:12:11: 9c:5b:e9:9a:77:eb:5b:1d:c4:b4:b8:4e:91:71:fe: a3:27:0c:18:c8:2f:c8:0d:65:44:9f:38:4a:f9:eb: 18:25:5b:85:97:bb:76:5d:6d:b0:9b:22:64:53:1f: b2:35:0e:82:8a:a7:59:a6:9a:f2:a8:70:b7:44:1b: d9:e5:04:38:fc:51:b6:2b:37:84:ec:57:fa:e6:9b: 1c:c3:e9:bb:7d:f1:7c:47:07:83:cc:90:9e:53:12: b2:51:09:66:1c:7e:51:d8:ef:82:e1:af:89:cc:98: f4:4f:72:13:66:e8:96:06:82:79:55:98:ea:27:7e: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:C2:A7:25:A3:DC:7A:D1:65:42:9C:B8:D2:67:4F:87:1E:3F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl X509v3 Authority Key Identifier: keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer sbgp-ipAddrBlock: critical IPv4: 129.176.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fb:12:27:44:f8:15:c1:92:a5:21:66:76:75:59:5d:9c:6e: 60:e0:79:5e:09:f2:b5:f8:8e:c5:0a:4e:23:c1:48:08:5e:87: dc:48:69:b0:ae:3e:f9:10:27:c6:21:19:e8:7e:dc:73:3f:8b: 60:b8:c8:25:60:87:a7:5d:c4:51:06:35:69:1c:38:3a:57:e7: ea:15:83:54:7d:c3:e1:f6:a6:42:be:13:84:e9:ed:0c:de:68: 2d:79:18:a8:e8:cc:99:71:28:3f:de:f0:1e:ac:20:bc:34:6a: 9d:0d:d9:1c:5b:62:12:9b:5b:3f:00:a3:88:dc:7e:38:5b:1c: 8d:ac:a2:64:09:d5:fc:4b:3c:68:65:f4:b7:e8:2d:12:a1:24: 4b:6a:61:e7:19:82:2a:d6:06:82:66:30:3d:23:8c:2a:b3:f5: 36:ba:63:0a:7c:c3:40:bd:cd:a1:d2:6a:b4:83:c3:bb:7c:48: 37:65:62:d1:10:28:20:3f:47:12:0e:d1:a4:c0:c0:f3:c6:d1: e6:ac:8e:d3:0e:0f:cb:2a:d7:c2:fa:51:7c:5d:c9:4f:29:84: 76:e9:39:d0:91:3a:5d:02:43:f9:34:bd:81:e9:17:6a:a3:b3: 9d:dd:d7:25:0c:5c:b6:d0:2f:76:d1:e1:5f:b0:b1:b3:29:9b: 72:7d:64:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IaFBPRBN2a/nVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJmNjYzODQtZmE1My00N2ZiLTkzOGEtZjFlNTA2NDAy M2U1MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmYzNTIyNGQtNTJjMS00NDRjLThmZGEtMzQyMjMyNTBlODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XQomm/hTg4fOV+QuzrT96xFjniOpFdn0e6V syVwVJIBtnUhlIcARdEvRUtxJRz1hBWq5C4sMHZ0JIy4G5zm/XDSAnWIFU3pUsiN RV4qwM9IgA9PUsZK38m8CUuzAof+nam8PsQVO4xFkMiS+/zxFlu8kdYduZj2K5y5 lYevIryRGSLHEhGcW+mad+tbHcS0uE6Rcf6jJwwYyC/IDWVEnzhK+esYJVuFl7t2 XW2wmyJkUx+yNQ6CiqdZppryqHC3RBvZ5QQ4/FG2KzeE7Ff65pscw+m7ffF8RweD zJCeUxKyUQlmHH5R2O+C4a+JzJj0T3ITZuiWBoJ5VZjqJ36pAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoywqclo9x60WVCnLjSZ0+HHj9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2 NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1MDY0MDIzZTUvNzA0NGMwNzQtZjgyZi0z MDA5LTkwZmYtMzA0OTVkMDYyNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGJmNjYzODQtZmE1My00N2ZiLTkz OGEtZjFlNTA2NDAyM2U1L2RiZjY2Mzg0LWZhNTMtNDdmYi05MzhhLWYxZTUwNjQw MjNlNS5jcmwwHwYDVR0jBBgwFoAU2cAvW7cA5P+Rm/sAOGgrg1/jqskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1 MDY0MDIzZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgbAbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr7EidE+BXBkqUhZnZ1WV2cbmDgeV4J8rX4jsUKTiPBSAheh9xIabCu PvkQJ8YhGeh+3HM/i2C4yCVgh6ddxFEGNWkcODpX5+oVg1R9w+H2pkK+E4Tp7Qze aC15GKjozJlxKD/e8B6sILw0ap0N2RxbYhKbWz8Ao4jcfjhbHI2somQJ1fxLPGhl 9LfoLRKhJEtqYecZgirWBoJmMD0jjCqz9Ta6Ywp8w0C9zaHSarSDw7t8SDdlYtEQ KCA/RxIO0aTAwPPG0easjtMOD8sq18L6UXxdyU8phHbpOdCROl0CQ/k0vYHpF2qj s53d1yUMXLbQL3bR4V+wsbMpm3J9ZJs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:59 2025 by rpki-client