$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa File: 2ef408ad-35f8-33e4-b29d-64037f1ae171.roa (raw, json) Hash identifier: t9JJS3vYqZsBbrKLL15rKSpX6glARko7pr+wrVV0/Y0= Subject key identifier: 56:FB:86:00:0F:72:A6:F5:C2:9F:1E:64:D7:C6:3C:34:16:45:4C:B2 Certificate issuer: /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Certificate serial: 010D0C9F432858495D896D84028138ECB3866240 Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 2055 IP address blocks: 173.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6d:84:02:81:38:ec:b3:86:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=450582f7-9b38-4b96-8d48-9595af47f24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:be:6e:ed:ea:82:42:92:ce:9e:91:54:ed: e2:a9:95:ad:f0:40:da:c9:7e:26:cb:c5:e4:df:eb: 4f:68:14:65:22:c3:f9:23:b8:73:a1:c9:f2:b5:74: ec:05:6d:01:fc:d3:6b:f7:46:ad:74:66:be:ba:08: 1e:45:3d:cd:64:3d:34:20:ac:95:d4:c2:5f:68:e1: be:df:87:b6:92:c6:8b:a2:92:9b:83:49:5f:a3:2d: 5d:b5:9c:8b:ab:79:46:d0:6b:58:60:47:d5:8c:ae: c5:bf:58:c9:12:65:a5:cf:d5:49:ee:1e:1e:45:22: f6:cd:8a:ca:8c:34:c1:cc:66:8e:39:18:98:91:16: dc:61:1e:2c:5d:85:f4:b1:1c:64:d2:9a:58:5c:7e: 8c:6f:20:30:d0:3f:95:14:a8:c0:bc:16:9a:4f:84: bf:a2:4d:e0:1e:db:43:d4:4e:c4:ab:d1:b6:e4:5a: bf:66:94:c6:ba:97:45:9b:9a:0e:49:f1:50:73:3e: 5b:a0:b6:5c:34:ff:96:d1:f1:64:c3:81:84:f4:76: 60:f1:af:a7:5f:fb:ac:9b:76:45:8c:fd:7d:53:50: 4c:3b:0a:a6:53:4f:20:18:b2:2b:17:1e:35:45:16: 42:b8:d9:eb:8a:af:d5:07:4b:8c:06:d0:97:d6:86: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FB:86:00:0F:72:A6:F5:C2:9F:1E:64:D7:C6:3C:34:16:45:4C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl X509v3 Authority Key Identifier: keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer sbgp-ipAddrBlock: critical IPv4: 173.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:db:77:8a:7b:65:fa:23:98:6a:ae:25:15:b3:87:30:81:9a: b7:b0:c4:17:da:1e:0b:f1:b7:64:cd:03:d2:0a:f3:5d:4e:b8: 1a:39:31:ea:c5:98:55:b2:e6:2e:54:e7:05:21:9d:79:39:be: 05:d2:22:dc:b8:72:2c:91:8e:da:2d:53:9f:b0:de:fb:fc:0b: e0:5b:06:97:17:ae:f6:5a:c8:bc:76:ee:40:82:6c:11:bb:2a: 14:be:fa:73:07:49:a9:61:f0:92:b7:6a:b1:fc:0d:74:c5:0c: 4d:31:49:f9:71:56:40:6c:54:02:99:ef:03:24:57:d1:25:4e: 4a:72:17:7c:c6:af:f2:d4:e7:ca:f2:3b:c2:47:4b:2e:ed:15: a0:38:c0:d6:28:bf:d2:bb:aa:e5:3d:24:2f:72:0f:35:b2:34: a4:58:06:e1:57:ea:cc:38:b7:b8:e4:08:c2:d4:1b:f8:16:f0: ea:fc:86:5e:cd:19:07:be:03:72:9e:72:41:57:ee:3c:7f:fe: 40:94:e2:16:cc:88:a8:12:eb:b1:44:8a:ee:63:d8:52:d5:64: 82:ab:ee:9a:2d:4f:c3:49:5a:95:d7:b1:58:57:16:52:f5:19: b3:5b:38:3d:4c:5c:3a:3e:a4:f6:69:d2:d0:73:d6:79:c9:1f: 2f:aa:36:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiW2EAoE47LOGYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5 MjMxMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDUwNTgyZjctOWIzOC00Yjk2LThkNDgtOTU5NWFmNDdmMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5a+bu3qgkKSzp6RVO3iqZWt8EDayX4my8Xk 3+tPaBRlIsP5I7hzocnytXTsBW0B/NNr90atdGa+uggeRT3NZD00IKyV1MJfaOG+ 34e2ksaLopKbg0lfoy1dtZyLq3lG0GtYYEfVjK7Fv1jJEmWlz9VJ7h4eRSL2zYrK jDTBzGaOORiYkRbcYR4sXYX0sRxk0ppYXH6MbyAw0D+VFKjAvBaaT4S/ok3gHttD 1E7Eq9G25Fq/ZpTGupdFm5oOSfFQcz5boLZcNP+W0fFkw4GE9HZg8a+nX/usm3ZF jP19U1BMOwqmU08gGLIrFx41RRZCuNnriq/VB0uMBtCX1obnRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb7hgAPcqb1wp8eZNfGPDQWRUyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMWY5 NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvMmVmNDA4YWQtMzVmOC0z M2U0LWIyOWQtNjQwMzdmMWFlMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjFmOTc2ZmQtN2ZhMC00MzIzLTk3 ZmEtMzViYjg2OWE5MjMxL2IxZjk3NmZkLTdmYTAtNDMyMy05N2ZhLTM1YmI4Njlh OTIzMS5jcmwwHwYDVR0jBBgwFoAUrpokcZiF5gtdP+4v/cqhapTgJzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJi ODY5YTkyMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrf2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnbd4p7ZfojmGquJRWzhzCBmrewxBfaHgvxt2TNA9IK811OuBo5MerF mFWy5i5U5wUhnXk5vgXSIty4ciyRjtotU5+w3vv8C+BbBpcXrvZayLx27kCCbBG7 KhS++nMHSalh8JK3arH8DXTFDE0xSflxVkBsVAKZ7wMkV9ElTkpyF3zGr/LU58ry O8JHSy7tFaA4wNYov9K7quU9JC9yDzWyNKRYBuFX6sw4t7jkCMLUG/gW8Or8hl7N GQe+A3KeckFX7jx//kCU4hbMiKgS67FEiu5j2FLVZIKr7potT8NJWpXXsVhXFlL1 GbNbOD1MXDo+pPZp0tBz1nnJHy+qNtQ= -----END CERTIFICATE-----Generated at Sun Apr 27 19:45:42 2025 by rpki-client