$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa File: 598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa (raw, json) Hash identifier: RU7wAkLojaEtlT3z8kPIJtfn7WtQ/NFj7Im0ktlsiqY= Subject key identifier: 20:02:ED:93:C5:2D:5B:1C:FC:47:3F:7B:34:D5:A7:85:F1:BF:03:B1 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F43285849D594DC8F20A6E88E4A749780 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 13444 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:dc:8f:20:a6:e8:8e:4a:74:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=30199b7f-4758-49a0-846f-245890b2e288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:ee:48:82:26:d6:d0:c3:0a:4e:d4:4b:4f: df:ef:1f:3f:7e:0b:95:80:6b:b3:e1:65:0c:fb:17: 59:8b:91:d3:6d:4b:30:00:9e:9d:4f:0f:4f:5b:e8: e3:13:8e:74:9a:70:62:ee:ab:2d:02:f9:3f:1e:78: 32:a8:5c:36:77:76:3e:44:6e:ed:48:40:d8:38:63: d5:71:da:7d:ce:d1:b4:cb:73:ea:ed:d8:65:34:0f: df:10:2c:4d:9c:30:cd:f9:2c:c0:e8:04:4c:aa:32: 41:c9:db:99:2d:a2:4f:bd:70:76:6f:28:80:b2:30: 4d:c1:07:9c:4e:4a:44:9f:19:ba:9c:22:63:49:32: 97:36:13:1d:23:41:68:fb:9f:f5:d1:22:ef:5a:ca: 34:9c:9d:7b:ae:9a:0f:40:59:62:c3:e9:c9:38:a9: ae:b5:56:0e:f6:36:09:e0:23:6f:5b:df:ad:f8:50: be:64:6a:c1:58:7b:4a:34:9a:91:1f:cd:7c:5c:92: bc:04:6e:0c:4f:63:8b:5c:66:05:e5:ed:3f:cd:2d: 96:a0:65:ab:d5:66:64:c7:36:60:d4:fb:f0:0a:e2: 82:53:02:4b:99:bc:66:e6:f2:8a:f9:c9:a2:7a:05: 1f:19:23:81:ef:37:cb:24:42:0a:f0:07:08:e3:d1: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:02:ED:93:C5:2D:5B:1C:FC:47:3F:7B:34:D5:A7:85:F1:BF:03:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9d:fd:3d:c8:4a:8d:79:56:44:81:67:5a:7b:8c:6f:38:d7: 3e:d5:21:82:6a:84:2d:d6:e3:f7:b7:f3:32:f2:cc:5e:01:90: 6b:0a:01:19:b2:29:e6:2f:65:08:b3:b0:9a:f4:7b:4c:2a:2d: 39:69:39:d5:47:07:7b:2e:1b:56:e9:9f:f3:bd:c5:06:51:0a: 72:15:cb:fc:84:07:e6:e7:23:6e:5e:35:23:50:fb:ae:c9:ad: 71:a3:05:8b:71:aa:c0:33:1c:1c:7f:12:60:27:20:a3:a8:5f: 66:9f:04:fb:33:a6:85:d7:10:19:43:cd:5f:e1:81:96:50:7f: b4:d5:03:bb:7e:ea:93:02:80:33:ab:80:7b:54:c2:f4:8d:91: 72:d0:4e:a7:0c:09:84:49:77:25:f3:8b:e1:14:65:88:11:56: e5:1a:8d:31:61:a8:6d:b5:6e:c6:37:81:f2:ca:e9:56:7f:2e: ca:65:08:f0:79:95:10:f6:19:38:d8:10:b4:6f:3d:0e:7c:25: 2b:93:8e:09:0a:43:7a:9b:84:09:b9:02:be:70:41:5e:39:08: f0:66:21:6b:6d:44:0b:52:e1:8d:86:fd:56:59:5d:98:8f:39: ba:d4:84:9c:ec:98:04:92:ff:4b:db:57:13:b6:be:99:26:cc: 69:09:84:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNyPIKbojkp0l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MzAxOTliN2YtNDc1OC00OWEwLTg0NmYtMjQ1ODkwYjJlMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxLuSIIm1tDDCk7US0/f7x8/fguVgGuz4WUM +xdZi5HTbUswAJ6dTw9PW+jjE450mnBi7qstAvk/HngyqFw2d3Y+RG7tSEDYOGPV cdp9ztG0y3Pq7dhlNA/fECxNnDDN+SzA6ARMqjJByduZLaJPvXB2byiAsjBNwQec TkpEnxm6nCJjSTKXNhMdI0Fo+5/10SLvWso0nJ17rpoPQFliw+nJOKmutVYO9jYJ 4CNvW9+t+FC+ZGrBWHtKNJqRH818XJK8BG4MT2OLXGYF5e0/zS2WoGWr1WZkxzZg 1PvwCuKCUwJLmbxm5vKK+cmiegUfGSOB7zfLJEIK8AcI49G3iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAC7ZPFLVsc/Ec/ezTVp4XxvwOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTk4ZGZiODQtOTc2ZC0z NTk0LWE3M2YtYzFiYzhmOTZhYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqd/T3ISo15VkSBZ1p7jG841z7VIYJqhC3W4/e38zLyzF4BkGsKARmy KeYvZQizsJr0e0wqLTlpOdVHB3suG1bpn/O9xQZRCnIVy/yEB+bnI25eNSNQ+67J rXGjBYtxqsAzHBx/EmAnIKOoX2afBPszpoXXEBlDzV/hgZZQf7TVA7t+6pMCgDOr gHtUwvSNkXLQTqcMCYRJdyXzi+EUZYgRVuUajTFhqG21bsY3gfLK6VZ/LsplCPB5 lRD2GTjYELRvPQ58JSuTjgkKQ3qbhAm5Ar5wQV45CPBmIWttRAtS4Y2G/VZZXZiP ObrUhJzsmASS/0vbVxO2vpkmzGkJhJ4= -----END CERTIFICATE-----Generated at Mon Jun 16 04:08:16 2025 by rpki-client