$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa File: a680df6e-155d-3d93-babb-124b8a696bd5.roa (raw, json) Hash identifier: kZdEmMc1scf8+pa7mW9xO4MiNhEFFz7FAWjKq8nvV40= Subject key identifier: 03:33:CF:97:73:54:16:9F:78:06:CD:00:F1:70:A3:35:C8:32:45:76 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F43285848E86660C17B154D0221BC8D80 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 46672 IP address blocks: 199.30.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:c1:7b:15:4d:02:21:bc:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=e06bd6d1-40c5-4ecf-9c61-4e7311d6d194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:95:e7:8f:5c:48:9c:ef:18:2d:eb:9a:49: ad:cc:73:09:bb:f4:51:1d:39:00:1e:a0:c1:bf:68: cb:34:04:2f:90:06:b5:3c:14:a5:12:f2:d6:d4:ba: 5f:fc:10:62:16:d2:4b:10:83:54:45:ad:01:2e:57: f2:8a:e7:0c:be:32:d8:68:a2:9f:6a:6a:1b:bb:38: 7a:a3:3c:e4:6a:c2:12:b3:3c:0b:03:7d:79:02:1e: 73:0d:6e:58:37:f0:f4:65:b4:7b:33:11:e7:2f:ee: 72:39:0b:c9:14:ed:79:8f:75:b7:82:0c:37:bb:56: e2:0c:16:b6:08:6c:ad:17:af:59:4c:6b:66:a5:1e: db:51:8d:1c:0d:c4:93:06:db:cd:12:08:c4:e5:22: ae:ec:98:19:b3:00:03:5b:ef:22:1c:29:7f:8f:54: 44:cb:d4:41:5b:56:48:70:34:ab:81:ba:96:0a:d3: ce:70:b7:4b:0c:2d:2c:fe:b2:dc:02:c9:9f:3c:23: f9:00:65:b2:45:39:74:f3:4f:01:66:8f:e4:05:a6: 3d:04:b7:a4:63:6d:38:18:08:93:b0:d5:8c:e3:f6: 29:c7:78:06:56:43:87:78:d7:7a:ac:8c:9c:24:98: 80:79:9d:db:e8:d4:4e:f2:97:12:23:c5:2e:5f:b2: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:33:CF:97:73:54:16:9F:78:06:CD:00:F1:70:A3:35:C8:32:45:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9b:dd:92:1b:1d:b2:b7:d3:ca:56:2b:d3:2f:db:34:a8:a7: 37:c4:7b:5a:52:97:b9:5c:cc:df:d1:b1:af:45:03:a2:ae:85: 82:78:e0:70:df:28:2f:5e:96:59:a1:4a:7e:7e:b8:f4:96:5b: 93:f7:5b:fe:32:1b:94:6a:18:e1:87:07:d0:f0:e2:87:de:75: 84:fa:95:45:2a:83:78:f6:22:b1:44:24:6f:0b:5d:7b:e4:5b: d0:40:9e:a5:6b:98:2d:de:7b:3e:c7:f8:cb:b9:46:f0:94:83: c4:3b:67:ab:a4:d1:e9:8a:3d:52:98:e9:81:46:84:76:46:27: b7:4d:3b:bc:49:d7:82:cb:5f:bc:b0:89:11:29:3d:67:89:fa: 31:fe:fc:c6:6a:07:c4:a3:04:2d:d2:94:3c:9a:c6:28:f0:35: 3b:4e:c1:d9:5f:28:cd:71:81:63:22:c2:eb:76:bf:6d:14:06: f2:3a:8b:ec:39:be:ee:77:15:83:ec:c5:38:4d:36:d6:3d:af: c6:82:c1:65:c7:3e:01:4d:f5:03:ab:fe:a8:f5:4f:7e:44:51: 45:2f:d8:b9:27:83:f0:f1:ed:9b:f9:2b:fc:12:8c:36:5a:64: 51:a5:c4:f8:eb:61:76:83:fd:ee:96:92:51:b6:54:20:d3:b1: 62:ee:bd:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmDBexVNAiG8jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZTA2YmQ2ZDEtNDBjNS00ZWNmLTljNjEtNGU3MzExZDZkMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc+V549cSJzvGC3rmkmtzHMJu/RRHTkAHqDB v2jLNAQvkAa1PBSlEvLW1Lpf/BBiFtJLEINURa0BLlfyiucMvjLYaKKfamobuzh6 ozzkasISszwLA315Ah5zDW5YN/D0ZbR7MxHnL+5yOQvJFO15j3W3ggw3u1biDBa2 CGytF69ZTGtmpR7bUY0cDcSTBtvNEgjE5SKu7JgZswADW+8iHCl/j1REy9RBW1ZI cDSrgbqWCtPOcLdLDC0s/rLcAsmfPCP5AGWyRTl0808BZo/kBaY9BLekY204GAiT sNWM4/Ypx3gGVkOHeNd6rIycJJiAeZ3b6NRO8pcSI8UuX7KW5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMzz5dzVBafeAbNAPFwozXIMkV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvYTY4MGRmNmUtMTU1ZC0z ZDkzLWJhYmItMTI0YjhhNjk2YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmb3ZIbHbK308pWK9Mv2zSopzfEe1pSl7lczN/Rsa9FA6KuhYJ44HDf KC9ellmhSn5+uPSWW5P3W/4yG5RqGOGHB9Dw4ofedYT6lUUqg3j2IrFEJG8LXXvk W9BAnqVrmC3eez7H+Mu5RvCUg8Q7Z6uk0emKPVKY6YFGhHZGJ7dNO7xJ14LLX7yw iREpPWeJ+jH+/MZqB8SjBC3SlDyaxijwNTtOwdlfKM1xgWMiwut2v20UBvI6i+w5 vu53FYPsxThNNtY9r8aCwWXHPgFN9QOr/qj1T35EUUUv2Lkng/Dx7Zv5K/wSjDZa ZFGlxPjrYXaD/e6WklG2VCDTsWLuvd8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:27 2025 by rpki-client