$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa File: c8643991-520c-3a83-820e-df5dfd8121e9.roa (raw, json) Hash identifier: v7pL31htWFcUWczyZCMyUGbrTWzKYWyd31FXnkRr0pY= Subject key identifier: 09:35:CF:BF:65:E0:A3:68:6E:B8:E3:DE:28:DD:AE:9A:CD:B4:E7:53 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F43285849A7C2F6261B0A351481793300 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa Signing time: Sat 26 Apr 2025 15:06:39 +0000 ROA not before: Sat 26 Apr 2025 15:06:39 +0000 ROA not after: Fri 25 Jul 2025 15:06:39 +0000 asID: 213990 IP address blocks: 128.254.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:c2:f6:26:1b:0a:35:14:81:79:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Apr 26 15:06:39 2025 GMT Not After : Jul 25 15:06:39 2025 GMT Subject: CN=481f4468-2476-41f5-9152-81aeb2312e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:c6:d3:e0:e4:25:1d:43:9c:b9:71:dc:1f: 4a:f5:4f:b8:ec:f2:65:be:07:d3:ac:cf:4a:ce:b4: fc:c3:4a:34:60:7d:c1:31:35:af:17:50:05:3c:b4: 9d:07:a0:82:8c:14:9f:b2:a6:a7:1b:33:85:58:e5: 89:c8:c9:8c:2c:0d:b2:02:3a:ad:64:af:05:bb:05: 3d:54:47:16:1f:fe:f4:f5:d6:39:aa:de:5e:87:fa: 09:da:7f:cb:26:8c:ad:c0:87:2b:29:c1:c4:6a:36: f0:3b:98:e0:df:34:c3:8f:29:0e:1b:6f:75:17:ba: 92:ef:8c:03:8b:c8:ba:d0:07:57:d2:80:0d:49:9a: 8b:59:0a:8d:20:51:f9:a6:5f:9b:0a:1f:e7:fd:5b: a4:04:50:43:65:82:81:f6:41:b4:78:6c:43:e7:d5: b0:99:68:6a:8c:be:3f:57:a8:69:78:cf:39:13:59: f0:0a:8c:1a:01:67:2f:92:a8:61:45:3b:96:f2:32: 19:37:1a:02:56:f7:6b:78:1f:c4:5a:57:ff:76:82: 99:e1:e0:78:4a:e9:bb:33:51:5f:b8:0e:5b:84:d6: 03:a7:4e:b0:08:ce:a7:a3:fa:0d:a8:76:3b:24:56: 1a:e3:7c:e2:7e:1e:bd:ff:c6:05:0f:77:b6:9a:59: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:35:CF:BF:65:E0:A3:68:6E:B8:E3:DE:28:DD:AE:9A:CD:B4:E7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/c8643991-520c-3a83-820e-df5dfd8121e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a2:56:fb:ba:ad:37:1b:20:1b:f2:d5:7e:0e:35:5d:a8:f1: 8c:3c:81:a7:f2:bc:49:1c:5d:ce:a5:79:f1:0e:25:db:c4:78: 45:a1:35:b0:b8:62:12:b6:a1:09:c8:26:e2:68:7a:fd:6c:f3: b7:5a:8d:99:54:81:33:2d:3e:ad:bf:4e:c5:4b:04:9c:2f:b2: c7:36:63:c2:58:f6:c1:02:76:1a:75:bd:0f:b2:9c:45:50:29: a5:2d:ae:24:0c:cf:9d:bc:3b:b9:5d:0e:06:3b:a2:aa:d7:3b: 34:cd:56:2a:3e:c3:c7:6e:84:56:ae:ef:1a:e5:06:9f:33:23: b3:b8:f6:ae:5d:cf:3d:01:68:89:3c:4e:7c:67:fc:ab:2b:9b: a8:a7:f5:bc:6d:12:bd:89:91:c1:e3:08:e6:9a:3d:ed:ee:02: d1:a2:26:1d:e4:a6:d7:60:95:6c:1d:c5:aa:93:10:e1:40:08: 2b:2c:f8:43:bb:ab:de:d6:b1:b7:63:26:7b:ac:0a:07:d0:c1: 50:37:1b:fc:5d:f4:c5:cf:2d:93:b4:6b:b7:2e:1f:e0:d6:40: 64:8b:e2:13:54:6b:38:ef:c8:1a:c2:b1:d3:c5:23:01:a5:23: fa:bd:39:73:e8:ac:ed:e0:ae:22:79:5f:af:f7:7c:b9:1c:78: 03:d6:62:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnwvYmGwo1FIF5MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDQyNjE1MDYzOVoXDTI1MDcyNTE1MDYzOVowLzEtMCsGA1UEAxMk NDgxZjQ0NjgtMjQ3Ni00MWY1LTkxNTItODFhZWIyMzEyZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMTG0+DkJR1DnLlx3B9K9U+47PJlvgfTrM9K zrT8w0o0YH3BMTWvF1AFPLSdB6CCjBSfsqanGzOFWOWJyMmMLA2yAjqtZK8FuwU9 VEcWH/709dY5qt5eh/oJ2n/LJoytwIcrKcHEajbwO5jg3zTDjykOG291F7qS74wD i8i60AdX0oANSZqLWQqNIFH5pl+bCh/n/VukBFBDZYKB9kG0eGxD59WwmWhqjL4/ V6hpeM85E1nwCowaAWcvkqhhRTuW8jIZNxoCVvdreB/EWlf/doKZ4eB4Sum7M1Ff uA5bhNYDp06wCM6no/oNqHY7JFYa43zifh69/8YFD3e2mllqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk1z79l4KNobrjj3ijdrprNtOdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYzg2NDM5OTEtNTIwYy0z YTgzLTgyMGUtZGY1ZGZkODEyMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP67MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOiVvu6rTcbIBvy1X4ONV2o8Yw8gafyvEkcXc6lefEOJdvEeEWhNbC4 YhK2oQnIJuJoev1s87dajZlUgTMtPq2/TsVLBJwvssc2Y8JY9sECdhp1vQ+ynEVQ KaUtriQMz528O7ldDgY7oqrXOzTNVio+w8duhFau7xrlBp8zI7O49q5dzz0BaIk8 Tnxn/Ksrm6in9bxtEr2JkcHjCOaaPe3uAtGiJh3kptdglWwdxaqTEOFACCss+EO7 q97WsbdjJnusCgfQwVA3G/xd9MXPLZO0a7cuH+DWQGSL4hNUazjvyBrCsdPFIwGl I/q9OXPorO3griJ5X6/3fLkceAPWYis= -----END CERTIFICATE-----Generated at Wed Apr 30 00:13:02 2025 by rpki-client