$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa File: c5492a25-61e2-3397-848b-141163ce58ef.roa (raw, json) Hash identifier: c+KYBHHgJ2DhFv9or8XkyL0yB9G+FiMmzN5tBIKV8cg= Subject key identifier: 33:2B:D6:40:0E:D7:6B:83:50:50:17:51:E8:1F:65:B6:13:3D:76:1F Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Certificate serial: 010D0C9F432858494B641CDEC1D80A655DC66B80 Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397511 IP address blocks: 128.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1c:de:c1:d8:0a:65:5d:c6:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=95cad59f-a4ef-4af8-b8fd-1e16d34aa6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:08:fd:8c:b7:12:11:10:bd:d3:ef:18:56: 0a:fd:4f:0e:a8:89:44:8a:b1:a6:b5:fe:27:2f:6b: 47:bb:83:a0:6d:81:c5:08:5a:18:83:db:22:5a:0a: cf:5a:42:06:4e:78:94:33:66:b0:49:54:fd:13:2f: 87:af:b0:a0:11:89:62:3b:d3:2c:69:af:75:fd:a7: d3:6a:80:ad:ea:e8:34:56:41:d2:fd:87:0e:90:f7: 8a:18:29:a5:c8:ec:73:ec:d2:07:67:0d:4f:6d:8a: 2f:5a:a1:7b:f5:63:3e:91:d8:1c:49:99:01:46:3f: bd:18:6b:1a:b5:12:92:69:03:d8:a3:6d:ea:24:58: 28:ad:9c:68:3e:eb:6b:3d:2b:14:3f:34:af:68:33: d4:07:11:19:3a:64:c6:e3:b9:08:1e:01:12:de:10: c7:71:9b:91:ab:e1:69:9c:4b:4e:1d:c4:1e:ad:df: 13:c1:bd:96:c1:5b:2a:59:bf:84:98:7d:6b:91:50: ce:0b:f7:3a:3d:b7:bc:cb:b0:4e:eb:ca:46:e8:21: 46:d3:c5:fc:26:73:03:e4:5f:25:db:c6:a5:a6:49: ac:0f:29:4e:57:db:07:e2:b0:63:b2:50:12:14:f1: 9a:fc:ae:c6:35:06:aa:4a:3d:74:25:e8:8f:3c:46: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2B:D6:40:0E:D7:6B:83:50:50:17:51:E8:1F:65:B6:13:3D:76:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl X509v3 Authority Key Identifier: keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer sbgp-ipAddrBlock: critical IPv4: 128.211.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d4:05:72:d1:2d:f5:f8:2e:d3:9d:3f:d9:9f:4e:4f:a4:81: ce:74:a0:00:57:1f:13:1c:85:20:fd:5d:06:fd:f8:41:5c:95: 5d:43:41:d9:88:63:2c:8f:02:1c:1a:db:11:1b:44:c9:99:69: b8:2f:84:e2:5f:e8:ba:f7:38:1d:22:d5:aa:81:5a:87:78:ec: 51:fd:90:f8:ca:c1:4b:dd:48:d0:43:69:9c:58:02:36:ed:da: 68:70:28:76:1f:c7:0a:4a:a2:75:bc:79:77:a3:28:a8:b5:f5: c1:fa:47:e8:81:c4:45:8d:4c:e4:4b:5c:5d:d5:51:00:4b:6d: 66:fa:d2:79:02:ed:8e:6a:45:4d:0d:42:b8:11:b3:ba:bc:72: 78:73:50:0d:b6:b1:55:a5:f4:81:0e:e0:b0:aa:fb:b7:ab:ea: 04:57:b8:00:63:10:b6:5d:30:8b:02:6f:48:90:81:2b:c6:1c: 95:e0:83:05:47:23:47:ab:93:dc:5d:ad:86:1e:86:ef:be:74: 6b:bc:76:e2:e0:97:59:8e:52:0b:f5:37:84:2e:3d:c3:ea:82: 55:77:d9:5d:af:f0:d0:98:a9:a7:17:de:01:2e:8d:ed:83:fc: f2:6a:70:36:26:10:b4:16:ca:94:62:34:40:db:12:08:78:20: fe:c6:fe:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElLZBzewdgKZV3Ga4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3NDAxZGUtNGIwYS00NTMyLWFjMDgtZGJhOGIwNTg4 YzQ4MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTVjYWQ1OWYtYTRlZi00YWY4LWI4ZmQtMWUxNmQzNGFhNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ8I/Yy3EhEQvdPvGFYK/U8OqIlEirGmtf4n L2tHu4OgbYHFCFoYg9siWgrPWkIGTniUM2awSVT9Ey+Hr7CgEYliO9Msaa91/afT aoCt6ug0VkHS/YcOkPeKGCmlyOxz7NIHZw1PbYovWqF79WM+kdgcSZkBRj+9GGsa tRKSaQPYo23qJFgorZxoPutrPSsUPzSvaDPUBxEZOmTG47kIHgES3hDHcZuRq+Fp nEtOHcQerd8Twb2WwVsqWb+EmH1rkVDOC/c6Pbe8y7BO68pG6CFG08X8JnMD5F8l 28alpkmsDylOV9sH4rBjslASFPGa/K7GNQaqSj10JeiPPEY9fwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDMr1kAO12uDUFAXUegfZbYTPXYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0 MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4YjA1ODhjNDgvYzU0OTJhMjUtNjFlMi0z Mzk3LTg0OGItMTQxMTYzY2U1OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTA3NDAxZGUtNGIwYS00NTMyLWFj MDgtZGJhOGIwNTg4YzQ4L2EwNzQwMWRlLTRiMGEtNDUzMi1hYzA4LWRiYThiMDU4 OGM0OC5jcmwwHwYDVR0jBBgwFoAULvOxC87kwzSIVBcirGl2pVE0A4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4 YjA1ODhjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgNMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALNQFctEt9fgu050/2Z9OT6SBznSgAFcfExyFIP1dBv34QVyVXUNB2Yhj LI8CHBrbERtEyZlpuC+E4l/ouvc4HSLVqoFah3jsUf2Q+MrBS91I0ENpnFgCNu3a aHAodh/HCkqidbx5d6MoqLX1wfpH6IHERY1M5EtcXdVRAEttZvrSeQLtjmpFTQ1C uBGzurxyeHNQDbaxVaX0gQ7gsKr7t6vqBFe4AGMQtl0wiwJvSJCBK8YcleCDBUcj R6uT3F2thh6G7750a7x24uCXWY5SC/U3hC49w+qCVXfZXa/w0JippxfeAS6N7YP8 8mpwNiYQtBbKlGI0QNsSCHgg/sb+QQ== -----END CERTIFICATE-----Generated at Wed Apr 30 07:35:51 2025 by rpki-client