$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa File: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json) Hash identifier: oTu/ZKgpvr+juA224kQeyC/V4uOZ8J8lMeqaBayhuy8= Subject key identifier: B0:BC:92:F7:D6:BD:20:DD:82:8D:69:65:EA:3A:A0:26:33:58:39:9F Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F4328584981D460F55B8E1465BE4C9E00 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 23162 IP address blocks: 128.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:60:f5:5b:8e:14:65:be:4c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=54715153-03bc-41dd-928a-4cf8357fcbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:a7:2c:f8:ed:6c:f5:13:df:1f:56:03:cb: 97:89:8d:a3:35:d0:d5:40:57:3d:a1:ab:09:a1:a5: de:e4:64:cc:07:85:35:89:04:f5:f7:a4:86:f0:c8: 76:0d:18:47:11:38:6a:f2:98:bc:7f:fc:63:5c:b6: 41:d0:8a:d8:f2:27:a7:d1:29:9f:c9:53:53:e2:8c: e4:8b:6e:56:a7:ba:fc:b9:bf:c5:c4:ef:71:54:ca: e1:1d:bf:ac:d8:b7:50:43:ef:2b:b7:4f:4d:94:0b: 7e:72:a1:15:e7:20:de:2c:cf:d7:85:64:a9:72:1a: c7:9c:80:a5:c4:c1:23:8b:48:c9:50:fc:63:b6:be: d7:e2:48:6e:d9:2a:b1:ac:5d:e5:d3:8f:bc:a8:a0: a8:01:4a:63:6f:82:e8:31:c2:fe:a8:70:31:5d:16: d6:ca:c5:61:a7:dd:3c:fa:fb:58:46:55:f2:8f:22: c7:c6:6f:b3:0f:f4:77:37:2e:25:c3:31:ad:d2:37: c8:43:29:86:52:1e:f0:46:f8:e1:40:1c:7a:b2:32: ae:b4:f9:d2:6c:f5:43:fd:21:e5:87:98:a6:75:22: a6:95:0e:6d:f6:0b:91:92:f0:2a:69:25:7e:ef:ef: 6a:cf:32:0d:71:a4:d1:0d:db:69:16:80:42:9a:27: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:92:F7:D6:BD:20:DD:82:8D:69:65:EA:3A:A0:26:33:58:39:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b8:3c:bc:63:e7:e2:6a:1f:4a:27:3d:c7:ac:8f:16:48:91: f8:d9:d3:21:9c:dc:f1:31:2f:db:88:7d:98:d7:85:63:69:7f: b5:4c:5a:c1:52:86:f5:5f:eb:60:56:48:66:7b:6b:d1:67:ec: 01:af:87:f7:47:b9:30:95:80:bb:12:7d:52:80:11:0d:66:a4: d1:0e:6e:a7:42:b1:47:55:4a:af:a8:12:ea:8e:78:ef:ed:fb: b5:a6:0b:2e:81:54:ef:82:12:cd:e4:9c:69:4b:23:84:da:61: 0d:22:52:9c:29:58:ce:34:ba:bd:5a:75:c1:2f:6d:af:c6:de: 3d:68:c6:57:15:6a:06:ec:6c:c0:1c:5c:7c:ed:08:b5:a6:1b: 37:3f:e2:de:0f:f7:b3:20:cd:eb:35:8c:c1:9b:96:2d:8a:07: 4d:37:5d:27:df:6a:e3:8d:68:3a:0e:d4:f2:11:b7:30:60:2d: 8d:f0:2f:af:74:0c:03:4f:9a:b2:3a:6a:ae:1a:8c:af:d9:5c: c4:09:7e:8c:df:69:0b:56:4d:e2:ea:fa:30:0a:39:71:a6:34: 0b:5f:25:16:b9:84:db:90:eb:09:b6:76:29:ca:e0:b2:6d:7a: c2:4d:8c:5f:33:76:2d:a2:0e:81:f1:61:88:0d:15:90:85:93: 5e:b8:df:9d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmB1GD1W44UZb5MngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NTQ3MTUxNTMtMDNiYy00MWRkLTkyOGEtNGNmODM1N2ZjYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ynLPjtbPUT3x9WA8uXiY2jNdDVQFc9oasJ oaXe5GTMB4U1iQT196SG8Mh2DRhHEThq8pi8f/xjXLZB0IrY8ien0SmfyVNT4ozk i25Wp7r8ub/FxO9xVMrhHb+s2LdQQ+8rt09NlAt+cqEV5yDeLM/XhWSpchrHnICl xMEji0jJUPxjtr7X4khu2SqxrF3l04+8qKCoAUpjb4LoMcL+qHAxXRbWysVhp908 +vtYRlXyjyLHxm+zD/R3Ny4lwzGt0jfIQymGUh7wRvjhQBx6sjKutPnSbPVD/SHl h5imdSKmlQ5t9guRkvAqaSV+7+9qzzINcaTRDdtpFoBCmifIywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLC8kvfWvSDdgo1pZeo6oCYzWDmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDliNWM4MGUtZWMyYS0z YTQ0LWE1NmYtZmM2NTk1NjVmZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgLg8vGPn4mofSic9x6yPFkiR+NnTIZzc8TEv24h9mNeFY2l/tUxawVKG 9V/rYFZIZntr0WfsAa+H90e5MJWAuxJ9UoARDWak0Q5up0KxR1VKr6gS6o547+37 taYLLoFU74ISzeScaUsjhNphDSJSnClYzjS6vVp1wS9tr8bePWjGVxVqBuxswBxc fO0ItaYbNz/i3g/3syDN6zWMwZuWLYoHTTddJ99q441oOg7U8hG3MGAtjfAvr3QM A0+asjpqrhqMr9lcxAl+jN9pC1ZN4ur6MAo5caY0C18lFrmE25DrCbZ2Kcrgsm16 wk2MXzN2LaIOgfFhiA0VkIWTXrjfnQ== -----END CERTIFICATE-----Generated at Wed Apr 30 00:12:52 2025 by rpki-client