$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa File: ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa (raw, json) Hash identifier: JvtQIQy9A1odLWQAy7ZTZbirm77NqE0RkE8+BPb7Ttg= Subject key identifier: 16:2B:17:45:60:C4:6F:24:CD:2E:4C:5E:F9:72:59:BB:32:C5:A8:63 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584944692F5E7FA3E440A5B22DAE Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 14061 IP address blocks: 134.199.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2f:5e:7f:a3:e4:40:a5:b2:2d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=5fc06ed4-d13a-4353-ae34-ec269a522193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:84:14:dd:5b:c6:4d:74:17:c0:8f:17:ad: c7:86:8c:6b:c9:85:f5:9f:e6:22:94:e7:cb:33:af: 54:8d:e2:2a:0f:71:38:a5:bc:a8:58:65:97:3a:ae: 44:a6:0f:86:4c:1f:dd:ca:81:96:25:d7:b7:c6:c3: 21:81:8f:1a:86:c6:13:68:1c:cd:18:0b:2b:64:5c: c6:a0:d9:b0:19:78:43:04:f3:6a:f4:21:66:50:1f: c2:12:e0:3f:cc:29:02:bb:c0:30:ca:6f:3c:41:85: 6f:c6:52:d9:e7:75:02:b0:ce:23:c9:68:a1:c2:91: da:10:b4:5e:15:72:82:da:66:ff:6b:81:d6:ae:78: c1:71:f4:c7:f4:9c:32:12:9b:ea:6a:c0:d2:bb:89: 25:fe:97:7f:7e:6e:6d:dd:6a:00:ca:7d:74:d6:14: b7:0e:a1:2c:47:8b:f3:b6:45:f3:d4:9b:89:24:de: 18:a5:eb:69:49:a7:ff:5f:a1:2f:e3:2d:6f:48:c8: b5:53:61:53:b6:0e:24:34:01:ce:b2:bf:1b:ca:bd: 92:20:6f:fb:55:0e:40:1e:df:80:82:19:1e:19:d9: 63:3d:b1:d0:bb:a4:3c:8d:25:77:73:c3:41:e8:89: 2a:7c:27:ef:c1:49:98:d1:a9:9e:c4:f7:c1:cc:91: 5b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:17:45:60:C4:6F:24:CD:2E:4C:5E:F9:72:59:BB:32:C5:A8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.199.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:75:b3:9d:bb:6a:9e:f0:87:e9:63:c8:0b:13:c3:39:5c:eb: 64:e7:98:5d:ce:bc:ce:e6:33:ec:c9:92:35:aa:6a:9c:3b:68: 41:66:ad:ed:d4:c6:b5:d7:9e:56:a7:91:7e:f5:69:28:d6:da: 86:f6:c0:e1:a8:e3:ec:73:9b:f1:2b:08:94:e1:cc:12:8b:78: 98:dc:c0:95:8f:4a:6e:b7:31:b9:c2:b0:7d:62:79:35:1d:a9: 2c:c2:5d:27:19:98:5c:22:b9:a3:45:22:00:d4:64:d3:0b:c1: 8f:df:ce:80:7b:54:0d:63:7d:5b:41:ae:c4:bc:d8:be:4b:e4: cc:ae:63:26:00:22:ee:b7:ba:b6:63:ea:8b:c8:39:e5:45:da: fa:39:fe:17:ea:38:17:79:f9:aa:3a:5a:7e:7e:f2:da:4d:a4: 1f:dd:61:98:38:46:7c:98:0a:06:20:e7:87:2b:50:dc:c3:28: 70:57:a2:40:12:0f:e8:b0:ae:2b:6e:12:36:07:15:bc:e5:c6: d9:a8:a0:82:14:39:bf:13:ad:87:82:8d:68:ab:87:b3:4c:47: e5:ed:a6:f6:f9:a1:a5:9c:78:2c:c6:07:3d:02:00:38:a9:65: a9:ef:9d:97:18:b5:5d:79:ad:49:97:85:17:f7:ed:7b:1d:ba: fd:71:29:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaS9ef6PkQKWyLa4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NWZjMDZlZDQtZDEzYS00MzUzLWFlMzQtZWMyNjlhNTIyMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9WEFN1bxk10F8CPF63HhoxryYX1n+YilOfL M69UjeIqD3E4pbyoWGWXOq5Epg+GTB/dyoGWJde3xsMhgY8ahsYTaBzNGAsrZFzG oNmwGXhDBPNq9CFmUB/CEuA/zCkCu8Awym88QYVvxlLZ53UCsM4jyWihwpHaELRe FXKC2mb/a4HWrnjBcfTH9JwyEpvqasDSu4kl/pd/fm5t3WoAyn101hS3DqEsR4vz tkXz1JuJJN4YpetpSaf/X6Ev4y1vSMi1U2FTtg4kNAHOsr8byr2SIG/7VQ5AHt+A ghkeGdljPbHQu6Q8jSV3c8NB6IkqfCfvwUmY0amexPfBzJFbKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYrF0VgxG8kzS5MXvlyWbsyxahjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWUyOWUxYzMtOGU4Ny0z YjYwLWFiOGYtYzFmNjU2NGU1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF1s527ap7wh+ljyAsTwzlc62TnmF3OvM7mM+zJkjWqapw7aEFmre3U xrXXnlankX71aSjW2ob2wOGo4+xzm/ErCJThzBKLeJjcwJWPSm63MbnCsH1ieTUd qSzCXScZmFwiuaNFIgDUZNMLwY/fzoB7VA1jfVtBrsS82L5L5MyuYyYAIu63urZj 6ovIOeVF2vo5/hfqOBd5+ao6Wn5+8tpNpB/dYZg4RnyYCgYg54crUNzDKHBXokAS D+iwrituEjYHFbzlxtmooIIUOb8TrYeCjWirh7NMR+Xtpvb5oaWceCzGBz0CADip ZanvnZcYtV15rUmXhRf37Xsduv1xKVI= -----END CERTIFICATE-----Generated at Sat Apr 5 20:19:06 2025 by rpki-client