$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa File: d804a065-83d8-315c-862b-f13fb15f699a.roa (raw, json) Hash identifier: EnZkYQvnZ/WnnHg7r9/J73pk/aTWX0vq/rqrmnlnvIs= Subject key identifier: 64:E6:80:3A:F0:9E:E5:5F:BD:0F:6F:E8:DA:15:F7:3C:14:10:F3:49 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285849244E7D92662663DB028A9700 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14061 IP address blocks: 165.232.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7d:92:66:26:63:db:02:8a:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=1521e17f-2647-4626-89eb-5d5ce91c9c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:a6:1b:29:4c:4a:d2:cf:f9:ce:3b:64:e4: 60:49:da:c7:db:16:c2:c0:3c:a0:80:9e:da:3b:e1: 1b:fa:b8:a7:f8:1d:c2:50:54:67:d1:0b:57:50:98: df:ae:3a:45:f5:21:e0:8d:a8:84:0c:4d:f7:f4:cc: c8:bd:af:79:ab:63:0f:17:dd:3e:42:6c:f1:af:5e: f4:6c:12:61:9c:0f:a9:8f:a1:4a:2d:a4:28:80:0f: 95:29:4c:e1:f9:29:27:92:a8:98:1f:25:22:cc:5a: 06:b5:89:6a:7d:97:83:52:21:06:3a:06:3a:34:09: aa:9c:1d:fc:aa:8c:f2:0c:3d:ea:fb:27:38:63:f3: e1:47:a5:70:05:ab:1e:44:47:10:7c:2e:ed:b2:a9: 3f:e5:83:22:14:81:27:8d:82:10:64:b7:18:97:c7: 89:f5:98:1d:fb:fd:0b:0e:d6:fa:47:60:78:af:ec: 00:a7:a1:a6:a7:3d:b7:61:fd:d5:30:53:8c:96:a8: 41:30:80:2a:05:b1:4e:78:36:da:15:12:c0:f8:4a: 44:8c:62:30:5c:00:aa:cb:11:f2:cd:1f:f5:4c:c2: 99:1f:9b:30:1a:dc:4d:b2:4d:59:6d:0f:44:42:ec: 90:56:d4:01:f1:a2:29:e0:1e:20:55:29:0a:6d:96: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E6:80:3A:F0:9E:E5:5F:BD:0F:6F:E8:DA:15:F7:3C:14:10:F3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 165.232.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ca:cc:16:97:b4:5f:2e:d5:cc:74:b4:bc:8b:4d:de:d8:57: 56:0f:9e:13:b9:59:2d:a4:bb:03:1c:c5:7a:4a:66:cb:fc:15: 4d:ba:06:bb:53:c4:7b:8b:db:ee:d0:1e:cd:da:9d:fe:47:a5: 10:75:f5:08:09:d5:44:42:32:ac:ce:6c:2c:64:ea:07:ef:8f: 1d:ca:26:e6:ef:fe:50:52:14:c9:0d:ba:3b:61:06:02:18:50: 57:e7:bb:b1:1c:0a:21:aa:ac:bf:a6:11:67:67:eb:19:60:6d: c1:52:33:04:52:b6:ed:9d:cb:0c:90:d9:b5:52:5e:40:48:46: 42:33:93:69:89:7e:8f:d1:b6:bf:ca:16:d2:7d:6e:8d:a8:a7: 89:7e:ba:74:80:ff:d7:ef:28:3f:2a:ba:97:60:de:a6:64:e3: 4a:62:75:80:93:bb:e8:0e:4c:52:6f:eb:bd:f9:84:e2:ba:61: 3f:ed:16:50:f3:c4:4f:62:2e:89:a3:c3:fd:80:b2:d7:00:0b: 6c:0a:a5:02:b2:04:41:31:4a:04:88:ec:98:90:e9:c0:83:91: 0b:66:f9:58:92:ed:6e:ba:66:6b:1e:92:93:74:ea:24:83:d5: de:8a:ee:0b:bb:2f:95:92:c8:d1:5b:94:11:7e:4c:19:03:83: ed:33:72:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTn2SZiZj2wKKlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MTUyMWUxN2YtMjY0Ny00NjI2LTg5ZWItNWQ1Y2U5MWM5Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikumGylMStLP+c47ZORgSdrH2xbCwDyggJ7a O+Eb+rin+B3CUFRn0QtXUJjfrjpF9SHgjaiEDE339MzIva95q2MPF90+Qmzxr170 bBJhnA+pj6FKLaQogA+VKUzh+SknkqiYHyUizFoGtYlqfZeDUiEGOgY6NAmqnB38 qozyDD3q+yc4Y/PhR6VwBaseREcQfC7tsqk/5YMiFIEnjYIQZLcYl8eJ9Zgd+/0L Dtb6R2B4r+wAp6Gmpz23Yf3VMFOMlqhBMIAqBbFOeDbaFRLA+EpEjGIwXACqyxHy zR/1TMKZH5swGtxNsk1ZbQ9EQuyQVtQB8aIp4B4gVSkKbZbIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTmgDrwnuVfvQ9v6NoV9zwUEPNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDgwNGEwNjUtODNkOC0z MTVjLTg2MmItZjEzZmIxNWY2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpeiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbKzBaXtF8u1cx0tLyLTd7YV1YPnhO5WS2kuwMcxXpKZsv8FU26BrtT xHuL2+7QHs3anf5HpRB19QgJ1URCMqzObCxk6gfvjx3KJubv/lBSFMkNujthBgIY UFfnu7EcCiGqrL+mEWdn6xlgbcFSMwRStu2dywyQ2bVSXkBIRkIzk2mJfo/Rtr/K FtJ9bo2op4l+unSA/9fvKD8qupdg3qZk40pidYCTu+gOTFJv6735hOK6YT/tFlDz xE9iLomjw/2AstcAC2wKpQKyBEExSgSI7JiQ6cCDkQtm+ViS7W66ZmsekpN06iSD 1d6K7gu7L5WSyNFblBF+TBkDg+0zcoQ= -----END CERTIFICATE-----Generated at Sat Apr 19 15:31:41 2025 by rpki-client