$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa File: 672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json) Hash identifier: EZRYcTkZJzkK2sJJaIxsPBt3GGqbHlZUAlcwBsq3Iuo= Subject key identifier: B7:4E:A5:8A:D8:61:87:4C:A6:96:F8:EB:42:B0:3A:81:D5:C2:05:0B Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150CF8875C008AAA4143280 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 931 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:cf:88:75:c0:08:aa:a4:14:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=84bf24de-bbc8-42c4-ade0-f45c905c5859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:8b:74:6a:cf:04:a5:d3:b9:b3:bc:c7:2d: 25:42:9e:3e:54:fa:06:20:6a:a9:a1:af:b9:0b:0c: 34:6b:9e:46:e2:5f:2c:9e:c9:29:7b:c8:ce:19:a6: 86:c2:07:42:85:c8:d4:37:61:62:b7:47:3d:25:82: cd:7a:be:2d:ca:f0:a1:85:dc:ea:9b:61:2d:f4:de: 32:5f:fd:7d:c0:66:fd:f1:8f:59:1d:6d:12:f2:a7: c1:d5:4c:36:73:0c:a0:96:ff:a8:9c:1b:aa:af:ae: ea:43:0f:af:46:db:66:dd:c2:82:60:61:a3:75:e9: 8a:f1:74:b3:57:c3:9c:66:36:7a:b1:15:a6:9e:cb: a3:f7:12:0a:f7:c2:62:20:0d:ba:6a:16:51:f5:8b: 28:f4:77:47:08:4b:cb:3d:34:36:cd:9f:9a:e2:d7: 49:22:2d:65:f8:a0:f2:86:65:6a:5f:4f:a1:f5:e4: 28:41:df:ff:03:9e:4e:80:8d:b7:14:49:11:f9:b8: b7:e4:05:61:15:6f:e8:69:62:5c:24:16:b5:9a:dd: d7:f6:ef:29:b6:ca:3b:f5:62:41:96:6e:6a:49:8d: 6d:68:51:36:a3:a7:8d:4d:66:c3:88:f4:e5:10:87: d7:05:7c:bf:a2:88:11:ad:00:94:db:31:04:16:47: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:A5:8A:D8:61:87:4C:A6:96:F8:EB:42:B0:3A:81:D5:C2:05:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e6:39:99:78:7e:2c:b5:09:c4:a0:3d:8d:0e:9a:1e:9c:49: 3c:fd:a9:99:cc:66:78:3b:a9:76:34:6b:58:d2:be:a4:39:ac: 6a:28:ca:68:35:69:d4:80:1c:0f:a8:f1:73:16:af:0e:ec:5b: 29:bf:c0:5e:fe:1f:60:3a:7e:b5:86:69:0d:2e:a9:88:e0:3f: f0:5d:9a:54:44:98:29:5a:95:cd:92:8e:c4:2e:fc:f6:6a:c8: de:36:00:9b:3e:c8:54:ce:0b:bc:36:8e:f2:88:14:8a:3c:1c: 34:f1:e7:34:78:13:25:7b:e1:85:cd:17:6f:21:05:3f:2d:ad: 5e:db:c9:de:b8:82:f3:bf:d2:50:fd:44:bf:84:ce:2b:49:c8: 1b:6f:d9:4d:dd:49:c3:42:38:d4:ee:f0:76:3c:9d:10:6c:f0: be:39:a8:fe:11:c0:03:ee:f4:c9:31:b3:13:7f:56:2e:f8:de: 96:2c:e1:7f:e4:4a:de:34:18:ba:99:9a:64:df:5c:f6:5c:16: c0:07:db:93:db:b4:12:ff:1e:d0:33:b2:af:7a:e9:ec:d1:c5: 4b:3f:e2:ad:30:0f:c2:b4:b8:4a:98:a7:52:5a:b0:8c:90:bf: 01:79:e0:7c:96:46:c7:44:07:6a:9b:3a:c2:3b:48:a9:a6:53: ba:3d:90:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUM+IdcAIqqQUMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk ODRiZjI0ZGUtYmJjOC00MmM0LWFkZTAtZjQ1YzkwNWM1ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteSLdGrPBKXTubO8xy0lQp4+VPoGIGqpoa+5 Cww0a55G4l8snskpe8jOGaaGwgdChcjUN2Fit0c9JYLNer4tyvChhdzqm2Et9N4y X/19wGb98Y9ZHW0S8qfB1Uw2cwyglv+onBuqr67qQw+vRttm3cKCYGGjdemK8XSz V8OcZjZ6sRWmnsuj9xIK98JiIA26ahZR9Yso9HdHCEvLPTQ2zZ+a4tdJIi1l+KDy hmVqX0+h9eQoQd//A55OgI23FEkR+bi35AVhFW/oaWJcJBa1mt3X9u8ptso79WJB lm5qSY1taFE2o6eNTWbDiPTlEIfXBXy/oogRrQCU2zEEFkcsywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdOpYrYYYdMppb460KwOoHVwgULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjcyMTk0YzItNGFhMS0z Yzg0LWE5ZDgtYjhlODk1NjZmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrmOZl4fiy1CcSgPY0Omh6cSTz9qZnMZng7qXY0a1jSvqQ5rGooymg1 adSAHA+o8XMWrw7sWym/wF7+H2A6frWGaQ0uqYjgP/BdmlREmClalc2SjsQu/PZq yN42AJs+yFTOC7w2jvKIFIo8HDTx5zR4EyV74YXNF28hBT8trV7byd64gvO/0lD9 RL+EzitJyBtv2U3dScNCONTu8HY8nRBs8L45qP4RwAPu9MkxsxN/Vi743pYs4X/k St40GLqZmmTfXPZcFsAH25PbtBL/HtAzsq966ezRxUs/4q0wD8K0uEqYp1JasIyQ vwF54HyWRsdEB2qbOsI7SKmmU7o9kLM= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:42 2025 by rpki-client