$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7722c5fc-e95d-35f3-a99b-549d150ae9cb.roa File: 7722c5fc-e95d-35f3-a99b-549d150ae9cb.roa (raw, json) Hash identifier: H2NyY0yHJZxvaSe2WFUbO61uHXlmJFBa382k0BmHd90= Subject key identifier: 82:8A:A1:F8:2B:64:27:F0:86:23:8E:D3:03:40:F8:5F:1F:A9:E1:E1 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F432858494B640FC18A83622A0E152400 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7722c5fc-e95d-35f3-a99b-549d150ae9cb.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 62610 IP address blocks: 128.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0f:c1:8a:83:62:2a:0e:15:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=6683c37e-7fe0-480b-bbbe-3a081d82d17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:56:e0:6a:91:93:1f:1a:67:7a:3b:f4:af: 9e:1b:ac:db:37:27:e3:84:c8:61:39:da:06:9c:36: 86:c6:12:9f:e7:22:90:c8:bf:e0:05:cf:18:01:a3: d3:29:9f:91:eb:00:19:4d:bf:da:19:db:fa:e7:76: db:9f:74:0b:52:6c:61:3e:c4:48:f8:38:01:f5:ee: 97:b2:f9:53:99:3d:98:d5:73:f8:7c:f4:78:ed:f2: e1:ec:6b:97:09:5a:a1:2d:82:25:af:09:5e:ce:60: f4:2b:50:73:67:5b:c3:74:a5:32:3d:f9:cf:c8:70: 8d:35:f8:85:03:b6:bf:d2:da:98:7d:47:3e:bf:a7: ea:46:c2:f7:6c:28:78:be:04:b9:b3:6b:82:58:47: a5:82:02:33:5b:61:df:46:a0:b7:a4:44:d9:7f:a7: 89:e6:71:95:22:7c:d6:fb:70:77:35:6b:35:ab:5b: ee:15:7b:41:61:11:cc:12:82:3e:f6:bd:84:ac:fb: 6a:1e:1c:8d:e9:48:59:1a:b4:2f:e8:52:d1:30:c1: 67:5d:7e:a5:33:83:1e:68:f4:32:d0:f1:88:be:c0: 7f:39:fd:d3:a6:b4:29:3c:5a:d1:2c:b3:39:00:da: 3f:3a:cf:19:84:66:07:a4:c5:62:b1:e2:24:c6:d2: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:A1:F8:2B:64:27:F0:86:23:8E:D3:03:40:F8:5F:1F:A9:E1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7722c5fc-e95d-35f3-a99b-549d150ae9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:de:7e:d8:e0:c5:17:9d:f9:a6:5f:08:ca:13:97:3d:2a:7a: 28:de:a3:c9:f1:02:34:a7:0f:88:a6:c6:c4:09:77:52:79:ec: 82:06:c2:2c:c2:d6:38:18:63:8d:bd:36:2b:08:90:23:31:8f: 77:5c:28:f3:7d:e2:ab:f1:75:91:38:d1:99:12:5a:a9:64:fb: af:3d:d4:2e:9b:0f:03:55:ca:b8:44:a4:81:94:12:c5:bf:ed: c3:17:ea:cc:c1:97:9e:84:68:6c:d7:20:5d:c6:1f:d4:59:09: 7b:7e:21:6c:d3:b8:b1:00:24:f9:b5:5c:e7:67:bd:b2:1b:e5: 3b:cc:df:2c:29:4a:0d:57:c5:6d:ea:c7:bb:f5:10:08:76:af: a1:24:fe:2f:95:31:48:92:36:f1:69:bd:92:68:68:73:80:b3: 02:61:37:95:b2:74:5a:ea:7e:4e:dc:44:98:0d:8a:95:ed:14: 1d:ed:3d:88:86:38:e0:29:6d:5d:67:eb:49:46:23:aa:5d:81: 22:55:df:a8:ec:74:64:8e:b5:28:fa:5d:9c:30:c3:29:19:31: 61:36:c6:15:01:34:52:82:13:26:06:d2:c7:79:dc:fa:5b:1b: e8:56:16:bd:1a:74:34:26:9c:00:b7:ec:67:a3:94:cd:d8:63: 92:e1:8f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA/BioNiKg4VJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NjY4M2MzN2UtN2ZlMC00ODBiLWJiYmUtM2EwODFkODJkMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvehW4GqRkx8aZ3o79K+eG6zbNyfjhMhhOdoG nDaGxhKf5yKQyL/gBc8YAaPTKZ+R6wAZTb/aGdv653bbn3QLUmxhPsRI+DgB9e6X svlTmT2Y1XP4fPR47fLh7GuXCVqhLYIlrwlezmD0K1BzZ1vDdKUyPfnPyHCNNfiF A7a/0tqYfUc+v6fqRsL3bCh4vgS5s2uCWEelggIzW2HfRqC3pETZf6eJ5nGVInzW +3B3NWs1q1vuFXtBYRHMEoI+9r2ErPtqHhyN6UhZGrQv6FLRMMFnXX6lM4MeaPQy 0PGIvsB/Of3TprQpPFrRLLM5ANo/Os8ZhGYHpMViseIkxtJRewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKKofgrZCfwhiOO0wNA+F8fqeHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNzcyMmM1ZmMtZTk1ZC0z NWYzLWE5OWItNTQ5ZDE1MGFlOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACveftjgxRed+aZfCMoTlz0qeijeo8nxAjSnD4imxsQJd1J57IIGwizC 1jgYY429NisIkCMxj3dcKPN94qvxdZE40ZkSWqlk+6891C6bDwNVyrhEpIGUEsW/ 7cMX6szBl56EaGzXIF3GH9RZCXt+IWzTuLEAJPm1XOdnvbIb5TvM3ywpSg1XxW3q x7v1EAh2r6Ek/i+VMUiSNvFpvZJoaHOAswJhN5WydFrqfk7cRJgNipXtFB3tPYiG OOApbV1n60lGI6pdgSJV36jsdGSOtSj6XZwwwykZMWE2xhUBNFKCEyYG0sd53Ppb G+hWFr0adDQmnAC37GejlM3YY5Lhj6c= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:50 2025 by rpki-client