$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa File: c950cc34-b6bc-32c3-886c-c6539782d6a6.roa (raw, json) Hash identifier: LVRJ8CpAj1Ui1O+aE7ujWWe/q5El8I3zrTAi6Eewz9M= Subject key identifier: 35:19:05:9E:E4:C8:6B:25:CB:1B:E2:DB:1A:13:2A:2B:10:FF:A0:FA Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F432858494CC93BF5FE6D0BA8D6EAA0E0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 62610 IP address blocks: 128.1.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3b:f5:fe:6d:0b:a8:d6:ea:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=50cf052d-c694-4aff-9e03-c26721ef8406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:de:6f:41:c2:60:15:e4:f6:bb:98:f6:6c: ec:d7:87:27:f6:c1:eb:b1:da:72:f5:30:4c:3c:1b: 85:d6:30:cd:03:c3:b1:c1:c1:ab:cf:47:a6:b7:90: 69:16:64:6e:e7:42:20:17:29:40:6c:40:b0:69:f9: a9:76:02:37:7c:c4:56:d2:90:d6:d8:51:32:29:0c: 00:86:3c:ae:59:d9:85:ad:da:ae:13:21:43:67:42: 32:8e:94:44:5d:6c:3e:e8:b0:ed:25:f9:ce:f5:d2: 12:99:60:08:df:85:92:7e:e1:80:64:49:6f:91:66: a2:d3:e8:b6:47:1a:d3:a4:bc:be:29:f7:ce:01:f7: 29:05:68:80:07:f8:1d:2e:04:12:4d:98:88:bb:66: 7d:79:a4:f8:ed:e8:52:90:49:35:b4:d8:33:bf:4f: ff:4a:41:8c:49:14:8b:52:25:e0:55:fb:44:4d:75: 6e:cc:d7:ac:67:95:c6:9f:21:c5:cd:88:c3:2d:a4: 32:54:52:e9:93:5a:87:09:9c:0c:1d:82:29:72:2c: c8:c7:5e:40:10:c1:16:2f:10:e5:cf:50:97:86:3c: 32:32:33:72:2c:77:38:a3:f9:a4:ba:f6:a7:d0:8f: 51:6a:96:59:02:f5:2e:27:25:9d:0f:b7:3d:ee:2a: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:19:05:9E:E4:C8:6B:25:CB:1B:E2:DB:1A:13:2A:2B:10:FF:A0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:80:19:f1:de:ad:b2:2f:75:72:c5:b4:49:2d:14:b1:c3:64: 55:1a:1d:62:a0:7c:4c:89:55:2f:0f:d6:fc:bf:0b:31:68:a2: d6:e0:ba:85:6c:f6:86:ca:a6:91:10:a6:7a:43:90:1d:17:7a: 0a:61:36:d7:78:8d:d2:a7:98:a7:6f:c4:cb:f4:58:45:25:ce: cd:1e:e9:ab:95:c9:98:5a:ca:1d:e5:fb:55:77:6e:e1:2e:62: e7:4f:7f:3a:c2:ae:00:fc:b0:40:a1:d8:ff:fd:f3:91:77:19: b6:9e:d6:dc:db:a1:ac:85:e0:f7:a5:d0:15:0a:d0:ec:08:02: 21:36:20:42:c0:3a:2c:fb:97:47:76:20:02:b3:4d:33:a3:e7: bd:e6:1f:ef:58:22:eb:00:dd:cd:9b:ba:c1:d1:53:44:27:36: dd:33:0b:8a:75:ab:ee:4a:0d:a8:58:01:88:93:d6:02:32:d1: 77:ea:27:9f:be:ec:d9:a6:4e:84:25:c5:ee:70:85:90:86:1b: f2:cf:f1:fa:49:34:40:06:cc:ec:29:7f:a8:ce:aa:4f:13:07: 91:5e:f8:97:2a:47:ec:ed:dc:f7:c9:02:84:cc:d1:1e:ee:03: ce:63:a3:ad:31:7f:3f:c3:14:89:9c:7b:55:54:de:d9:0c:88: 89:94:68:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTv1/m0LqNbqoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTBjZjA1MmQtYzY5NC00YWZmLTllMDMtYzI2NzIxZWY4NDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVfeb0HCYBXk9ruY9mzs14cn9sHrsdpy9TBM PBuF1jDNA8OxwcGrz0emt5BpFmRu50IgFylAbECwafmpdgI3fMRW0pDW2FEyKQwA hjyuWdmFrdquEyFDZ0IyjpREXWw+6LDtJfnO9dISmWAI34WSfuGAZElvkWai0+i2 RxrTpLy+KffOAfcpBWiAB/gdLgQSTZiIu2Z9eaT47ehSkEk1tNgzv0//SkGMSRSL UiXgVftETXVuzNesZ5XGnyHFzYjDLaQyVFLpk1qHCZwMHYIpcizIx15AEMEWLxDl z1CXhjwyMjNyLHc4o/mkuvan0I9RapZZAvUuJyWdD7c97iqgKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUZBZ7kyGslyxvi2xoTKisQ/6D6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYzk1MGNjMzQtYjZiYy0z MmMzLTg4NmMtYzY1Mzk3ODJkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+AGfHerbIvdXLFtEktFLHDZFUaHWKgfEyJVS8P1vy/CzFootbguoVs 9obKppEQpnpDkB0XegphNtd4jdKnmKdvxMv0WEUlzs0e6auVyZhayh3l+1V3buEu YudPfzrCrgD8sECh2P/985F3Gbae1tzboayF4Pel0BUK0OwIAiE2IELAOiz7l0d2 IAKzTTOj573mH+9YIusA3c2busHRU0QnNt0zC4p1q+5KDahYAYiT1gIy0XfqJ5++ 7NmmToQlxe5whZCGG/LP8fpJNEAGzOwpf6jOqk8TB5Fe+JcqR+zt3PfJAoTM0R7u A85jo60xfz/DFImce1VU3tkMiImUaAo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:47 2025 by rpki-client