$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa File: ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa (raw, json) Hash identifier: gf0b1OP+GA3ZQd2zz32alJsuLdKAEbo7Lpx1sw7yXCg= Subject key identifier: 66:9A:DD:2E:C2:6F:01:D3:79:11:0C:6E:33:31:6E:BA:12:A5:70:FA Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F43285849663A8CEE29DDF7BADCE0E080 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa Signing time: Thu 03 Apr 2025 03:44:15 +0000 ROA not before: Thu 03 Apr 2025 03:44:15 +0000 ROA not after: Wed 02 Jul 2025 03:44:15 +0000 asID: 62610 IP address blocks: 128.14.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:66:3a:8c:ee:29:dd:f7:ba:dc:e0:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Apr 3 03:44:15 2025 GMT Not After : Jul 2 03:44:15 2025 GMT Subject: CN=0419d293-62af-416d-bfaa-41b25a4b9824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:fc:71:c7:dd:04:10:eb:9a:39:10:1f:a2: aa:91:e3:b6:38:b7:bc:49:3f:b1:bc:68:94:ce:3a: d6:90:c0:35:c0:29:8a:28:e4:16:47:7a:b0:c0:7e: 54:3f:3a:7e:e4:38:1d:fc:b1:f6:f9:e6:3f:6d:1e: 77:c7:02:f5:bd:ba:a0:fd:45:69:fc:c6:a7:97:36: 59:c3:b6:d8:65:8a:46:e4:61:4e:8f:91:7f:47:31: 17:cb:26:63:5b:28:44:0d:c6:fd:2b:e0:9f:e1:5f: 6a:a6:16:37:e6:86:68:f1:b0:e2:0f:cb:28:0e:15: 2b:35:08:c4:8c:81:28:11:b0:88:23:7d:80:ac:6f: 74:e9:1a:b5:9f:ee:6b:5b:d9:2d:3a:d4:97:d7:62: bd:b5:44:45:55:60:e3:37:d3:fa:4f:b2:3f:98:16: 79:e0:df:b2:24:cd:e2:b8:5e:dd:53:5f:69:79:5e: a4:aa:a1:49:78:0a:df:19:89:6e:f0:53:30:43:55: d2:42:5b:22:c1:6d:7f:ca:24:59:f6:25:b9:3e:d5: e7:6a:fe:c8:a9:90:d6:24:b9:16:f6:a8:4a:1c:98: 68:fe:1c:94:04:e2:11:01:90:bf:54:30:41:95:75: 83:34:89:8f:01:ff:4e:37:a0:43:fd:b4:bc:45:1f: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9A:DD:2E:C2:6F:01:D3:79:11:0C:6E:33:31:6E:BA:12:A5:70:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b1:2f:2d:4f:5a:97:9e:d5:c3:a6:b0:8d:ed:73:e5:64:e9: 44:a5:7c:88:16:24:50:45:85:3e:0b:1b:b2:5a:51:b1:33:e2: d5:cc:49:b8:fc:23:74:77:97:e0:85:64:61:19:ab:41:9d:d2: 56:51:67:8b:a3:8b:71:86:4e:f4:3f:74:6f:bd:c0:17:07:33: 81:8b:9b:b7:9f:dc:95:99:95:9c:ec:42:35:da:3c:d4:54:00: a7:79:76:ea:51:79:64:ea:2f:24:cc:c0:d4:73:b9:7c:ca:36: 24:f9:0b:a5:4a:c4:a5:79:3e:7f:29:cd:59:37:df:3b:97:73: c2:b5:af:97:a6:7b:32:78:72:1b:98:2c:e5:cb:74:d5:7e:75: d1:f6:79:98:77:02:8a:6a:46:19:f8:a1:46:8a:72:08:58:94: 82:a7:bd:7c:3d:f3:30:e9:06:ef:7d:a0:30:76:a4:51:45:d9: e4:ed:a8:e7:a8:d2:0d:0d:c8:19:38:94:7e:b5:d2:d8:2c:91: ef:25:f9:e6:08:7b:b0:66:1e:bd:14:29:93:05:b2:67:50:f8: 94:2f:2e:e4:36:70:a1:29:c4:9a:35:9a:96:54:c2:01:4b:93: c1:8a:2c:fb:ce:fe:75:b7:f1:f3:fb:fe:e2:de:3a:3c:a9:4c: b8:ca:99:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElmOozuKd33utzg4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDQwMzAzNDQxNVoXDTI1MDcwMjAzNDQxNVowLzEtMCsGA1UEAxMk MDQxOWQyOTMtNjJhZi00MTZkLWJmYWEtNDFiMjVhNGI5ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi978ccfdBBDrmjkQH6KqkeO2OLe8ST+xvGiU zjrWkMA1wCmKKOQWR3qwwH5UPzp+5Dgd/LH2+eY/bR53xwL1vbqg/UVp/ManlzZZ w7bYZYpG5GFOj5F/RzEXyyZjWyhEDcb9K+Cf4V9qphY35oZo8bDiD8soDhUrNQjE jIEoEbCII32ArG906Rq1n+5rW9ktOtSX12K9tURFVWDjN9P6T7I/mBZ54N+yJM3i uF7dU19peV6kqqFJeArfGYlu8FMwQ1XSQlsiwW1/yiRZ9iW5PtXnav7IqZDWJLkW 9qhKHJho/hyUBOIRAZC/VDBBlXWDNImPAf9ON6BD/bS8RR8TtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaa3S7CbwHTeREMbjMxbroSpXD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZGVkNzE3YTAtZDcyMC0z N2I2LTgwZmEtZjliMTJkMWNkMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABexLy1PWpee1cOmsI3tc+Vk6USlfIgWJFBFhT4LG7JaUbEz4tXMSbj8 I3R3l+CFZGEZq0Gd0lZRZ4uji3GGTvQ/dG+9wBcHM4GLm7ef3JWZlZzsQjXaPNRU AKd5dupReWTqLyTMwNRzuXzKNiT5C6VKxKV5Pn8pzVk33zuXc8K1r5emezJ4chuY LOXLdNV+ddH2eZh3AopqRhn4oUaKcghYlIKnvXw98zDpBu99oDB2pFFF2eTtqOeo 0g0NyBk4lH610tgske8l+eYIe7BmHr0UKZMFsmdQ+JQvLuQ2cKEpxJo1mpZUwgFL k8GKLPvO/nW38fP7/uLeOjypTLjKmSo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:43 2025 by rpki-client