$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/face43ac-4888-37eb-a48c-4e74a5bdb29d.roa File: face43ac-4888-37eb-a48c-4e74a5bdb29d.roa (raw, json) Hash identifier: RI3R2ZPRAZwIjpGjLMEBLSak7+I7yRac7KViM/HzV/M= Subject key identifier: F0:97:01:72:36:6C:DE:DE:28:35:FD:C0:BF:88:B6:C0:EC:B4:29:3B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D87AFCD7160E357E79E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/face43ac-4888-37eb-a48c-4e74a5bdb29d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 173.11.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:87:af:cd:71:60:e3:57:e7:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9927dc7e-de89-47e5-908f-c451b1e843fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:cf:e3:64:52:f2:2f:f4:8a:ee:7c:19:92: 4c:d2:69:b9:69:fd:38:e8:30:91:ed:80:7d:32:da: 4c:7d:59:3c:77:e5:fc:74:e4:88:c1:db:b4:f2:a6: f7:7d:bc:62:d9:2f:34:be:7c:cf:c5:66:bb:42:53: 11:4d:ed:7b:d8:f9:f7:be:f4:2c:4a:07:9b:b9:11: c8:91:2e:64:af:42:5a:d2:8f:99:3c:81:f9:3e:29: 8c:86:47:e1:cf:27:a0:d5:2e:17:c6:16:de:30:25: 60:18:d2:48:14:54:dd:8a:65:9f:cd:b7:65:a4:e5: 6f:b3:cb:dc:e8:8a:6d:00:22:9e:24:9a:c6:7e:b1: 89:2b:24:06:2b:df:bb:12:53:2d:35:59:e6:97:8a: c0:f0:4b:19:09:43:a8:07:26:64:02:26:53:0e:e2: 6e:9d:86:6f:ed:c6:49:26:8b:6e:51:44:f2:92:9c: b1:1e:38:b3:ca:1b:bb:e6:44:35:62:6b:30:54:0e: 82:4c:9f:cc:d8:7f:09:60:54:33:48:36:7f:0a:f6: 90:fa:f9:e8:5b:25:1a:f5:45:75:9d:0e:dc:e6:4b: 64:8a:2f:cd:4a:4f:e3:2b:da:8b:2e:11:36:28:a4: ae:bc:e4:89:9f:b5:21:40:1a:8c:be:7e:b6:90:99: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:01:72:36:6C:DE:DE:28:35:FD:C0:BF:88:B6:C0:EC:B4:29:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/face43ac-4888-37eb-a48c-4e74a5bdb29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.11.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d1:15:39:e4:a0:63:24:a5:b7:fd:0c:bd:fa:67:5e:55:6c: 1c:fd:95:71:8a:af:c0:55:67:10:71:fb:ea:e2:42:c9:4d:0c: 1e:43:33:3e:98:6d:7a:4d:4b:0a:c2:76:4e:55:28:f8:17:51: d5:de:c2:0c:15:6b:ab:54:cd:9a:b2:1c:db:44:1f:fd:89:be: f3:32:61:63:05:8e:3a:a4:de:57:e2:56:2a:d7:11:93:a5:59: a1:90:b5:f6:0a:62:10:28:de:42:e5:83:4c:a7:84:3d:a8:eb: a3:90:98:cc:62:2e:d3:bf:71:69:b6:8d:30:c9:7f:1c:fc:87: fb:df:06:d6:60:85:11:43:06:8d:79:2d:0f:4b:6c:28:b2:b5: 8d:12:c4:ff:23:26:6d:87:3b:a2:9f:e2:58:7c:d0:b2:3c:58: 78:e6:4c:19:e3:3e:d3:f4:a5:38:e9:2e:ce:db:63:04:7c:a2: 2d:a2:33:d4:59:f2:d7:88:93:8c:aa:8a:86:a6:0a:97:46:d1: 51:16:49:d9:dc:9f:17:d2:b2:fa:1c:59:be:f4:d5:d4:3a:ad: 27:e9:48:18:9b:45:b5:c8:ff:3f:c1:29:46:db:8a:cc:c1:da: 18:80:8c:8a:30:0a:b2:a7:e3:00:96:ed:bf:d3:43:4e:9f:40: d7:85:c3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebYevzXFg41fnngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTkyN2RjN2UtZGU4OS00N2U1LTkwOGYtYzQ1MWIxZTg0M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEPP42RS8i/0iu58GZJM0mm5af046DCR7YB9 MtpMfVk8d+X8dOSIwdu08qb3fbxi2S80vnzPxWa7QlMRTe172Pn3vvQsSgebuRHI kS5kr0Ja0o+ZPIH5PimMhkfhzyeg1S4XxhbeMCVgGNJIFFTdimWfzbdlpOVvs8vc 6IptACKeJJrGfrGJKyQGK9+7ElMtNVnml4rA8EsZCUOoByZkAiZTDuJunYZv7cZJ JotuUUTykpyxHjizyhu75kQ1YmswVA6CTJ/M2H8JYFQzSDZ/CvaQ+vnoWyUa9UV1 nQ7c5ktkii/NSk/jK9qLLhE2KKSuvOSJn7UhQBqMvn62kJl2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCXAXI2bN7eKDX9wL+ItsDstCk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFjZTQzYWMtNDg4OC0z N2ViLWE0OGMtNGU3NGE1YmRiMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrQuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvRFTnkoGMkpbf9DL36Z15VbBz9lXGKr8BVZxBx++riQslNDB5DMz6Y bXpNSwrCdk5VKPgXUdXewgwVa6tUzZqyHNtEH/2JvvMyYWMFjjqk3lfiVirXEZOl WaGQtfYKYhAo3kLlg0ynhD2o66OQmMxiLtO/cWm2jTDJfxz8h/vfBtZghRFDBo15 LQ9LbCiytY0SxP8jJm2HO6Kf4lh80LI8WHjmTBnjPtP0pTjpLs7bYwR8oi2iM9RZ 8teIk4yqioamCpdG0VEWSdncnxfSsvocWb701dQ6rSfpSBibRbXI/z/BKUbbiszB 2hiAjIowCrKn4wCW7b/TQ06fQNeFw7s= -----END CERTIFICATE-----Generated at Mon Apr 7 09:37:22 2025 by rpki-client