$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa File: 5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa (raw, json) Hash identifier: XeXNzFKWSHAtsSu7GYNWaCgrSoKkmriSjNk1sIuMTUc= Subject key identifier: 74:C0:DE:37:DD:4A:8E:F7:D7:3D:15:3C:4B:A8:44:2D:16:34:55:E2 Certificate issuer: /CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Certificate serial: 010D0C9F43285848EC9685F5B25C798F2C2432E0 Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 2552 IP address blocks: 128.252.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:85:f5:b2:5c:79:8f:2c:24:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=bb06e4b1-58d9-458a-a1d2-5afa7d273079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:5b:a7:fd:bf:28:49:06:d7:55:45:19:d2: 7b:f6:59:40:2c:a0:34:ca:2e:9b:2d:28:9a:19:35: 9a:ee:a5:57:c7:ed:4f:0b:d9:54:c9:5e:b2:2a:6d: 69:9f:df:ae:51:11:95:a4:ff:1b:57:bd:bb:8b:e6: e5:7f:ec:10:f9:9b:03:93:92:8d:59:52:87:9b:fd: a4:d1:ec:cd:15:c1:84:32:67:bf:cf:17:ea:6d:44: b1:62:0f:85:6c:0f:52:6f:8d:e9:01:00:16:f5:00: cc:ae:8a:9b:91:1b:6f:d0:82:08:7c:69:71:b8:5e: 1d:a0:09:dc:33:8e:e4:b7:fe:f8:eb:10:31:54:50: 55:6f:87:93:22:62:6b:4e:86:8b:74:6d:17:ca:82: 16:26:75:ca:6d:21:fa:51:d4:d2:b2:73:c3:56:08: 97:fd:b7:3a:89:f7:fa:6d:56:64:29:f6:49:bb:e0: 39:30:a8:07:78:27:21:bd:8f:68:07:ea:85:b3:3e: a2:ea:61:61:66:59:86:15:4d:8e:0f:5a:8f:7c:f5: f3:6c:27:e3:07:1a:48:bb:61:c4:7f:0e:17:32:f2: 62:6b:4b:bf:b9:89:e7:46:5b:fc:61:2f:1f:dc:c8: 8c:52:b2:5e:ab:4e:23:82:1e:9f:1a:c5:5e:64:79: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C0:DE:37:DD:4A:8E:F7:D7:3D:15:3C:4B:A8:44:2D:16:34:55:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl X509v3 Authority Key Identifier: keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer sbgp-ipAddrBlock: critical IPv4: 128.252.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f3:fc:72:26:54:8e:b4:8c:11:0a:aa:e7:09:e9:e0:b9:90: 95:92:d4:b9:52:47:00:54:8c:94:f6:9d:81:7e:4c:a9:fd:13: 70:74:02:02:8c:ab:12:a2:2c:0b:45:42:46:c9:bc:28:94:7e: 33:50:a5:53:d6:3a:94:c3:7c:5f:19:1d:64:b5:08:d3:84:6e: 5a:af:49:19:34:93:ad:d1:05:e3:94:a3:a8:84:c9:e1:40:c5: 17:e4:a5:0e:50:02:83:9a:cf:47:52:16:d9:aa:ce:92:79:9d: ed:16:e2:80:0c:68:75:9a:7c:7f:64:49:4f:d4:e1:d9:cb:e4: f3:4d:ee:09:1b:29:d6:3f:86:7f:c3:02:b2:a8:03:dc:5f:43: 6f:c1:a3:63:46:ac:9b:20:40:c8:60:67:64:b4:84:be:ec:ad: e7:0b:d3:68:31:11:f0:9f:80:f4:46:ec:15:43:b3:77:49:24: aa:cf:a3:23:9b:0c:2a:fa:35:4a:c6:19:02:11:b3:5c:8e:5d: c9:ed:a1:86:d4:d8:2e:ce:bb:66:41:72:d3:a4:9c:d5:fd:5a: 76:c0:f4:50:3d:4e:9b:fe:c5:01:58:71:9e:4b:e6:c8:13:e5: d2:67:b4:61:c7:9e:10:8f:0c:58:71:12:28:8f:6b:aa:c8:66: b0:ee:49:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloX1slx5jywkMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2 YTY0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YmIwNmU0YjEtNThkOS00NThhLWExZDItNWFmYTdkMjczMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21lbp/2/KEkG11VFGdJ79llALKA0yi6bLSia GTWa7qVXx+1PC9lUyV6yKm1pn9+uURGVpP8bV727i+blf+wQ+ZsDk5KNWVKHm/2k 0ezNFcGEMme/zxfqbUSxYg+FbA9Sb43pAQAW9QDMroqbkRtv0IIIfGlxuF4doAnc M47kt/746xAxVFBVb4eTImJrToaLdG0XyoIWJnXKbSH6UdTSsnPDVgiX/bc6iff6 bVZkKfZJu+A5MKgHeCchvY9oB+qFsz6i6mFhZlmGFU2OD1qPfPXzbCfjBxpIu2HE fw4XMvJia0u/uYnnRlv8YS8f3MiMUrJeq04jgh6fGsVeZHnZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTA3jfdSo731z0VPEuoRC0WNFXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJh MGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvNWExZWM4ZjgtZDUwNy0z NTI1LWFkNjYtOGRhYzJhYzdlYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZiYTBmZDItYjUyNi00OTg1LTkz MTQtYmY2NDg1MDU2YTY0L2E2YmEwZmQyLWI1MjYtNDk4NS05MzE0LWJmNjQ4NTA1 NmE2NC5jcmwwHwYDVR0jBBgwFoAUzCOVeI0Cs7E5PNhJCdAxa08cphIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0 ODUwNTZhNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrz/HImVI60jBEKqucJ6eC5kJWS1LlSRwBUjJT2nYF+TKn9E3B0AgKM qxKiLAtFQkbJvCiUfjNQpVPWOpTDfF8ZHWS1CNOEblqvSRk0k63RBeOUo6iEyeFA xRfkpQ5QAoOaz0dSFtmqzpJ5ne0W4oAMaHWafH9kSU/U4dnL5PNN7gkbKdY/hn/D ArKoA9xfQ2/Bo2NGrJsgQMhgZ2S0hL7srecL02gxEfCfgPRG7BVDs3dJJKrPoyOb DCr6NUrGGQIRs1yOXcntoYbU2C7Ou2ZBctOknNX9WnbA9FA9Tpv+xQFYcZ5L5sgT 5dJntGHHnhCPDFhxEiiPa6rIZrDuSRs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:55 2025 by rpki-client