$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa File: 253358bb-6a87-383f-a097-6f2f72c463ff.roa (raw, json) Hash identifier: MdJdAmN42HtH4n3G++Z6pyzIXqcRSNIcmCCfKB+sgKc= Subject key identifier: 2B:12:1A:86:75:4F:A0:AB:01:36:FF:7B:CF:CE:B8:B2:D5:F2:41:0E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584919418863192BBFCF1FC5B640 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397601 IP address blocks: 204.2.128.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:88:63:19:2b:bf:cf:1f:c5:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=375d56c1-c3fb-464b-8570-acd156722f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:4e:81:ba:d7:ee:69:2d:ce:32:7d:a9:14: 65:05:f1:9d:a9:1b:e4:09:72:36:0b:ff:6c:bc:0e: ac:d7:08:df:20:05:bf:9b:26:f8:3a:e6:c2:7a:23: bb:cf:3f:b7:3a:49:59:4a:23:84:ca:d7:a4:0a:71: d3:0f:8f:d0:4a:1e:cf:2d:60:fb:01:30:0b:d2:49: 74:ba:fc:fc:ba:16:0a:9c:0f:71:f0:0d:81:1a:02: 3f:73:64:a9:c8:85:09:3f:25:00:33:d9:f4:b1:d7: 77:f2:a7:26:d9:a9:97:2e:2d:72:f5:50:c0:28:4e: b9:77:8e:35:29:f6:31:d0:97:db:a0:47:b4:f1:3b: 79:51:39:53:41:d3:10:64:d3:3c:40:07:5f:fb:9b: 46:28:89:94:34:b3:95:8f:ac:b3:79:5a:f9:d1:08: b0:b1:34:10:d7:1c:37:c8:7c:17:ee:03:d6:6c:29: 15:2e:35:5b:48:b2:89:91:91:c9:5c:a1:a2:a6:b0: e3:ab:51:a9:e2:8c:ff:fe:d5:c9:ea:6e:0c:2a:81: e9:59:8b:a1:a2:17:8c:22:84:f9:16:6e:44:2c:c0: 4d:b8:7b:cf:5a:53:4c:30:29:dc:24:18:de:c7:c3: 17:f2:59:90:5d:81:38:06:e4:ce:aa:8c:b7:e3:8b: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:1A:86:75:4F:A0:AB:01:36:FF:7B:CF:CE:B8:B2:D5:F2:41:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.128.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:73:14:1d:d5:a8:4c:1f:a7:6f:76:17:03:51:d7:d1:1a:c0: a0:b0:3b:a8:f5:7b:40:cd:64:8d:38:cd:6a:22:87:e5:32:bf: 79:bc:94:d4:3f:58:af:2c:3d:46:fa:37:61:1c:d2:6f:13:a6: ff:a9:20:2d:29:a3:9b:0c:85:be:4c:97:6c:25:c8:58:a1:eb: 72:54:ae:3c:d7:84:51:cd:65:b2:ba:45:1a:39:5a:b8:17:b0: 70:81:70:63:79:a7:13:92:49:64:c1:27:d1:47:31:c5:2b:5f: bf:7e:bf:ab:61:8f:eb:d8:7c:12:b2:e6:c4:1f:5f:f0:59:1b: 32:a0:e5:be:22:32:55:15:cc:f7:3b:85:47:0f:95:30:cd:35: 54:90:f3:b5:66:d1:b8:8d:9b:1f:6e:a4:5e:4d:9c:3b:29:8b: 87:b3:48:7f:bb:b6:02:77:df:f6:79:eb:87:2f:0b:2f:7b:dd: 84:cf:1b:57:3a:e4:fa:94:e8:2c:b0:a8:03:74:eb:49:3b:ab: 5e:ff:b9:55:10:20:fc:dd:1c:74:72:c1:9a:39:6c:ba:31:02: 3f:d3:73:9a:74:dd:b1:71:95:de:0c:5b:c4:48:f4:d9:79:ed: 95:6f:b0:fe:b7:0a:d9:79:2e:ca:86:3c:20:78:d3:91:b6:8b: e1:2c:bf:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkZQYhjGSu/zx/FtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk Mzc1ZDU2YzEtYzNmYi00NjRiLTg1NzAtYWNkMTU2NzIyZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjNOgbrX7mktzjJ9qRRlBfGdqRvkCXI2C/9s vA6s1wjfIAW/myb4OubCeiO7zz+3OklZSiOEytekCnHTD4/QSh7PLWD7ATAL0kl0 uvz8uhYKnA9x8A2BGgI/c2SpyIUJPyUAM9n0sdd38qcm2amXLi1y9VDAKE65d441 KfYx0JfboEe08Tt5UTlTQdMQZNM8QAdf+5tGKImUNLOVj6yzeVr50QiwsTQQ1xw3 yHwX7gPWbCkVLjVbSLKJkZHJXKGiprDjq1Gp4oz//tXJ6m4MKoHpWYuhoheMIoT5 Fm5ELMBNuHvPWlNMMCncJBjex8MX8lmQXYE4BuTOqoy344u8IQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCsSGoZ1T6CrATb/e8/OuLLV8kEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjUzMzU4YmItNmE4Ny0z ODNmLWEwOTctNmYyZjcyYzQ2M2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAKA0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNcxQd1ahMH6dvdhcDUdfRGsCgsDuo9XtAzWSNOM1qIoflMr95vJTU P1ivLD1G+jdhHNJvE6b/qSAtKaObDIW+TJdsJchYoetyVK4814RRzWWyukUaOVq4 F7BwgXBjeacTkklkwSfRRzHFK1+/fr+rYY/r2HwSsubEH1/wWRsyoOW+IjJVFcz3 O4VHD5UwzTVUkPO1ZtG4jZsfbqReTZw7KYuHs0h/u7YCd9/2eeuHLwsve92EzxtX OuT6lOgssKgDdOtJO6te/7lVECD83Rx0csGaOWy6MQI/03OadN2xcZXeDFvESPTZ ee2Vb7D+twrZeS7KhjwgeNORtovhLL9C -----END CERTIFICATE-----Generated at Fri Apr 4 17:30:32 2025 by rpki-client