$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa File: 3fc9e8b3-35b0-3322-94d8-c662032786d6.roa (raw, json) Hash identifier: 5i5RjsbXwDGNnXMkEBwML9VxzALQ+UT2joAcs/qMX20= Subject key identifier: 15:0A:C5:C2:66:B4:1E:53:14:D1:74:49:68:D6:9B:8E:11:EB:6F:16 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848E0065D8FD29A3A8A0F995940 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 19893 IP address blocks: 128.121.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5d:8f:d2:9a:3a:8a:0f:99:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=7e2fcf15-9d59-4ecd-8a85-f748a88f2bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:4b:35:89:f4:98:9d:ac:a9:dd:5d:d2:2d: e7:0c:59:f0:d2:a5:9c:7e:c7:87:55:59:17:3f:af: 95:b7:58:fb:82:c5:0d:d6:97:a3:0f:07:5d:aa:21: 74:6b:26:e6:3d:a2:0f:c6:91:14:5e:28:ba:8c:3f: 37:37:f8:f3:12:06:34:68:a3:cf:24:d8:1c:06:87: 48:d1:77:a1:1f:aa:a8:4c:5e:5d:20:71:29:1c:4e: 0b:a0:e5:67:ad:02:5d:29:04:75:7b:14:6a:3f:13: f1:1a:72:86:9a:cf:eb:e0:cb:52:76:79:ef:f5:91: 19:07:95:44:ff:10:ec:c6:34:ba:02:47:ba:a9:49: f4:15:dc:fb:99:b7:9e:6e:5a:b1:0b:1c:12:39:6c: 17:37:f8:aa:0c:72:25:85:b0:c1:a4:87:54:9e:4e: 2a:b3:36:49:24:70:87:b0:15:f7:a5:96:a4:22:8c: 8d:f3:7e:4a:f8:36:3b:14:e6:5c:9c:f8:77:94:7f: b9:85:d8:64:b5:06:3e:45:cd:c3:95:7c:70:2f:9e: c8:26:1d:f2:b6:99:3e:00:67:46:81:c4:e3:c8:9d: 70:51:63:c6:c6:f4:b4:aa:86:90:62:ba:d4:3d:85: 6e:8a:09:f9:f0:e9:67:af:5f:4b:94:9d:2a:a6:d1: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:C5:C2:66:B4:1E:53:14:D1:74:49:68:D6:9B:8E:11:EB:6F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2f:11:52:15:a3:7d:f5:d0:ea:e7:cd:ff:d6:b7:e6:05:cd: 6b:86:01:a9:c0:fd:0b:99:d5:e7:43:f7:04:c9:fd:56:2c:c0: 3a:cb:65:30:19:c8:74:9f:f0:cd:04:61:e1:f8:c4:5b:bf:f1: 20:66:97:a9:bb:b3:2b:6c:75:78:59:ab:40:52:d0:f6:99:cd: 31:35:a9:19:11:61:f4:a1:44:cc:43:3c:b1:d8:40:ea:7b:4b: 04:98:1a:be:83:79:16:6e:a5:a7:a2:aa:a9:4e:fe:51:69:ec: dc:36:4d:a0:f2:78:99:a7:50:bb:5d:88:86:a6:80:47:ef:11: 39:56:fe:bc:d2:2f:ed:ed:14:a1:d0:7c:82:e7:f2:05:fe:67: a3:1d:3f:0f:c1:71:a4:25:01:65:2a:86:33:17:74:7b:86:de: 63:e2:96:45:20:24:15:ec:3f:7f:d6:c5:c2:30:c7:0e:9f:3f: 3f:41:bc:26:10:93:d7:03:78:ea:d3:cb:8b:a0:0a:02:67:5f: 38:98:b6:b2:d0:ed:0d:41:18:a1:6f:0a:7e:2d:34:91:95:a5: 18:bd:29:b3:c4:69:ad:64:9d:9e:e5:ec:e8:42:c1:29:3c:ba: 2d:0c:97:d7:f4:80:1b:c8:be:4f:a7:ad:1e:99:7c:a8:8f:e2: 7a:35:1c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl2P0po6ig+ZWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk N2UyZmNmMTUtOWQ1OS00ZWNkLThhODUtZjc0OGE4OGYyYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzJLNYn0mJ2sqd1d0i3nDFnw0qWcfseHVVkX P6+Vt1j7gsUN1pejDwddqiF0aybmPaIPxpEUXii6jD83N/jzEgY0aKPPJNgcBodI 0XehH6qoTF5dIHEpHE4LoOVnrQJdKQR1exRqPxPxGnKGms/r4MtSdnnv9ZEZB5VE /xDsxjS6Ake6qUn0Fdz7mbeeblqxCxwSOWwXN/iqDHIlhbDBpIdUnk4qszZJJHCH sBX3pZakIoyN835K+DY7FOZcnPh3lH+5hdhktQY+Rc3DlXxwL57IJh3ytpk+AGdG gcTjyJ1wUWPGxvS0qoaQYrrUPYVuign58Olnr19LlJ0qptG10wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUKxcJmtB5TFNF0SWjWm44R628WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2ZjOWU4YjMtMzViMC0z MzIyLTk0ZDgtYzY2MjAzMjc4NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIovEVIVo3310Ornzf/Wt+YFzWuGAanA/QuZ1edD9wTJ/VYswDrLZTAZ yHSf8M0EYeH4xFu/8SBml6m7sytsdXhZq0BS0PaZzTE1qRkRYfShRMxDPLHYQOp7 SwSYGr6DeRZupaeiqqlO/lFp7Nw2TaDyeJmnULtdiIamgEfvETlW/rzSL+3tFKHQ fILn8gX+Z6MdPw/BcaQlAWUqhjMXdHuG3mPilkUgJBXsP3/WxcIwxw6fPz9BvCYQ k9cDeOrTy4ugCgJnXziYtrLQ7Q1BGKFvCn4tNJGVpRi9KbPEaa1knZ7l7OhCwSk8 ui0Ml9f0gBvIvk+nrR6ZfKiP4no1HBE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:23:51 2025 by rpki-client