$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa File: 77788e76-09b5-3ebe-82f5-4907caeab06f.roa (raw, json) Hash identifier: qcRy+ot7gCwMCkEz63BYESi77B2fMGgRKxc/u1MHRHU= Subject key identifier: 08:01:24:DB:57:8A:B4:0C:3D:18:E1:9B:FF:0A:5A:98:AC:C3:01:1F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848A9962C822EEB3DA0102BAC00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 3949 IP address blocks: 128.121.46.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2c:82:2e:eb:3d:a0:10:2b:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4ebc71f8-d5d0-40eb-bbf8-3f94439440a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:59:8f:94:bd:8e:7e:18:46:86:38:1d:fa: 88:93:47:7b:31:b6:e1:54:6a:5d:13:d4:b5:58:fc: 86:ae:ae:e7:96:ad:a3:92:eb:07:45:1e:af:4e:f7: f9:5c:36:cf:49:76:1f:59:bd:b0:7c:59:46:f4:9c: 76:48:39:97:3e:ce:83:8c:ed:b7:0b:cc:4e:e0:de: 95:b8:12:3c:c0:07:e7:e5:5a:0d:97:ee:df:eb:06: 2a:6a:7e:31:09:04:9e:f8:2c:84:f2:4a:f9:67:6b: 15:d7:9b:8b:2a:d6:83:b2:33:99:91:e3:a3:79:58: 67:31:00:e5:bd:8e:f5:a0:a0:49:66:99:c4:8c:87: 78:d1:cc:d6:b0:d4:61:42:7a:2f:74:e2:c0:de:75: e8:92:d3:64:27:63:ac:92:9c:8b:87:e7:44:6f:a1: 23:6e:a7:0a:10:b2:d1:1d:c9:9b:c7:8d:02:a6:ad: f5:f4:34:9d:16:72:da:a7:a0:0d:f3:9e:d3:01:e1: 5f:53:b4:95:79:89:e8:80:46:ec:f3:62:91:75:df: 62:e0:4d:cc:cc:46:55:b0:d5:61:26:97:5e:b1:c4: b9:f1:83:03:3f:98:16:28:ec:e4:cd:7a:c2:e9:59: a2:36:2e:d4:2c:7c:ea:19:cc:a5:92:65:ea:49:2b: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:01:24:DB:57:8A:B4:0C:3D:18:E1:9B:FF:0A:5A:98:AC:C3:01:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.46.240/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a3:19:fc:92:b7:fa:d9:6e:35:f5:11:dd:b0:51:fe:4b:7b: 69:15:1e:0d:ef:5f:34:bc:d3:d2:5d:03:81:42:31:ef:1f:2c: 8e:45:57:bb:1b:a1:7f:f8:42:97:ab:cd:23:52:4e:b0:93:f5: 06:83:99:44:60:a9:66:80:19:a6:2b:7d:8f:ba:35:3c:af:c0: 64:a2:62:59:17:f3:b6:b1:4b:05:78:e0:d6:70:22:1d:14:f9: 58:1b:16:6e:75:2e:54:de:c0:4b:b1:9d:bd:9d:9e:3a:9b:b3: ef:29:21:eb:1a:29:d7:70:b1:9c:55:e0:00:10:f0:59:f6:81: 1d:d5:a4:c0:b1:08:9e:43:ba:7f:a3:2e:dc:ee:9c:14:32:55: 4e:22:ac:dc:54:20:e9:10:ba:d9:97:d4:a2:dc:95:ad:91:31: ba:48:cd:99:5b:1c:9a:97:44:53:bb:52:30:a8:e7:37:31:a0: bc:9f:99:14:74:e6:e4:ac:25:6f:47:a4:5f:a6:ac:06:bd:2c: 53:42:b4:68:12:ab:4b:2c:ba:39:b5:6c:3c:c4:19:b1:ee:c8: 52:41:22:c4:03:32:04:f2:e3:e8:ef:28:7f:0e:13:4f:46:8b: 30:72:9c:26:38:8b:34:30:31:aa:02:18:06:b8:05:bb:6f:65: cf:e2:73:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEipliyCLus9oBArrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGViYzcxZjgtZDVkMC00MGViLWJiZjgtM2Y5NDQzOTQ0MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAillZj5S9jn4YRoY4HfqIk0d7MbbhVGpdE9S1 WPyGrq7nlq2jkusHRR6vTvf5XDbPSXYfWb2wfFlG9Jx2SDmXPs6DjO23C8xO4N6V uBI8wAfn5VoNl+7f6wYqan4xCQSe+CyE8kr5Z2sV15uLKtaDsjOZkeOjeVhnMQDl vY71oKBJZpnEjId40czWsNRhQnovdOLA3nXoktNkJ2OskpyLh+dEb6EjbqcKELLR Hcmbx40Cpq319DSdFnLap6AN857TAeFfU7SVeYnogEbs82KRdd9i4E3MzEZVsNVh JpdescS58YMDP5gWKOzkzXrC6VmiNi7ULHzqGcylkmXqSSu1kwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgBJNtXirQMPRjhm/8KWpiswwEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzc3ODhlNzYtMDliNS0z ZWJlLTgyZjUtNDkwN2NhZWFiMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgHku8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgoxn8krf62W419RHdsFH+S3tpFR4N7180vNPSXQOBQjHvHyyORVe7 G6F/+EKXq80jUk6wk/UGg5lEYKlmgBmmK32PujU8r8BkomJZF/O2sUsFeODWcCId FPlYGxZudS5U3sBLsZ29nZ46m7PvKSHrGinXcLGcVeAAEPBZ9oEd1aTAsQieQ7p/ oy7c7pwUMlVOIqzcVCDpELrZl9Si3JWtkTG6SM2ZWxyal0RTu1IwqOc3MaC8n5kU dObkrCVvR6RfpqwGvSxTQrRoEqtLLLo5tWw8xBmx7shSQSLEAzIE8uPo7yh/DhNP RoswcpwmOIs0MDGqAhgGuAW7b2XP4nPq -----END CERTIFICATE-----Generated at Fri Apr 4 17:28:00 2025 by rpki-client