$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa File: a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa (raw, json) Hash identifier: JifrwyLOqgtQJ/LgdETqEvJ3hE5LKDd+O90c6L22FFQ= Subject key identifier: 76:E2:44:77:6E:DC:98:5E:60:1F:DE:64:04:6C:45:DC:46:A6:BF:D0 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F43285849BF3F672A2CC26290BB842D00 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 4246 IP address blocks: 128.235.0.0/17 maxlen: 17 128.235.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:67:2a:2c:c2:62:90:bb:84:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=6c6f99d3-3f80-444e-8fc3-566151798114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:c8:00:08:0a:d7:d0:36:4c:4a:86:ff:fd: c3:ef:bf:ae:b9:42:d9:17:cd:47:48:5a:2f:11:a3: c7:44:ef:55:33:d8:6e:aa:b1:24:50:23:41:d3:b9: ef:43:0b:23:53:27:6d:6b:6f:5e:9e:e0:92:a4:f3: 75:56:41:48:00:df:62:68:16:40:d6:e0:96:d9:17: 1c:64:7b:a0:8f:2e:3a:de:e7:0d:ba:aa:01:5f:bf: e5:1b:67:10:01:dd:71:62:8b:64:94:d0:20:81:1a: 8a:51:e0:9a:f4:de:fc:45:f4:10:37:3f:8d:ef:c6: 57:4e:5f:72:ec:69:c7:2e:28:e8:39:b0:56:21:65: 45:1c:cb:3d:fc:04:f3:61:5f:79:39:23:d3:c8:38: 7c:7e:f5:af:22:0b:58:fa:31:46:b0:77:78:fc:91: fa:34:db:9d:33:ec:c2:ed:91:c9:65:b1:b3:9b:4f: f2:93:69:29:8a:8e:7f:ec:fd:31:bd:79:db:2b:e4: d4:1c:b8:af:1e:7f:ae:a4:91:a2:9b:2d:16:28:5a: e1:08:2f:50:55:e1:b1:4a:24:cb:20:25:51:ea:22: f9:ad:84:5a:f9:05:4c:5c:f0:32:8f:3a:af:96:44: 40:ea:61:88:c4:fe:00:ed:7e:b4:b2:0b:26:4a:fc: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:44:77:6E:DC:98:5E:60:1F:DE:64:04:6C:45:DC:46:A6:BF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:25:05:98:2b:0b:bb:2c:dd:03:a5:5b:96:1c:88:89:51:5d: 9f:30:04:fa:35:c7:6a:0c:5d:20:5d:c9:0e:e5:ae:4d:d9:22: a0:d5:ab:a7:89:cc:30:97:dc:f5:96:e7:9f:8f:6e:52:aa:68: 69:77:46:df:12:e6:8d:65:36:b8:54:07:52:6e:a3:ef:3e:89: f2:bc:7f:a2:46:8f:1b:e8:0e:85:e2:a2:a4:f4:4d:80:32:a3: 9f:f6:43:ba:c1:ac:9c:1d:36:57:d7:6c:ed:cb:88:ea:06:f7: 94:89:a5:23:f8:a1:84:fb:42:6c:ae:33:4b:8e:6c:a1:a1:42: 8e:18:f6:a9:30:a2:63:b5:d5:a7:e8:dc:9a:28:63:95:50:3c: 75:83:9a:6d:0e:69:a2:23:8e:36:2c:71:b0:ee:10:b8:44:8e: e5:86:7b:fe:08:85:98:fb:5c:52:12:49:1a:69:3c:e7:d8:5e: b5:96:22:07:af:f9:df:bb:11:55:04:bb:d1:9e:7d:2b:4e:dd: d9:8f:7f:9b:d8:37:5e:72:15:5d:ae:90:48:15:44:bc:9d:81: 94:3f:39:ee:40:aa:45:d1:08:7b:40:9b:1b:0e:ff:3c:23:85: e1:ac:61:54:14:51:bb:87:43:8b:55:29:93:ce:10:5d:4d:ac: 66:fb:35:71 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm/P2cqLMJikLuELQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NmM2Zjk5ZDMtM2Y4MC00NDRlLThmYzMtNTY2MTUxNzk4MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDXIAAgK19A2TEqG//3D77+uuULZF81HSFov EaPHRO9VM9huqrEkUCNB07nvQwsjUydta29enuCSpPN1VkFIAN9iaBZA1uCW2Rcc ZHugjy463ucNuqoBX7/lG2cQAd1xYotklNAggRqKUeCa9N78RfQQNz+N78ZXTl9y 7GnHLijoObBWIWVFHMs9/ATzYV95OSPTyDh8fvWvIgtY+jFGsHd4/JH6NNudM+zC 7ZHJZbGzm0/yk2kpio5/7P0xvXnbK+TUHLivHn+upJGimy0WKFrhCC9QVeGxSiTL ICVR6iL5rYRa+QVMXPAyjzqvlkRA6mGIxP4A7X60sgsmSvyVAwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHbiRHdu3JheYB/eZARsRdxGpr/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYThhNWU1ZDAtMTIwMy0z MGExLTljODgtM2ZkM2ZkMDZjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaCUFmCsLuyzdA6VblhyIiVFdnzAE+jXHagxdIF3JDuWuTdkioNWrp4nM MJfc9Zbnn49uUqpoaXdG3xLmjWU2uFQHUm6j7z6J8rx/okaPG+gOheKipPRNgDKj n/ZDusGsnB02V9ds7cuI6gb3lImlI/ihhPtCbK4zS45soaFCjhj2qTCiY7XVp+jc mihjlVA8dYOabQ5poiOONixxsO4QuESO5YZ7/giFmPtcUhJJGmk859hetZYiB6/5 37sRVQS70Z59K07d2Y9/m9g3XnIVXa6QSBVEvJ2BlD857kCqRdEIe0CbGw7/PCOF 4axhVBRRu4dDi1Upk84QXU2sZvs1cQ== -----END CERTIFICATE-----Generated at Fri May 9 09:05:20 2025 by rpki-client