$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa File: 8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa (raw, json) Hash identifier: hi7ACuCXv8tpW+7ewBJlft7KyF3Zc4fiTfoiTLWOscs= Subject key identifier: CC:5C:16:A4:1B:59:05:6B:90:45:97:25:8A:53:D5:03:4D:02:3C:66 Certificate issuer: /CN=e22f9709-dbc2-4fbd-a776-befd371f460a Certificate serial: 010D0C9F43285848B1F62FC640AB9332A237B180 Authority key identifier: 0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 32728 IP address blocks: 205.132.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2f:c6:40:ab:93:32:a2:37:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22f9709-dbc2-4fbd-a776-befd371f460a Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=86914222-1129-4bd5-bba0-4497505f43d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:5c:8e:31:0d:06:a1:73:74:b3:28:26:e7: ba:98:1f:e4:19:45:32:87:08:13:72:5d:2c:b2:09: a8:c9:dc:41:9e:27:a3:36:5d:c4:92:f6:0e:41:18: 6d:18:55:a7:98:44:1a:a1:f0:ac:6e:fe:1b:8d:39: a4:e3:8a:c9:f6:3c:53:5a:31:e6:48:43:3c:7f:ab: 61:e3:c9:d4:eb:e4:a8:75:f1:dd:d2:a4:8d:79:f2: 48:82:e6:27:ad:4d:2f:9b:95:e1:b8:95:42:3e:0b: 2b:20:bd:04:87:4b:6c:59:ed:0d:21:a1:d8:ec:5d: 9a:1f:06:d5:16:d8:b1:ef:1c:db:33:ea:e4:63:ad: 99:ad:94:d9:e2:42:b3:fb:90:94:79:ab:e0:00:1e: 74:6b:a1:b1:a1:67:2f:12:43:e2:91:34:d7:d8:cf: 07:e0:a1:1c:9f:22:b1:df:f3:54:d8:b9:4d:f0:33: 2d:ca:e7:63:bc:36:51:9d:8d:44:1e:b2:8b:b9:86: 2a:44:5d:85:a2:16:b8:73:c8:a4:1a:0a:2d:76:31: aa:66:15:6a:ce:11:2a:23:5d:8a:b7:c9:ca:bd:f1: 85:64:b1:b7:8c:10:4a:28:da:b6:26:34:ac:dc:c3: 61:00:65:fd:e0:af:49:b3:bd:32:ee:b0:f7:55:ae: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5C:16:A4:1B:59:05:6B:90:45:97:25:8A:53:D5:03:4D:02:3C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl X509v3 Authority Key Identifier: keyid:0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer sbgp-ipAddrBlock: critical IPv4: 205.132.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:2a:52:ec:f9:e0:cf:00:2d:cb:e7:9e:03:8a:83:82:14:d4: a9:c0:28:67:63:6a:98:3a:00:af:70:2d:c5:8d:e4:53:99:91: ab:4f:c3:41:eb:80:da:93:12:c3:02:f2:74:c5:eb:4d:8f:69: a0:c1:ab:2a:01:90:18:b3:91:7f:6b:e4:d7:97:16:0e:5e:68: 47:0e:54:39:c8:dd:ec:1d:0f:c4:1b:d3:98:c9:2b:9f:52:c7: d6:11:a5:b9:1c:b0:14:7c:a3:b0:57:97:96:cb:a3:4f:5f:a6: 4d:5e:c8:c3:d3:0e:9c:29:c7:a7:7e:c4:2b:31:cf:40:0b:62: a2:1d:d7:a8:b5:6a:20:49:1d:86:a6:b1:9e:74:3f:4c:30:b1: db:6e:70:bf:29:37:15:39:f7:b8:17:9b:bc:ef:72:61:f9:eb: d2:25:51:96:8d:ac:a5:d8:2d:63:0d:37:26:f1:60:19:d1:d8: 2a:33:5f:3c:da:fb:12:29:95:c2:39:03:62:54:d5:6f:96:2c: 01:ff:af:22:7a:32:6e:9a:90:94:4d:dd:26:fa:de:9e:a4:e2: ae:40:43:44:a8:bd:dd:35:1e:82:ed:42:fd:77:95:4d:af:a4: 0a:f8:09:06:f1:0d:f5:17:5c:dd:ce:41:cd:07:31:6f:50:6d: 7d:56:1c:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i/GQKuTMqI3sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIyZjk3MDktZGJjMi00ZmJkLWE3NzYtYmVmZDM3MWY0 NjBhMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ODY5MTQyMjItMTEyOS00YmQ1LWJiYTAtNDQ5NzUwNWY0M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR5cjjENBqFzdLMoJue6mB/kGUUyhwgTcl0s sgmoydxBniejNl3EkvYOQRhtGFWnmEQaofCsbv4bjTmk44rJ9jxTWjHmSEM8f6th 48nU6+SodfHd0qSNefJIguYnrU0vm5XhuJVCPgsrIL0Eh0tsWe0NIaHY7F2aHwbV Ftix7xzbM+rkY62ZrZTZ4kKz+5CUeavgAB50a6GxoWcvEkPikTTX2M8H4KEcnyKx 3/NU2LlN8DMtyudjvDZRnY1EHrKLuYYqRF2Foha4c8ikGgotdjGqZhVqzhEqI12K t8nKvfGFZLG3jBBKKNq2JjSs3MNhAGX94K9Js70y7rD3Va5dUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxcFqQbWQVrkEWXJYpT1QNNAjxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMjJm OTcwOS1kYmMyLTRmYmQtYTc3Ni1iZWZkMzcxZjQ2MGEvOGYwYTQwZTYtYzVhYy0z YWJmLTg4ZGEtM2MzMWI0ZWY3ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTIyZjk3MDktZGJjMi00ZmJkLWE3 NzYtYmVmZDM3MWY0NjBhL2UyMmY5NzA5LWRiYzItNGZiZC1hNzc2LWJlZmQzNzFm NDYwYS5jcmwwHwYDVR0jBBgwFoAUCihN378psd1If6GpxhW2EHZ/UAIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lMjJmOTcwOS1kYmMyLTRmYmQtYTc3Ni1iZWZk MzcxZjQ2MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsqUuz54M8ALcvnngOKg4IU1KnAKGdjapg6AK9wLcWN5FOZkatPw0Hr gNqTEsMC8nTF602PaaDBqyoBkBizkX9r5NeXFg5eaEcOVDnI3ewdD8Qb05jJK59S x9YRpbkcsBR8o7BXl5bLo09fpk1eyMPTDpwpx6d+xCsxz0ALYqId16i1aiBJHYam sZ50P0wwsdtucL8pNxU597gXm7zvcmH569IlUZaNrKXYLWMNNybxYBnR2CozXzza +xIplcI5A2JU1W+WLAH/ryJ6Mm6akJRN3Sb63p6k4q5AQ0Sovd01HoLtQv13lU2v pAr4CQbxDfUXXN3OQc0HMW9QbX1WHH8= -----END CERTIFICATE-----Generated at Tue Apr 8 23:41:38 2025 by rpki-client