$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/5d629a60-c4e4-3081-8e50-b5df715469cc.roa File: 5d629a60-c4e4-3081-8e50-b5df715469cc.roa (raw, json) Hash identifier: Z8GcvJ9qyr/OrDodWInB4j2HtlyAcmkpDRDIpAYCqhw= Subject key identifier: 05:0A:34:CF:D0:31:71:90:78:52:26:9E:4A:AC:47:6E:4D:07:71:65 Certificate issuer: /CN=fba57140-a369-4a3a-8edc-69732d179924 Certificate serial: 010D0C9F43285849151157742CB52BF77F948180 Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/5d629a60-c4e4-3081-8e50-b5df715469cc.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 201542 IP address blocks: 134.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:57:74:2c:b5:2b:f7:7f:94:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=03b2f22f-dcbb-4c2f-8deb-2af3b13b8cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:18:8d:5b:ed:53:74:35:73:f7:9a:70:3e: 7a:9d:63:1b:50:23:44:02:fb:45:41:97:3c:dd:14: ee:7f:b3:63:52:35:9e:bd:1c:2a:f7:43:75:c3:8a: ce:ac:62:4a:c6:56:d3:fd:f2:4e:05:68:c0:2a:9a: 2c:e9:b9:ae:c1:4e:d9:ef:58:9a:3f:5a:04:d8:85: 2d:42:a7:ca:3c:b1:e2:e3:f0:e3:f7:b7:86:aa:83: 96:11:43:92:9f:f5:b5:95:61:4a:7d:f4:6f:f4:3f: 3a:82:89:19:9c:8b:d4:25:c7:57:ad:9d:7c:6a:1a: da:18:f9:75:b3:79:ad:68:83:99:bf:aa:81:8b:d4: a1:c3:d7:61:c2:be:f2:d6:12:3a:11:63:06:c8:22: d3:12:f7:66:10:ed:5a:14:24:cd:6d:d6:7d:a9:4a: fd:3f:e8:4d:70:bb:38:c4:68:bb:7e:78:aa:be:8e: 57:64:e5:d5:68:37:7e:34:1f:61:7c:cc:fe:1c:79: db:38:1a:9c:1b:24:14:04:2c:0d:d9:0e:ce:81:39: f0:2c:8a:65:13:28:10:bc:c7:d2:f3:ba:38:fe:d0: 9a:ad:69:32:51:52:55:84:d7:99:6a:63:1d:f1:6f: eb:b9:29:1f:64:3f:bb:c7:38:a5:cf:ff:f1:9b:82: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0A:34:CF:D0:31:71:90:78:52:26:9E:4A:AC:47:6E:4D:07:71:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/5d629a60-c4e4-3081-8e50-b5df715469cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl X509v3 Authority Key Identifier: keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer sbgp-ipAddrBlock: critical IPv4: 134.199.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9e:26:80:ff:68:a5:83:7f:57:1f:61:17:e5:75:68:20:f6: 2e:3b:4a:83:53:22:df:3c:7d:ea:ee:94:8d:59:52:27:08:d9: 2e:04:c1:64:36:ca:e6:7d:c8:f5:73:e0:06:1a:3c:60:d4:13: b4:69:19:b8:6e:b0:bc:c6:ca:16:07:f3:5b:97:0d:cf:07:43: fb:c7:7e:3b:19:af:ce:f5:d6:e1:29:e8:55:4e:04:07:4f:84: e4:26:e0:c4:26:98:06:13:83:26:0b:2f:62:71:7b:7d:2c:3f: 50:f4:ab:f0:36:d5:4a:67:48:4f:2b:92:11:34:9c:8f:ff:40: 06:9a:2c:ec:bd:7a:e7:ce:0a:13:d9:80:15:f0:fc:a4:f3:8d: d6:cc:ce:ff:3c:a8:7e:ed:f9:58:fa:19:a4:91:0c:5e:b9:bc: ed:23:95:9f:de:28:5f:07:3d:b9:4f:6e:11:c8:b9:cb:b6:35: 6b:33:50:cb:d9:6b:5c:66:bc:60:47:26:a8:61:03:39:7c:9b: a8:be:7c:24:c7:86:1f:84:cb:5b:1d:f1:6e:61:4d:8e:d4:1d: 8f:11:f1:1f:44:69:cb:b8:76:9a:30:65:b9:67:da:17:4f:bf: 06:62:cb:02:f9:74:0f:23:cc:83:2a:9a:f1:cb:0d:cb:37:cd: da:93:dd:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVd0LLUr93+UgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJhNTcxNDAtYTM2OS00YTNhLThlZGMtNjk3MzJkMTc5 OTI0MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk MDNiMmYyMmYtZGNiYi00YzJmLThkZWItMmFmM2IxM2I4Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYYjVvtU3Q1c/eacD56nWMbUCNEAvtFQZc8 3RTuf7NjUjWevRwq90N1w4rOrGJKxlbT/fJOBWjAKpos6bmuwU7Z71iaP1oE2IUt QqfKPLHi4/Dj97eGqoOWEUOSn/W1lWFKffRv9D86gokZnIvUJcdXrZ18ahraGPl1 s3mtaIOZv6qBi9Shw9dhwr7y1hI6EWMGyCLTEvdmEO1aFCTNbdZ9qUr9P+hNcLs4 xGi7fniqvo5XZOXVaDd+NB9hfMz+HHnbOBqcGyQUBCwN2Q7OgTnwLIplEygQvMfS 87o4/tCarWkyUVJVhNeZamMd8W/ruSkfZD+7xzilz//xm4JxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUKNM/QMXGQeFImnkqsR25NB3FlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYmE1 NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQxNzk5MjQvNWQ2MjlhNjAtYzRlNC0z MDgxLThlNTAtYjVkZjcxNTQ2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmJhNTcxNDAtYTM2OS00YTNhLThl ZGMtNjk3MzJkMTc5OTI0L2ZiYTU3MTQwLWEzNjktNGEzYS04ZWRjLTY5NzMyZDE3 OTkyNC5jcmwwHwYDVR0jBBgwFoAUDWL403FgbahEpHyrzghxZgeTlQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTcz MmQxNzk5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhscmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeeJoD/aKWDf1cfYRfldWgg9i47SoNTIt88ferulI1ZUicI2S4EwWQ2 yuZ9yPVz4AYaPGDUE7RpGbhusLzGyhYH81uXDc8HQ/vHfjsZr8711uEp6FVOBAdP hOQm4MQmmAYTgyYLL2Jxe30sP1D0q/A21UpnSE8rkhE0nI//QAaaLOy9eufOChPZ gBXw/KTzjdbMzv88qH7t+Vj6GaSRDF65vO0jlZ/eKF8HPblPbhHIucu2NWszUMvZ a1xmvGBHJqhhAzl8m6i+fCTHhh+Ey1sd8W5hTY7UHY8R8R9Eacu4dpowZbln2hdP vwZiywL5dA8jzIMqmvHLDcs3zdqT3To= -----END CERTIFICATE-----Generated at Fri Apr 4 22:57:35 2025 by rpki-client