$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa File: aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa (raw, json) Hash identifier: AEMtkaPfalWMpyJFEYGpHZNCXkevLIEX44mil3Srtzc= Subject key identifier: 03:ED:69:8D:E9:B4:53:41:D0:9A:08:2A:45:6F:C6:A4:06:1D:0B:02 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F432858490E16BCED16E4C4DCEA422180 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 92 IP address blocks: 128.153.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bc:ed:16:e4:c4:dc:ea:42:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=6cf5d115-2542-43da-86b0-8e9caca49c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:f7:03:73:40:0f:d2:01:3b:2c:5e:e3:8b: 4c:be:46:2a:f8:ce:b3:7d:ec:5a:7e:1b:84:d8:c2: f3:bf:e5:ec:b9:3e:4b:47:59:b2:df:0e:01:0a:bf: ea:81:af:af:32:6e:fd:3d:a1:13:5f:b4:8d:5a:3e: d1:e5:6e:c4:9b:cf:73:c2:31:cb:7e:59:91:ad:0f: 0f:a1:a7:9d:a2:06:3d:51:51:4e:8c:0c:34:b4:15: dd:00:f3:a1:88:3c:66:fd:02:21:45:ac:f3:3d:d9: 45:e8:e9:98:5f:99:8c:d3:4e:b9:e6:05:b7:86:83: 21:28:80:10:69:33:c8:b5:30:69:28:fc:b6:7f:c7: 3a:d2:46:75:1e:0b:65:5f:c5:38:bc:f2:9f:de:5e: ed:17:bc:09:55:7b:fb:34:71:3d:64:01:6d:5a:a3: 35:2b:cc:91:63:ba:8c:77:47:e3:50:94:f0:f8:8b: 87:5c:69:3a:a5:00:c1:74:68:9c:43:c3:82:15:9f: 53:29:3f:bd:a2:36:2a:49:71:ec:05:41:e4:4d:5e: 97:79:01:0c:dd:b0:6c:6e:eb:6b:d4:b2:47:51:e4: 22:1e:71:54:ea:a7:60:f4:4b:75:ce:9e:fc:57:2e: 2e:16:9c:f9:3b:e7:11:c8:72:e0:3a:45:60:81:52: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:ED:69:8D:E9:B4:53:41:D0:9A:08:2A:45:6F:C6:A4:06:1D:0B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7f:0c:f1:e4:c0:fc:e5:bc:3a:68:35:8d:c1:09:10:90:1b: de:47:15:2b:0e:94:66:fa:fb:55:1c:20:13:d1:bb:5a:1c:db: df:dd:ff:ef:28:de:d8:f8:d5:b4:a1:8f:f8:4c:f6:06:cd:94: d5:01:dc:a1:d0:37:b5:8e:f3:78:43:10:09:24:e1:f0:c5:46: da:de:89:a3:01:72:87:2d:64:85:2e:2e:3c:60:63:b0:ed:3f: 94:0f:43:de:8f:ff:28:ef:1e:54:b4:59:46:df:72:d1:14:cc: 31:71:08:2f:8f:72:e3:12:2a:1c:9f:79:1c:8d:cb:02:e9:17: 4d:78:0c:86:c8:f3:5e:6f:6f:55:09:02:2a:c7:63:8b:0f:41: 5c:a6:cb:cf:71:6c:f5:23:e5:ab:13:f5:d7:43:82:50:20:21: 4c:b2:23:f5:ae:f6:0e:32:5f:1b:5a:c1:e0:f3:b9:16:94:b0: d7:10:af:01:aa:ee:b6:aa:93:97:cc:cc:7f:e8:6b:51:53:e3: d4:96:f2:25:70:64:7f:e4:86:b5:ed:23:d8:58:44:7e:ed:cb: 00:e2:97:4c:c8:41:6a:cf:f4:a6:1d:ac:c8:3c:1e:2e:47:4b: 99:a2:f1:65:b4:a1:64:7c:e7:50:0d:e7:d0:92:88:f2:84:ec: 56:8a:f2:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrztFuTE3OpCIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NmNmNWQxMTUtMjU0Mi00M2RhLTg2YjAtOGU5Y2FjYTQ5YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls/3A3NAD9IBOyxe44tMvkYq+M6zfexafhuE 2MLzv+XsuT5LR1my3w4BCr/qga+vMm79PaETX7SNWj7R5W7Em89zwjHLflmRrQ8P oaedogY9UVFOjAw0tBXdAPOhiDxm/QIhRazzPdlF6OmYX5mM00655gW3hoMhKIAQ aTPItTBpKPy2f8c60kZ1HgtlX8U4vPKf3l7tF7wJVXv7NHE9ZAFtWqM1K8yRY7qM d0fjUJTw+IuHXGk6pQDBdGicQ8OCFZ9TKT+9ojYqSXHsBUHkTV6XeQEM3bBsbutr 1LJHUeQiHnFU6qdg9Et1zp78Vy4uFpz5O+cRyHLgOkVggVJFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPtaY3ptFNB0JoIKkVvxqQGHQsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvYWVlYjdlZGItYjc4Yy0z NjNkLTlkZmMtMjYxMzJjYjVkM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB/DPHkwPzlvDpoNY3BCRCQG95HFSsOlGb6+1UcIBPRu1oc29/d/+8o 3tj41bShj/hM9gbNlNUB3KHQN7WO83hDEAkk4fDFRtreiaMBcoctZIUuLjxgY7Dt P5QPQ96P/yjvHlS0WUbfctEUzDFxCC+PcuMSKhyfeRyNywLpF014DIbI815vb1UJ AirHY4sPQVymy89xbPUj5asT9ddDglAgIUyyI/Wu9g4yXxtaweDzuRaUsNcQrwGq 7raqk5fMzH/oa1FT49SW8iVwZH/khrXtI9hYRH7tywDil0zIQWrP9KYdrMg8Hi5H S5mi8WW0oWR851AN59CSiPKE7FaK8rU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:46 2025 by rpki-client