$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa File: a407ccb2-6152-35cb-88b0-b37aec438e5b.roa (raw, json) Hash identifier: XfU+Zn6iGZLatj7ySVbVmAQEej/RClEOlux+saWKLnI= Subject key identifier: 2C:98:97:1E:C6:F0:31:93:40:17:9F:BA:44:AF:60:E0:C6:96:C2:C0 Certificate issuer: /CN=700690a7-1957-45e2-8744-ee9735b07319 Certificate serial: 010D0C9F4328584961B990CEC090B73FE4ADD180 Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 36289 IP address blocks: 128.254.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:90:ce:c0:90:b7:3f:e4:ad:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=3f758d89-2ae0-4536-b074-d98a196ef733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ac:15:65:2a:fc:a3:e9:95:47:a8:d7:c3:85: d6:f9:b9:85:0c:a4:1f:07:e2:c5:77:16:0f:dc:d7: 4c:08:42:e1:4f:b7:df:63:c9:b7:e4:43:66:38:33: 2f:02:23:42:f0:e4:98:1b:93:28:1f:bd:a3:8a:3b: d1:cf:6c:53:76:14:b8:e1:eb:6f:30:1a:7e:98:31: d6:03:51:32:6f:e0:1c:3d:92:f2:90:29:c7:4d:a2: 8d:37:cc:02:bc:bf:d2:f7:32:f2:82:35:3b:06:3d: 17:72:3f:04:db:38:3f:d6:56:81:b0:9c:06:41:42: 6f:63:3e:23:43:4f:da:38:7e:36:fb:68:4a:3b:1c: 54:53:06:81:b3:96:51:16:ef:10:80:0c:ae:b5:46: 7b:05:20:f2:5c:6e:c2:2e:51:68:48:83:62:53:67: 91:62:c6:64:93:9f:77:14:55:8c:5f:bb:78:6e:33: f3:a5:d7:6c:9c:7a:c2:93:bb:3a:f4:eb:63:dc:e7: f3:b2:1f:0e:85:37:8b:59:79:d1:9e:9d:43:81:78: cf:e0:e9:51:51:5a:21:9b:a9:97:dc:dc:5c:9f:bb: 7c:76:fc:02:93:1f:4d:11:b4:6f:f9:ab:83:34:db: 54:e9:a9:8c:8a:11:55:80:d3:ee:db:8c:78:c8:05: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:97:1E:C6:F0:31:93:40:17:9F:BA:44:AF:60:E0:C6:96:C2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl X509v3 Authority Key Identifier: keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer sbgp-ipAddrBlock: critical IPv4: 128.254.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:78:85:6a:2b:4c:30:4e:55:7a:f8:3a:57:cf:5d:60:ed:d4: 3a:1d:66:84:ee:45:db:c9:5a:c9:f6:ef:71:ce:39:32:7e:43: da:01:a4:ba:0e:99:c6:8f:01:af:4f:e7:b2:94:e4:1c:42:1a: b2:ad:b4:3f:46:5f:d9:7f:a0:6f:d8:1a:7f:88:ed:54:74:3a: 44:d6:f6:78:b4:25:f1:e3:a4:8a:75:db:78:5d:d3:ef:f6:78: a0:67:7c:91:16:6d:4f:fe:db:45:4b:cb:f1:95:f7:8b:9d:9c: 2c:e8:95:96:3d:b8:96:44:a2:4a:9e:b8:b2:1b:39:9e:80:3d: 20:12:ae:fd:c8:f9:c6:37:54:3e:d6:ad:f9:75:b2:6d:84:56: 30:05:79:72:f9:23:3f:04:13:15:6f:d0:20:2c:ef:24:6c:43: 1d:81:b1:15:bc:34:a6:87:af:e3:6e:17:68:a2:7e:83:4e:78: cb:3a:94:1f:43:eb:39:12:29:8f:f4:66:12:d9:7e:47:21:af: e9:27:f0:d9:43:5a:eb:53:2d:e7:d4:ad:08:9a:9a:b0:e2:36: 2e:82:a2:12:9a:b6:c7:d7:d2:06:f9:58:35:9b:78:27:f4:98: 25:9e:4f:f3:42:25:dd:76:38:d0:0a:23:6d:cf:40:65:a3:6c: df:4a:50:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZDOwJC3P+St0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNjkwYTctMTk1Ny00NWUyLTg3NDQtZWU5NzM1YjA3 MzE5MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk M2Y3NThkODktMmFlMC00NTM2LWIwNzQtZDk4YTE5NmVmNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKwVZSr8o+mVR6jXw4XW+bmFDKQfB+LFdxYP 3NdMCELhT7ffY8m35ENmODMvAiNC8OSYG5MoH72jijvRz2xTdhS44etvMBp+mDHW A1Eyb+AcPZLykCnHTaKNN8wCvL/S9zLygjU7Bj0Xcj8E2zg/1laBsJwGQUJvYz4j Q0/aOH42+2hKOxxUUwaBs5ZRFu8QgAyutUZ7BSDyXG7CLlFoSINiU2eRYsZkk593 FFWMX7t4bjPzpddsnHrCk7s69Otj3Ofzsh8OhTeLWXnRnp1DgXjP4OlRUVohm6mX 3Nxcn7t8dvwCkx9NEbRv+auDNNtU6amMihFVgNPu24x4yAWK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyYlx7G8DGTQBefukSvYODGlsLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2 OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3MzViMDczMTkvYTQwN2NjYjItNjE1Mi0z NWNiLTg4YjAtYjM3YWVjNDM4ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwNjkwYTctMTk1Ny00NWUyLTg3 NDQtZWU5NzM1YjA3MzE5LzcwMDY5MGE3LTE5NTctNDVlMi04NzQ0LWVlOTczNWIw NzMxOS5jcmwwHwYDVR0jBBgwFoAUIamavUUq0vNcIiwf8NmYuXDa2n0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3 MzViMDczMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF4hWorTDBOVXr4OlfPXWDt1DodZoTuRdvJWsn273HOOTJ+Q9oBpLoO mcaPAa9P57KU5BxCGrKttD9GX9l/oG/YGn+I7VR0OkTW9ni0JfHjpIp123hd0+/2 eKBnfJEWbU/+20VLy/GV94udnCzolZY9uJZEokqeuLIbOZ6APSASrv3I+cY3VD7W rfl1sm2EVjAFeXL5Iz8EExVv0CAs7yRsQx2BsRW8NKaHr+NuF2iifoNOeMs6lB9D 6zkSKY/0ZhLZfkchr+kn8NlDWutTLefUrQiamrDiNi6CohKatsfX0gb5WDWbeCf0 mCWeT/NCJd12ONAKI23PQGWjbN9KUGM= -----END CERTIFICATE-----Generated at Fri Apr 4 23:55:41 2025 by rpki-client