$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa File: e9da57f8-2566-3d24-9238-98da3a3c87ff.roa (raw, json) Hash identifier: 4gZDm71V/Uj1blPpV2mQk6hVDQB4B3Nm4C4GgKCP5lk= Subject key identifier: 29:61:AA:0E:17:DD:05:05:B7:58:A8:61:1C:B3:EF:17:EF:FD:16:2F Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Certificate serial: 010D0C9F43285849244E799B9B3929A290AB7700 Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 134.195.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:79:9b:9b:39:29:a2:90:ab:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=144a4e5d-bcbc-48b5-85d4-0c24e460ed9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:70:4d:2e:65:e3:db:ee:cd:9f:12:82:a5: ab:5c:6b:3e:be:2e:5b:12:58:d7:de:90:71:69:6f: 8f:86:3d:61:a4:1e:2c:8d:db:f5:6f:68:c7:29:56: de:b4:86:82:7b:f9:21:b5:77:f6:77:1b:62:8d:49: 9a:2f:82:2a:3f:7f:14:22:ee:a9:ef:06:c7:01:5c: b2:80:b7:53:97:fe:5a:8e:27:7a:f1:8d:fd:51:9f: c2:2e:9d:d6:c3:2d:0c:48:61:6c:cd:34:e8:3f:44: e4:07:5e:03:3b:33:30:57:ba:b3:8d:29:d8:7d:d2: 4e:2e:fa:b2:2c:bc:5f:f0:38:a0:e2:de:b5:08:a6: 95:82:84:3b:2e:be:82:43:9a:32:e8:a5:48:45:3a: 88:2a:da:cb:ef:74:c7:7f:9e:af:ec:27:5e:3d:19: 9b:76:f9:32:a4:59:a7:92:54:7b:12:40:05:1c:88: e1:de:66:03:16:96:f8:c2:03:36:f9:ef:a0:e8:6b: a5:5c:b2:33:59:2f:e1:0e:2c:f7:d6:3e:b3:a9:19: d0:3a:40:82:23:34:54:42:68:b2:d6:3e:23:25:a0: 24:08:68:60:ea:10:f1:c7:ac:22:f9:dd:11:8a:00: 89:d9:66:10:c2:a1:44:de:f0:b7:fa:89:98:47:00: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:61:AA:0E:17:DD:05:05:B7:58:A8:61:1C:B3:EF:17:EF:FD:16:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl X509v3 Authority Key Identifier: keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8f:2e:1e:9c:96:62:6c:fc:5b:c6:98:65:01:27:91:14:c2: 26:c8:c9:a9:56:b6:84:7b:35:4c:20:7f:35:a9:56:a2:fd:b5: c7:b3:46:26:7a:07:12:b1:ec:85:d4:78:05:ea:a2:89:c8:6c: 34:63:45:4f:fb:79:70:1f:cd:55:af:32:d6:fa:a6:6b:9a:80: 50:6e:59:e2:26:c0:6e:b6:e3:5e:ab:b4:2d:c8:df:36:f7:26: 50:fc:47:93:68:f6:66:2f:49:ae:03:d0:6a:b3:82:97:a7:68: 2f:a9:e9:d9:34:5b:cb:19:f8:a2:d7:1e:f8:37:4e:21:18:df: 99:dc:3d:98:44:66:de:c4:82:59:c3:d1:bd:94:52:95:a5:26: a1:e0:d9:cc:4b:4f:b9:c5:50:d5:02:3e:35:6f:d4:00:2d:f5: 20:4b:76:10:74:ef:5f:75:04:30:34:63:d9:1c:12:41:19:19: a1:c1:92:45:79:3e:77:72:c2:25:08:be:1f:e7:02:dd:de:d1: 54:c8:42:8b:a5:e0:2e:07:18:34:e1:cf:06:32:63:ce:08:6e: 96:b1:2a:18:47:98:d9:fc:5d:db:dc:0c:46:7c:9d:1b:05:b1: d2:2a:a9:38:4a:35:e0:69:30:3e:92:80:61:5d:7e:ee:17:00: b7:23:31:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnmbmzkpopCrdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FiYTU1YWUtODMzYS00NDg3LThiZTEtOWI5OTdhZGJi ZWM5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MTQ0YTRlNWQtYmNiYy00OGI1LTg1ZDQtMGMyNGU0NjBlZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEdwTS5l49vuzZ8SgqWrXGs+vi5bEljX3pBx aW+Phj1hpB4sjdv1b2jHKVbetIaCe/khtXf2dxtijUmaL4IqP38UIu6p7wbHAVyy gLdTl/5ajid68Y39UZ/CLp3Wwy0MSGFszTToP0TkB14DOzMwV7qzjSnYfdJOLvqy LLxf8Dig4t61CKaVgoQ7Lr6CQ5oy6KVIRTqIKtrL73THf56v7CdePRmbdvkypFmn klR7EkAFHIjh3mYDFpb4wgM2+e+g6GulXLIzWS/hDiz31j6zqRnQOkCCIzRUQmiy 1j4jJaAkCGhg6hDxx6wi+d0RigCJ2WYQwqFE3vC3+omYRwDDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClhqg4X3QUFt1ioYRyz7xfv/RYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWJh NTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5N2FkYmJlYzkvZTlkYTU3ZjgtMjU2Ni0z ZDI0LTkyMzgtOThkYTNhM2M4N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FiYTU1YWUtODMzYS00NDg3LThi ZTEtOWI5OTdhZGJiZWM5LzdhYmE1NWFlLTgzM2EtNDQ4Ny04YmUxLTliOTk3YWRi YmVjOS5jcmwwHwYDVR0jBBgwFoAUm7mq9xQHJPlj+rsVMn+tqskRLrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWJhNTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5 N2FkYmJlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6PLh6clmJs/FvGmGUBJ5EUwibIyalWtoR7NUwgfzWpVqL9tcezRiZ6 BxKx7IXUeAXqoonIbDRjRU/7eXAfzVWvMtb6pmuagFBuWeImwG62416rtC3I3zb3 JlD8R5No9mYvSa4D0GqzgpenaC+p6dk0W8sZ+KLXHvg3TiEY35ncPZhEZt7EglnD 0b2UUpWlJqHg2cxLT7nFUNUCPjVv1AAt9SBLdhB07191BDA0Y9kcEkEZGaHBkkV5 PndywiUIvh/nAt3e0VTIQoul4C4HGDThzwYyY84IbpaxKhhHmNn8XdvcDEZ8nRsF sdIqqThKNeBpMD6SgGFdfu4XALcjMb0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:14:09 2025 by rpki-client