$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa File: 8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json) Hash identifier: cNxEwT82dx2ZUm1TQ1XSEPsS7OfuIRExHGbWRpsIFp4= Subject key identifier: 5F:8B:A1:18:63:C3:BC:E9:48:77:A6:5C:F1:CC:9A:9D:84:91:D7:30 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F43285848C6E639A9B332D923E4D35C80 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 64123 IP address blocks: 128.254.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:39:a9:b3:32:d9:23:e4:d3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=1b29579b-9b2d-4308-9b63-8b98f2216a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:5c:89:77:46:2a:ee:00:fa:d3:b8:2d:d9: bf:83:ff:56:bd:50:8a:d1:c9:43:4a:b7:91:8d:57: 88:1b:e6:b6:a1:7f:f7:3f:e7:f4:59:29:15:d6:6f: eb:9b:3c:c4:75:bc:c2:71:4d:b8:ff:cf:c0:67:8c: bb:5a:13:a2:25:a6:2a:1f:14:0e:46:6f:0f:81:fb: 0a:06:79:ea:84:34:e0:8b:c8:1b:8b:73:66:bc:3d: 6a:41:27:9b:0c:d2:96:1b:ab:f8:92:89:5c:c1:9d: 32:37:00:89:99:40:29:9f:8a:b4:d4:c8:60:ad:4c: 3f:b9:65:0d:ad:8e:33:b0:c6:29:bf:86:f6:1f:25: 0b:7b:24:4a:d1:6a:95:e7:9d:6f:48:b5:c9:aa:12: db:e4:cc:f8:51:f1:84:25:f3:ae:a6:7a:5a:a5:0e: 30:bc:68:e4:07:db:71:d3:5f:86:55:36:e2:78:3a: 3c:d9:6d:9c:88:22:bb:f4:cd:5f:db:67:f5:07:9e: 53:91:6a:d4:c5:69:38:bd:44:73:ee:83:7d:67:be: 05:14:f7:43:30:e6:a9:ef:cd:6a:63:f9:62:7e:78: 0f:26:89:65:6f:fa:e6:01:03:0f:34:d7:32:be:9f: 5f:28:9b:d9:0e:13:1d:1d:f3:95:1f:e2:35:99:4f: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:A1:18:63:C3:BC:E9:48:77:A6:5C:F1:CC:9A:9D:84:91:D7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1e:04:56:0c:d2:58:1e:15:a8:46:6d:03:68:82:a7:e3:5f: 65:ba:17:29:71:a4:cb:b3:e4:d8:f7:3d:ca:d0:c3:ed:0b:f3: 75:eb:ad:43:d9:ac:bf:2f:fc:fa:95:0d:a2:23:f2:e5:9c:71: dd:b0:38:48:7b:b7:5a:43:89:75:5c:85:c9:19:8c:12:93:2b: 5b:1e:42:13:e4:2a:5f:04:7b:43:4c:e9:ee:58:76:f9:70:56: 9b:1b:47:ac:ec:00:ab:f7:60:f2:34:99:23:80:20:a1:67:61: dd:00:29:83:85:0f:33:17:9f:58:33:c1:69:d4:30:54:7a:14: 37:a6:c5:8e:a1:d1:40:cf:25:f2:f6:db:fa:b2:48:5e:28:09: 05:b7:43:bc:9d:26:81:24:3e:d1:0b:ca:98:a6:f5:50:33:56: 0b:1b:8c:d2:01:b6:ab:0e:ca:02:d1:f8:14:fe:91:35:4e:88: f8:fe:40:59:36:fe:80:13:7c:af:46:c1:8d:d8:82:35:34:b0: 82:5c:91:03:20:a9:98:e2:74:96:70:76:73:95:8b:65:dc:64: 1e:eb:48:f6:80:1c:13:d5:e0:40:cb:8d:4f:2b:8d:cd:b8:4d: 04:e8:1f:01:0c:40:5c:e5:d7:72:37:71:82:e3:97:96:6e:f6: 0f:06:e3:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jmpszLZI+TTXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk MWIyOTU3OWItOWIyZC00MzA4LTliNjMtOGI5OGYyMjE2YTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvNciXdGKu4A+tO4Ldm/g/9WvVCK0clDSreR jVeIG+a2oX/3P+f0WSkV1m/rmzzEdbzCcU24/8/AZ4y7WhOiJaYqHxQORm8PgfsK BnnqhDTgi8gbi3NmvD1qQSebDNKWG6v4kolcwZ0yNwCJmUApn4q01MhgrUw/uWUN rY4zsMYpv4b2HyULeyRK0WqV551vSLXJqhLb5Mz4UfGEJfOupnpapQ4wvGjkB9tx 01+GVTbieDo82W2ciCK79M1f22f1B55TkWrUxWk4vURz7oN9Z74FFPdDMOap781q Y/lifngPJollb/rmAQMPNNcyvp9fKJvZDhMdHfOVH+I1mU/X7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+LoRhjw7zpSHemXPHMmp2EkdcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvOGI4M2M1ZDctZGY2OS0z ZTRlLThkODctMDE5ZmZlNDE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgeBFYM0lgeFahGbQNogqfjX2W6FylxpMuz5Nj3PcrQw+0L83XrrUPZ rL8v/PqVDaIj8uWccd2wOEh7t1pDiXVchckZjBKTK1seQhPkKl8Ee0NM6e5Ydvlw VpsbR6zsAKv3YPI0mSOAIKFnYd0AKYOFDzMXn1gzwWnUMFR6FDemxY6h0UDPJfL2 2/qySF4oCQW3Q7ydJoEkPtELypim9VAzVgsbjNIBtqsOygLR+BT+kTVOiPj+QFk2 /oATfK9GwY3YgjU0sIJckQMgqZjidJZwdnOVi2XcZB7rSPaAHBPV4EDLjU8rjc24 TQToHwEMQFzl13I3cYLjl5Zu9g8G40o= -----END CERTIFICATE-----Generated at Sun Apr 6 07:15:11 2025 by rpki-client