$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: 03vlzUlgiJQQgsYMY20fA592N0j8hp13/mRS4XfD7to= Subject key identifier: B6:8F:C1:C7:60:FD:43:4B:32:3A:BE:F5:8D:4D:83:B2:8F:0A:88:5C Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F43285849711434AE3FBA7E6D108F02A0 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:34:ae:3f:ba:7e:6d:10:8f:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=dca3b99c-078b-4d13-811e-4e482a0d61fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:6d:1d:90:d9:c9:86:46:e5:96:32:aa:78: c6:23:30:89:a5:c9:98:5e:61:03:23:86:18:1e:46: 7c:44:69:19:af:78:ec:26:e3:a1:24:84:9f:12:df: 96:5b:c8:18:fc:bf:26:e2:c4:6d:2f:af:c4:3c:18: fc:6d:9e:b4:4e:55:5e:0f:a5:14:d7:1d:8e:38:4e: 3d:07:f8:d7:d8:34:c0:0b:f1:67:b1:fa:7b:44:6d: 9b:f7:00:9c:e0:a2:80:b3:09:22:59:9f:5a:2e:d9: bf:bb:93:f7:66:92:af:d8:2c:a4:5f:87:cf:5e:35: d0:6f:61:88:2f:b9:a3:bd:2b:a3:5a:48:48:45:f2: bf:68:19:ad:09:a2:4e:43:50:67:f3:d1:35:f3:62: 7f:89:bc:79:69:db:cb:03:da:e3:a8:05:b0:b2:33: 4c:14:ed:2a:81:39:c0:4c:52:2e:8c:ba:a5:28:f6: 5e:36:32:1f:63:2e:7c:eb:8e:28:79:79:71:b4:b8: 46:77:7d:12:bc:9c:26:18:18:3d:a3:93:4e:9a:9a: 3f:a7:b2:2a:f4:43:a6:c0:83:89:b2:54:9f:74:bd: 0e:ba:50:41:bd:9b:0e:b8:a7:6c:bd:59:da:59:69: 81:a4:d2:e9:a3:09:a1:23:3e:c2:78:bd:01:4f:60: 21:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:C1:C7:60:FD:43:4B:32:3A:BE:F5:8D:4D:83:B2:8F:0A:88:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4f:05:8e:0d:03:2d:97:cd:93:08:e1:56:bf:c1:4a:70:d1: 66:6c:42:d7:31:fb:2f:20:7a:d9:2a:91:87:99:9b:2a:ac:54: 64:0c:13:15:8a:6d:2e:61:41:8b:f5:26:8c:45:7b:af:2c:57: 76:2e:9e:96:29:e3:cf:fe:5f:46:4e:f0:af:50:df:e0:2f:71: ad:95:44:68:72:2c:82:c2:a1:a5:04:b4:cc:1a:e6:28:a2:84: f6:36:46:14:37:83:de:2a:70:5c:8a:47:c1:50:29:33:96:fe: 90:69:0f:ee:91:d9:54:28:f9:89:42:9e:81:9a:eb:5d:dc:44: 21:67:62:16:e8:2e:50:ed:28:95:92:9f:19:54:d2:b6:a1:09: 73:23:cb:db:08:0b:9d:ac:db:9f:32:5f:f8:fd:9c:64:d3:3a: a4:fc:76:3a:54:d7:e5:62:4f:c7:25:c5:5a:61:9c:88:ee:fe: 12:f0:cb:d4:3e:5c:6e:67:3e:cc:b5:a5:4d:d5:18:9b:36:1f: 81:22:b9:45:c3:d8:e1:c8:f6:7a:81:20:63:21:4e:ab:1c:f6: 7e:6d:80:f9:bc:c2:18:fc:0f:41:e1:d6:3e:8f:1d:ff:78:e1: 88:ef:85:bc:be:5a:64:ce:4d:56:88:bf:f5:6b:6c:1e:8e:dd: dc:c0:8d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDSuP7p+bRCPAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZGNhM2I5OWMtMDc4Yi00ZDEzLTgxMWUtNGU0ODJhMGQ2MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkndtHZDZyYZG5ZYyqnjGIzCJpcmYXmEDI4YY HkZ8RGkZr3jsJuOhJISfEt+WW8gY/L8m4sRtL6/EPBj8bZ60TlVeD6UU1x2OOE49 B/jX2DTAC/Fnsfp7RG2b9wCc4KKAswkiWZ9aLtm/u5P3ZpKv2CykX4fPXjXQb2GI L7mjvSujWkhIRfK/aBmtCaJOQ1Bn89E182J/ibx5advLA9rjqAWwsjNMFO0qgTnA TFIujLqlKPZeNjIfYy58644oeXlxtLhGd30SvJwmGBg9o5NOmpo/p7Iq9EOmwIOJ slSfdL0OulBBvZsOuKdsvVnaWWmBpNLpowmhIz7CeL0BT2AhZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaPwcdg/UNLMjq+9Y1Ng7KPCohcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlPBY4NAy2XzZMI4Va/wUpw0WZsQtcx+y8getkqkYeZmyqsVGQMExWK bS5hQYv1JoxFe68sV3YunpYp48/+X0ZO8K9Q3+Avca2VRGhyLILCoaUEtMwa5iii hPY2RhQ3g94qcFyKR8FQKTOW/pBpD+6R2VQo+YlCnoGa613cRCFnYhboLlDtKJWS nxlU0rahCXMjy9sIC52s258yX/j9nGTTOqT8djpU1+ViT8clxVphnIju/hLwy9Q+ XG5nPsy1pU3VGJs2H4EiuUXD2OHI9nqBIGMhTqsc9n5tgPm8whj8D0Hh1j6PHf94 4Yjvhby+WmTOTVaIv/VrbB6O3dzAjTQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:18:42 2025 by rpki-client