$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: SIxe65on8Ic46xdxpsO50xANZgf6DFy7tQZNocoZ5oM= Subject key identifier: 25:1B:87:25:0B:C5:24:F8:F4:47:85:90:EB:8D:CC:F6:7A:9D:02:9A Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F432858494B640D94C1DA97D059A6A660 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0d:94:c1:da:97:d0:59:a6:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=2d94f515-a2c2-492f-8ceb-eafcc7898468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:09:a5:9b:17:64:d0:0b:1e:4a:93:f9:91: 55:ca:ee:1c:4b:6c:a7:9c:14:2c:bc:7f:77:47:51: a3:ea:90:7d:d1:5e:17:b1:95:2b:77:13:6c:55:9c: f1:44:95:1d:78:43:f6:46:e0:3c:29:98:03:c2:ed: f5:74:1b:a6:e9:eb:a4:9d:ef:1e:a1:a1:3b:49:4f: 95:cc:bb:ae:39:dd:e8:93:b4:b4:d4:d9:48:a7:c6: 8f:75:41:7b:95:3c:4e:bf:09:7f:a5:ab:d4:5d:04: 9c:84:79:b0:7b:bf:42:23:e8:ec:b4:a5:e9:6d:cb: 23:6b:de:dc:03:c1:f4:82:b3:86:de:13:22:48:5f: 30:8a:b3:62:8f:a7:a2:21:e2:b0:64:29:68:2b:ea: 9c:47:0e:88:cc:8e:60:88:41:5b:7d:21:ed:14:56: e2:b1:05:f2:09:14:3e:a8:2a:6b:7b:a2:99:84:d3: fb:dc:1b:01:9c:5e:7c:b0:73:c6:9a:24:bb:e0:6a: 6c:ff:d1:3b:78:5a:ef:0b:a0:af:66:0d:d2:2b:ab: 1e:a1:78:7a:01:a9:ed:d6:ce:1e:90:43:fb:30:5c: 71:48:44:ac:24:80:69:d0:23:9a:01:f3:13:fb:62: 35:74:2b:14:f5:06:33:c7:7e:cc:30:0c:02:9f:50: 15:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1B:87:25:0B:C5:24:F8:F4:47:85:90:EB:8D:CC:F6:7A:9D:02:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e0:5b:da:bb:6a:ac:1d:39:ec:2a:4d:2b:50:54:34:5f:97: a3:1c:39:4a:a6:33:e9:cb:ff:d2:0f:3f:cf:54:ea:82:67:ab: e7:20:0a:a1:76:0d:04:4c:2a:7b:3d:30:95:d6:e5:61:7b:a1: ae:a4:9e:17:32:ef:85:08:b9:c4:e0:0b:15:b9:30:86:3f:26: 64:dc:11:84:7a:f0:89:9d:88:cb:93:ad:a4:06:c1:4a:70:43: f6:b2:96:63:48:da:c5:e4:17:d3:a1:35:cb:2c:66:1c:0e:dc: c6:98:f4:2b:c4:64:ba:af:7b:dc:71:7e:0e:5c:a0:fe:09:10: 9e:49:97:7e:ab:c8:f0:6c:8f:ea:75:43:0e:ef:65:4c:4a:5c: b3:ff:7e:ca:8d:47:7a:92:0b:9a:4e:f1:9d:df:59:f1:c2:24: 7d:8b:28:46:6f:f0:e9:f2:9d:87:96:a0:99:e5:aa:f6:2c:be: 2c:61:03:22:56:df:11:9c:fa:69:b8:58:88:d1:7d:22:d1:b1: 8c:42:94:7b:74:31:0d:16:aa:70:9f:27:ca:7c:4e:48:ea:af: a2:4c:b5:22:02:bb:ff:1f:ff:88:fd:66:d5:82:6c:b2:1a:a0: 31:41:d9:b8:a8:3d:67:01:2e:18:14:9c:79:5d:65:40:e8:33: 43:86:e5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA2UwdqX0FmmpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MmQ5NGY1MTUtYTJjMi00OTJmLThjZWItZWFmY2M3ODk4NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP8JpZsXZNALHkqT+ZFVyu4cS2ynnBQsvH93 R1Gj6pB90V4XsZUrdxNsVZzxRJUdeEP2RuA8KZgDwu31dBum6eukne8eoaE7SU+V zLuuOd3ok7S01NlIp8aPdUF7lTxOvwl/pavUXQSchHmwe79CI+jstKXpbcsja97c A8H0grOG3hMiSF8wirNij6eiIeKwZCloK+qcRw6IzI5giEFbfSHtFFbisQXyCRQ+ qCpre6KZhNP73BsBnF58sHPGmiS74Gps/9E7eFrvC6CvZg3SK6seoXh6Aant1s4e kEP7MFxxSESsJIBp0COaAfMT+2I1dCsU9QYzx37MMAwCn1AVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUbhyULxST49EeFkOuNzPZ6nQKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvgW9q7aqwdOewqTStQVDRfl6McOUqmM+nL/9IPP89U6oJnq+cgCqF2 DQRMKns9MJXW5WF7oa6knhcy74UIucTgCxW5MIY/JmTcEYR68ImdiMuTraQGwUpw Q/aylmNI2sXkF9OhNcssZhwO3MaY9CvEZLqve9xxfg5coP4JEJ5Jl36ryPBsj+p1 Qw7vZUxKXLP/fsqNR3qSC5pO8Z3fWfHCJH2LKEZv8OnynYeWoJnlqvYsvixhAyJW 3xGc+mm4WIjRfSLRsYxClHt0MQ0WqnCfJ8p8Tkjqr6JMtSICu/8f/4j9ZtWCbLIa oDFB2bioPWcBLhgUnHldZUDoM0OG5Qw= -----END CERTIFICATE-----Generated at Fri Apr 11 22:28:03 2025 by rpki-client