$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa File: 129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (raw, json) Hash identifier: E1zq7KKPfIB4lXPcnTZbQyC5pmMup2II8916wovGdJ0= Subject key identifier: F9:67:1E:B6:AF:E4:F1:0B:F8:4A:09:57:50:0C:AA:22:53:0F:48:08 Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F43285849244E7C2365FC360FCEC68D00 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7c:23:65:fc:36:0f:ce:c6:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=74873dd6-6c99-41e0-829d-0754526747a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:8c:f0:02:cf:df:e4:f0:af:96:0d:8e:7a: 92:2a:b6:bf:51:b3:d4:08:d7:08:fb:d0:89:30:65: 42:e2:47:03:32:ea:3d:72:71:fc:e4:22:77:0d:76: 5e:ec:1b:63:cd:9b:f5:85:da:1d:16:9d:e2:26:2d: 42:4e:a0:8d:60:e4:71:54:a2:8e:fc:cb:76:c4:4a: 20:b0:1d:2f:3d:cc:a4:63:a0:66:38:79:1e:65:fd: 42:28:49:43:f6:ba:52:9c:ad:b0:30:dd:63:ba:7d: 90:23:aa:6e:0c:86:ae:e4:d1:b1:a9:c0:38:9d:c1: c0:12:2d:7e:8e:97:db:33:a9:81:ca:07:fa:d6:c2: 47:e3:da:e5:da:7b:62:84:dd:6f:57:7f:6f:71:57: f3:21:56:7d:3f:7f:58:37:f4:ec:fe:e3:90:0f:1f: 50:88:44:84:5e:e0:6f:ae:12:c8:3c:37:13:d8:50: 6c:85:bc:b4:77:4b:58:07:f8:f5:95:c5:d8:24:5f: 07:48:92:58:8e:39:43:f3:33:ac:95:58:5a:c0:5d: f5:a3:a5:2a:3a:ab:cd:c4:2f:24:89:49:e7:d3:27: 3f:6f:b3:f0:87:eb:7a:b2:10:2e:0f:53:4c:f1:17: 9a:57:fa:25:36:ea:74:84:ba:3d:44:b6:d2:5a:cb: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:67:1E:B6:AF:E4:F1:0B:F8:4A:09:57:50:0C:AA:22:53:0F:48:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:89:1b:aa:7f:fe:9e:4d:77:60:9c:6b:4e:be:e9:07:79:d4: 1f:5a:46:41:59:fb:8f:90:b3:3c:59:4d:b7:7c:ac:38:9f:f1: 14:ad:66:c9:da:31:b9:a7:c4:3f:e8:b2:c4:6a:78:d7:b7:b6: 42:df:01:76:63:04:98:27:d1:18:e7:86:e5:be:b8:ba:8d:c7: 7f:e3:b8:bf:81:79:41:08:ed:7b:2f:51:dc:79:08:5d:1c:16: f6:1f:fe:f8:56:34:8e:8d:80:de:ea:57:43:e3:67:c5:67:f5: f3:e9:6b:e8:87:14:16:0b:fd:5d:ce:6e:47:9b:fb:60:ad:97: 47:61:cc:ff:26:d4:db:6e:35:9b:6c:f2:da:f4:bc:d9:54:ab: 42:de:26:14:cd:60:c9:86:06:5a:31:a5:4b:31:53:af:18:7b: 92:9b:e7:30:65:10:88:c5:fc:4c:2d:8b:5e:34:12:05:9f:8e: 66:ed:0f:83:d8:18:01:a4:da:69:aa:a2:90:62:24:d0:1d:0b: 4f:9b:6b:bc:a4:9c:02:5f:3e:a6:d6:b6:70:f0:28:35:fe:00: 67:3a:be:cf:38:e1:1d:e5:fd:91:6f:d1:02:98:43:b7:8d:21: 00:3c:31:1a:36:90:66:94:12:41:f4:d0:a6:cb:14:97:b1:3d: 93:66:45:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnwjZfw2D87GjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NzQ4NzNkZDYtNmM5OS00MWUwLTgyOWQtMDc1NDUyNjc0N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsWM8ALP3+Twr5YNjnqSKra/UbPUCNcI+9CJ MGVC4kcDMuo9cnH85CJ3DXZe7BtjzZv1hdodFp3iJi1CTqCNYORxVKKO/Mt2xEog sB0vPcykY6BmOHkeZf1CKElD9rpSnK2wMN1jun2QI6puDIau5NGxqcA4ncHAEi1+ jpfbM6mBygf61sJH49rl2ntihN1vV39vcVfzIVZ9P39YN/Ts/uOQDx9QiESEXuBv rhLIPDcT2FBshby0d0tYB/j1lcXYJF8HSJJYjjlD8zOslVhawF31o6UqOqvNxC8k iUnn0yc/b7Pwh+t6shAuD1NM8ReaV/olNup0hLo9RLbSWssEhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlnHrav5PEL+EoJV1AMqiJTD0gIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMTI5ZWU1MmItNjA5ZC0z NmQ5LWE1YWMtMTEwOGUwYjBkMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSJG6p//p5Nd2Cca06+6Qd51B9aRkFZ+4+QszxZTbd8rDif8RStZsna MbmnxD/ossRqeNe3tkLfAXZjBJgn0RjnhuW+uLqNx3/juL+BeUEI7XsvUdx5CF0c FvYf/vhWNI6NgN7qV0PjZ8Vn9fPpa+iHFBYL/V3Obkeb+2Ctl0dhzP8m1NtuNZts 8tr0vNlUq0LeJhTNYMmGBloxpUsxU68Ye5Kb5zBlEIjF/Ewti140EgWfjmbtD4PY GAGk2mmqopBiJNAdC0+ba7yknAJfPqbWtnDwKDX+AGc6vs844R3l/ZFv0QKYQ7eN IQA8MRo2kGaUEkH00KbLFJexPZNmRbg= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:29 2025 by rpki-client