$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa File: 4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa (raw, json) Hash identifier: hjfzwCxiVgf6j18QrDudK+c8qaK7+wkQc2OwgopOCg8= Subject key identifier: 5F:15:20:E0:F8:2F:14:F0:6C:57:5D:94:6F:97:56:97:56:0B:5A:19 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F432858498A026E7BF86FA04F671E3E00 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa Signing time: Tue 15 Apr 2025 23:20:17 +0000 ROA not before: Tue 15 Apr 2025 23:20:17 +0000 ROA not after: Mon 14 Jul 2025 23:20:17 +0000 asID: 54393 IP address blocks: 129.19.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:02:6e:7b:f8:6f:a0:4f:67:1e:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Apr 15 23:20:17 2025 GMT Not After : Jul 14 23:20:17 2025 GMT Subject: CN=231963c6-cc04-4314-a4af-8294e983dd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:6e:16:30:c9:42:09:32:69:9f:1d:67:44: a8:16:bd:e5:7c:fd:28:a4:f5:bd:5d:49:12:50:4a: 9c:c7:6e:f8:a5:16:67:b2:09:58:57:4b:83:3c:6a: 7c:00:27:17:f1:61:8c:e5:fa:d0:e8:5e:f6:a6:d7: 9b:e0:26:df:8f:f3:e1:1c:6b:57:49:77:20:5b:2d: 5a:b5:47:05:ee:7c:b8:6e:98:be:94:b6:70:57:d1: 61:d7:4f:3a:4e:5e:cc:06:e8:77:06:16:33:c5:4a: 30:fb:5c:29:d1:4d:f0:f6:60:ea:6c:9c:e6:ad:df: 27:0e:d4:fb:5f:fc:b3:4f:59:c3:4d:f2:f9:8d:33: 3b:b1:5e:4c:ae:bd:f4:16:fe:c6:90:4a:db:5b:ac: fa:52:e6:6d:9e:6b:f3:bd:4a:7e:fe:68:e2:2a:7a: 34:4f:86:c2:bb:14:17:da:b8:84:fb:7d:72:33:5d: e0:3c:a0:96:d4:1f:49:1a:d0:5b:fd:a0:96:94:d8: 87:66:a4:07:d4:b2:70:e6:90:16:a1:c1:6f:7d:26: 22:d4:a5:5d:8c:bd:ac:a9:3d:49:e8:65:61:48:1a: 02:a2:66:7e:3f:e4:6f:0a:fd:e4:de:93:a3:6e:85: 73:53:d7:48:75:bc:7e:09:5a:a8:0d:9e:fe:27:fc: ab:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:20:E0:F8:2F:14:F0:6C:57:5D:94:6F:97:56:97:56:0B:5A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a7:a7:76:df:80:ba:2a:ef:34:ab:c5:d5:7e:67:26:4b:f7: 79:99:db:e0:8b:c0:ef:4a:aa:0d:71:c2:38:25:66:f2:d8:8b: 06:92:06:ab:ce:1a:4f:06:72:77:a3:eb:7c:a9:45:94:60:39: 73:08:19:af:b4:5a:ca:e3:5c:13:81:38:be:f1:d8:e8:c1:35: 7f:70:34:20:41:ab:70:d9:be:51:dc:b8:71:b6:b8:8b:ec:8f: ad:a9:6c:d0:ad:ef:89:d8:0d:a5:47:ae:5b:5d:dc:ce:1e:38: 7c:4f:4e:ed:d8:db:14:72:a1:c1:75:41:7a:39:9c:37:92:99: d9:7f:3c:3f:d1:fe:2a:ba:b5:cd:b5:65:1d:43:67:f5:bb:05: c5:ba:a6:97:ee:af:1a:27:91:33:57:7c:86:42:c8:7d:17:7c: 89:e2:b3:b1:22:7e:f5:c0:5a:7a:b0:8f:2e:ff:5c:b5:ad:39: ef:64:d6:b9:d7:2d:63:35:ff:e8:90:74:69:cd:54:1b:c1:35: 59:b9:51:e7:9c:66:f9:1d:52:34:4e:8c:7a:23:af:92:59:0a: 6e:3a:fe:6d:4c:e0:17:d8:4f:b3:48:14:79:71:97:d8:d8:a1: 5b:ef:4c:74:92:01:e3:4b:04:b3:34:5d:e0:f1:67:8a:9e:92: 14:6d:3c:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKAm57+G+gT2cePgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MDQxNTIzMjAxN1oXDTI1MDcxNDIzMjAxN1owLzEtMCsGA1UEAxMk MjMxOTYzYzYtY2MwNC00MzE0LWE0YWYtODI5NGU5ODNkZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXZuFjDJQgkyaZ8dZ0SoFr3lfP0opPW9XUkS UEqcx274pRZnsglYV0uDPGp8ACcX8WGM5frQ6F72pteb4Cbfj/PhHGtXSXcgWy1a tUcF7ny4bpi+lLZwV9Fh1086Tl7MBuh3BhYzxUow+1wp0U3w9mDqbJzmrd8nDtT7 X/yzT1nDTfL5jTM7sV5Mrr30Fv7GkErbW6z6UuZtnmvzvUp+/mjiKno0T4bCuxQX 2riE+31yM13gPKCW1B9JGtBb/aCWlNiHZqQH1LJw5pAWocFvfSYi1KVdjL2sqT1J 6GVhSBoComZ+P+RvCv3k3pOjboVzU9dIdbx+CVqoDZ7+J/yrOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8VIOD4LxTwbFddlG+XVpdWC1oZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNGM3ZjQ5ZjUtNGY0MC0z MWI4LTk4ODEtYzgyZGE4YmVjNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgROAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqnp3bfgLoq7zSrxdV+ZyZL93mZ2+CLwO9Kqg1xwjglZvLYiwaSBqvO Gk8Gcnej63ypRZRgOXMIGa+0WsrjXBOBOL7x2OjBNX9wNCBBq3DZvlHcuHG2uIvs j62pbNCt74nYDaVHrltd3M4eOHxPTu3Y2xRyocF1QXo5nDeSmdl/PD/R/iq6tc21 ZR1DZ/W7BcW6ppfurxonkTNXfIZCyH0XfInis7EifvXAWnqwjy7/XLWtOe9k1rnX LWM1/+iQdGnNVBvBNVm5UeecZvkdUjROjHojr5JZCm46/m1M4BfYT7NIFHlxl9jY oVvvTHSSAeNLBLM0XeDxZ4qekhRtPKo= -----END CERTIFICATE-----Generated at Sun Apr 20 17:32:06 2025 by rpki-client