$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa File: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (raw, json) Hash identifier: qNdXVujv0QmHH+HeHWwI7wU1l9QUEe5D13GfIYM3FEA= Subject key identifier: 56:A0:3F:4F:F1:B0:52:6F:C6:00:E6:72:E0:0C:1E:61:78:2E:51:9C Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F43285848C150D52B81E011D2D1085290 Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 31829 IP address blocks: 199.127.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d5:2b:81:e0:11:d2:d1:08:52:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=6efef4fb-87f3-464f-9db9-ee5eacd86759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:e0:c1:3e:92:18:43:7b:37:17:32:f8:b0: 3c:a2:f6:60:f3:35:55:1a:92:39:e9:31:f4:35:f8: 15:e9:53:d5:c8:ed:1e:52:9c:93:a6:27:93:66:52: 0e:e1:28:d0:9b:55:cc:77:ab:a6:8d:c4:1b:75:8f: 23:48:9b:f3:d2:cb:cc:f2:00:99:8e:02:2d:af:57: 45:ca:af:21:f6:19:c8:0d:25:b2:2d:c4:d7:5f:ff: 23:ee:64:a1:b8:c7:cc:5f:2d:f4:db:98:fc:16:8d: 7f:6d:c3:fb:83:53:0b:73:33:ff:af:ab:dc:80:62: 03:ed:09:ad:56:02:67:f5:05:83:9a:37:0d:5d:53: c3:80:10:ee:32:79:33:4b:f4:57:1c:44:f8:d3:46: 82:29:24:c3:2a:02:fb:9f:03:19:2b:72:5c:cd:68: c6:0b:b8:0b:7c:2c:43:bf:d0:39:44:aa:4b:73:8c: e5:e7:38:be:6a:9b:c2:bd:b3:26:29:f0:fa:2e:59: 45:0c:49:2b:1e:da:66:6a:7b:61:2c:61:ac:19:3b: 11:f0:23:fe:85:a4:87:47:2b:87:52:c7:bd:87:6e: 98:da:7d:6b:9a:22:58:fc:79:9a:47:f6:b9:98:2c: de:ed:43:37:31:d1:97:be:37:ec:de:fe:13:6e:93: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A0:3F:4F:F1:B0:52:6F:C6:00:E6:72:E0:0C:1E:61:78:2E:51:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a2:7e:c6:e8:f6:3d:4e:8d:4b:28:fc:6d:5b:5f:1f:98:41: 64:5e:03:7b:a5:4c:95:15:1e:03:92:4d:93:01:67:24:e7:cf: 1f:65:b0:8e:a4:e5:b8:56:bf:07:bb:0a:0e:c3:7b:4f:02:da: 8f:d8:62:ee:a9:25:55:af:1d:a7:f6:07:76:44:0b:86:89:3f: 12:36:86:ed:a2:b7:72:fd:33:4e:97:2f:17:5e:1f:b3:7e:89: cb:80:b9:75:e5:f4:a2:c1:db:ea:76:52:1f:21:e1:bd:9f:e7: dc:68:34:03:58:12:30:ed:23:b0:47:76:40:91:1e:b7:20:40: 38:d9:d0:83:f4:4e:01:4e:91:79:cb:67:ad:11:12:ad:37:55: 27:5c:6f:50:73:02:c5:a9:70:24:7f:63:22:b5:55:8e:ad:89: e4:f6:20:33:b1:d0:38:23:29:51:72:31:44:f3:a6:80:a1:46: 44:bf:72:42:33:55:79:85:5b:d2:bb:28:60:c8:9c:89:83:9b: de:15:ed:72:94:89:9a:4e:ca:36:57:d9:40:6d:6e:d1:0b:7b: 35:53:68:d9:d3:27:26:dd:ed:78:55:93:52:8e:18:a8:45:71: bb:d4:e1:20:36:16:8c:92:26:c0:93:24:6a:89:3d:5f:1d:08: db:8a:73:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNUrgeAR0tEIUpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NmVmZWY0ZmItODdmMy00NjRmLTlkYjktZWU1ZWFjZDg2NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmLgwT6SGEN7Nxcy+LA8ovZg8zVVGpI56TH0 NfgV6VPVyO0eUpyTpieTZlIO4SjQm1XMd6umjcQbdY8jSJvz0svM8gCZjgItr1dF yq8h9hnIDSWyLcTXX/8j7mShuMfMXy3025j8Fo1/bcP7g1MLczP/r6vcgGID7Qmt VgJn9QWDmjcNXVPDgBDuMnkzS/RXHET400aCKSTDKgL7nwMZK3JczWjGC7gLfCxD v9A5RKpLc4zl5zi+apvCvbMmKfD6LllFDEkrHtpmanthLGGsGTsR8CP+haSHRyuH Use9h26Y2n1rmiJY/HmaR/a5mCze7UM3MdGXvjfs3v4TbpMLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFagP0/xsFJvxgDmcuAMHmF4LlGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvYWI3ZTMyZDctNTFkOS0z MDQ1LTkyZDctZTc0NmJmNmJmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqifsbo9j1OjUso/G1bXx+YQWReA3ulTJUVHgOSTZMBZyTnzx9lsI6k 5bhWvwe7Cg7De08C2o/YYu6pJVWvHaf2B3ZEC4aJPxI2hu2it3L9M06XLxdeH7N+ icuAuXXl9KLB2+p2Uh8h4b2f59xoNANYEjDtI7BHdkCRHrcgQDjZ0IP0TgFOkXnL Z60REq03VSdcb1BzAsWpcCR/YyK1VY6tieT2IDOx0DgjKVFyMUTzpoChRkS/ckIz VXmFW9K7KGDInImDm94V7XKUiZpOyjZX2UBtbtELezVTaNnTJybd7XhVk1KOGKhF cbvU4SA2FoySJsCTJGqJPV8dCNuKc8s= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:59 2025 by rpki-client