$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: 9IxZttafxHBTwk1bXivDhspr3kLcbTlGavVHbH0xFDk= Subject key identifier: 45:A7:10:2E:F8:68:C8:65:3A:5D:0F:6F:71:BA:70:58:27:A6:2F:60 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F432858490881723702EEF3BD350ED480 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:72:37:02:ee:f3:bd:35:0e:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=d76ee901-a19b-4e35-b475-56ed3439e7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:6e:ea:4a:f5:fe:0c:a3:23:84:39:46:f7: 75:d5:91:09:f1:a1:86:71:5f:03:15:27:d1:0b:3f: 11:1e:1e:b3:62:2e:1c:c9:83:6f:7d:3c:2a:50:a0: bf:8a:4c:f8:e8:08:33:70:ab:12:36:9b:73:3b:61: 6c:b7:4f:f6:af:1f:8d:44:32:2a:f9:91:5c:bf:8a: 30:75:d5:5f:51:3a:09:8c:f7:9e:b8:f7:36:e2:78: 0d:c6:06:84:a9:35:3f:67:58:12:f1:2f:17:54:dc: 67:7a:e8:79:32:f9:e1:61:f2:b1:32:7a:8b:b8:ea: 49:d3:d8:da:45:f4:1b:a6:83:49:e9:dc:f0:ed:8b: 7d:16:61:49:7e:5b:a6:0a:f5:59:24:b8:b3:26:46: e1:36:ac:9c:35:cc:2e:55:f8:d2:44:ff:41:30:3a: 76:4b:41:cb:ef:2a:b6:44:bb:04:0c:55:76:d1:cc: 9b:0d:43:13:bb:ae:50:d2:0e:94:dc:a4:0f:75:ae: 86:44:41:54:93:50:97:70:9b:ff:14:14:e9:15:b7: 1c:c8:21:0e:6f:68:e9:db:e9:8f:0c:0b:ad:32:52: 9a:0e:0f:8c:56:51:50:46:e8:4e:07:9b:39:72:9b: ea:28:8d:ef:e9:55:aa:b1:b8:69:06:56:8b:f6:27: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A7:10:2E:F8:68:C8:65:3A:5D:0F:6F:71:BA:70:58:27:A6:2F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b2:c2:1d:72:99:b8:d5:79:10:35:e9:b8:01:4b:14:78:c9: 43:6f:52:37:38:f1:5b:ff:37:5f:55:42:57:0d:21:df:48:0c: a8:d3:a7:48:57:ed:97:05:de:c0:2d:e6:13:c2:1d:f2:72:bb: a4:e6:16:44:3f:4a:a7:f1:09:47:38:92:fd:4a:2f:36:58:32: ec:e7:f3:91:cc:06:c4:44:8c:f4:b7:8c:fa:b7:dd:1c:5d:91: 5d:35:76:0f:6a:5d:44:58:87:57:bb:70:dd:1d:b6:2c:69:52: 11:ae:99:ca:80:ff:0e:b3:4d:8a:45:53:a7:91:14:f6:31:7a: f8:e6:f1:fd:7e:6e:17:a7:de:21:74:0f:1a:34:31:65:2c:e9: 8b:ec:12:d9:df:9a:c5:55:d5:18:d5:0c:96:1c:34:a0:19:5c: 86:61:ad:50:0a:d3:42:49:11:9d:fd:fc:04:b0:85:01:d7:e5: 75:67:66:94:27:c5:e0:41:08:77:00:ae:74:23:35:2c:d0:bc: 0a:2a:4d:4e:7c:03:6b:c7:27:4d:56:27:d9:35:c0:a9:8f:dc: 96:fc:21:2a:52:d0:22:06:a0:9e:8c:28:6f:3d:9c:01:2d:6d: 4e:82:9d:d7:c2:d6:14:6e:52:83:26:70:d5:3f:5d:8b:b2:55: 4c:b1:17:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXI3Au7zvTUO1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDc2ZWU5MDEtYTE5Yi00ZTM1LWI0NzUtNTZlZDM0MzllN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqZu6kr1/gyjI4Q5Rvd11ZEJ8aGGcV8DFSfR Cz8RHh6zYi4cyYNvfTwqUKC/ikz46AgzcKsSNptzO2Fst0/2rx+NRDIq+ZFcv4ow ddVfUToJjPeeuPc24ngNxgaEqTU/Z1gS8S8XVNxneuh5MvnhYfKxMnqLuOpJ09ja RfQbpoNJ6dzw7Yt9FmFJflumCvVZJLizJkbhNqycNcwuVfjSRP9BMDp2S0HL7yq2 RLsEDFV20cybDUMTu65Q0g6U3KQPda6GREFUk1CXcJv/FBTpFbccyCEOb2jp2+mP DAutMlKaDg+MVlFQRuhOB5s5cpvqKI3v6VWqsbhpBlaL9ifj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWnEC74aMhlOl0Pb3G6cFgnpi9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2ywh1ymbjVeRA16bgBSxR4yUNvUjc48Vv/N19VQlcNId9IDKjTp0hX 7ZcF3sAt5hPCHfJyu6TmFkQ/SqfxCUc4kv1KLzZYMuzn85HMBsREjPS3jPq33Rxd kV01dg9qXURYh1e7cN0dtixpUhGumcqA/w6zTYpFU6eRFPYxevjm8f1+bhen3iF0 Dxo0MWUs6YvsEtnfmsVV1RjVDJYcNKAZXIZhrVAK00JJEZ39/ASwhQHX5XVnZpQn xeBBCHcArnQjNSzQvAoqTU58A2vHJ01WJ9k1wKmP3Jb8ISpS0CIGoJ6MKG89nAEt bU6CndfC1hRuUoMmcNU/XYuyVUyxFwk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:47:07 2025 by rpki-client