$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa File: 100036a5-3ecc-3953-ad52-6114836271e0.roa (raw, json) Hash identifier: Mo8F+7ql25Pcn+N11u9bxh0JrmTAyeCT4d8Joflq8KE= Subject key identifier: D4:FA:8F:91:DE:70:32:10:78:F6:39:03:86:FB:73:2A:4E:12:CF:D2 Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F43285848A830A3F86FC928D0B7E49300 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 15046 IP address blocks: 128.230.152.0/24 maxlen: 24 128.230.157.128/25 maxlen: 25 128.230.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a3:f8:6f:c9:28:d0:b7:e4:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=e55e72f1-5129-4773-8451-5a191b99386e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bf:7e:09:bd:32:8e:02:14:a1:ff:ac:b8:ca: 21:c9:a7:3f:4d:58:fc:cd:87:13:1a:d8:32:0a:83: fb:eb:ef:2e:10:f7:12:df:92:64:2e:82:c2:19:3a: f5:7b:f6:bf:90:a2:1d:d3:65:8c:10:b0:6a:88:3e: 24:ec:18:cf:d3:c9:a1:94:7f:26:57:ac:d5:8c:0e: 31:a8:14:0e:1e:b2:61:41:94:dd:99:27:b3:7d:49: 00:c7:0e:25:f0:0f:d3:9f:b1:f9:08:74:84:5b:b8: 83:58:01:95:d9:32:90:07:44:89:18:9b:11:78:02: 38:16:85:b5:a7:5c:8d:11:79:c5:cd:6a:c8:54:be: 1a:b2:6a:40:d8:67:d2:0a:f0:95:0f:f4:e8:b0:0a: 80:e9:79:16:44:d7:84:ae:6c:b2:03:00:a7:6a:3b: eb:b6:76:06:c9:79:4e:e5:ad:35:5e:f2:1a:a4:40: ab:16:b9:a9:b0:2d:d5:5b:64:4f:48:9f:95:b3:3b: fa:a8:94:2a:96:d3:e8:c6:18:a5:33:ec:b2:e2:13: 6b:9d:bb:b6:e0:d7:47:64:8b:09:a0:a1:6c:ad:db: e4:f1:c2:a5:e3:35:a9:39:e8:12:b8:6e:08:07:0e: 76:f5:65:4c:37:f4:2a:58:5f:00:70:8c:7d:65:b3: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FA:8F:91:DE:70:32:10:78:F6:39:03:86:FB:73:2A:4E:12:CF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: 128.230.152.0/24 128.230.157.128/25 128.230.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5b:11:dc:7e:b2:5a:06:94:04:8c:ea:e9:62:6b:4a:f6:f3: f3:30:c0:53:1f:72:15:17:d7:e3:01:08:7d:de:47:00:ee:e8: 63:ee:6b:a5:87:82:be:f3:d9:98:c4:14:ca:6d:94:7a:5a:f3: 16:4b:b2:a4:2e:f2:3e:07:0c:76:ee:eb:6f:68:68:a5:6c:29: 47:49:c7:59:b8:be:06:3a:06:d4:94:8f:30:05:be:a5:97:89: 4d:0a:b1:e9:5e:81:e1:97:0b:f9:3e:2a:b0:be:a4:bb:c1:dc: cc:7b:89:4f:1b:2e:9f:7a:e7:76:a4:72:5a:24:3a:ee:35:df: 4e:64:e4:ba:a9:fb:90:a0:e5:0a:13:b8:d0:5b:17:68:44:c4: b3:6f:bc:f6:2e:8c:a3:a4:fb:ac:a2:d6:1f:6f:76:0b:35:57: 11:fa:14:ce:40:e1:69:15:d6:05:cf:3b:93:2c:38:5f:03:0c: f0:ea:d0:6f:4d:19:1a:58:12:65:d2:7a:92:4c:ca:59:ba:ea: 35:49:21:59:ae:de:7e:30:ee:7e:56:13:09:13:d0:9d:0e:d2: 6d:24:03:01:da:29:7d:38:1d:fa:6f:21:ad:2a:24:82:9a:d3: cd:86:7e:17:62:ac:b4:f6:a4:0a:28:4e:02:57:3c:c3:0f:bf: 50:41:73:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEioMKP4b8ko0LfkkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTU1ZTcyZjEtNTEyOS00NzczLTg0NTEtNWExOTFiOTkzODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL9+Cb0yjgIUof+suMohyac/TVj8zYcTGtgy CoP76+8uEPcS35JkLoLCGTr1e/a/kKId02WMELBqiD4k7BjP08mhlH8mV6zVjA4x qBQOHrJhQZTdmSezfUkAxw4l8A/Tn7H5CHSEW7iDWAGV2TKQB0SJGJsReAI4FoW1 p1yNEXnFzWrIVL4asmpA2GfSCvCVD/TosAqA6XkWRNeErmyyAwCnajvrtnYGyXlO 5a01XvIapECrFrmpsC3VW2RPSJ+Vszv6qJQqltPoxhilM+yy4hNrnbu24NdHZIsJ oKFsrdvk8cKl4zWpOegSuG4IBw529WVMN/QqWF8AcIx9ZbNWuwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNT6j5HecDIQePY5A4b7cypOEs/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMTAwMDM2YTUtM2VjYy0z OTUzLWFkNTItNjExNDgzNjI3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQAgOaYAwUH gOadgAMEAIDmvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRWxHcfrJaBpQEjOrpYmtK9vPzMMBTH3IVF9fj AQh93kcA7uhj7mulh4K+89mYxBTKbZR6WvMWS7KkLvI+Bwx27utvaGilbClHScdZ uL4GOgbUlI8wBb6ll4lNCrHpXoHhlwv5PiqwvqS7wdzMe4lPGy6feud2pHJaJDru Nd9OZOS6qfuQoOUKE7jQWxdoRMSzb7z2LoyjpPusotYfb3YLNVcR+hTOQOFpFdYF zzuTLDhfAwzw6tBvTRkaWBJl0nqSTMpZuuo1SSFZrt5+MO5+VhMJE9CdDtJtJAMB 2il9OB36byGtKiSCmtPNhn4XYqy09qQKKE4CVzzDD79QQXMA -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:50 2025 by rpki-client