$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bc14be0-ddaa-3435-b468-d91885b3ada4.roa File: 1bc14be0-ddaa-3435-b468-d91885b3ada4.roa (raw, json) Hash identifier: CBleQoKkBPZLWSxGz3sjahfDGahfcc2ySb4qc+1vc4k= Subject key identifier: C8:AA:71:A6:8B:91:03:4C:DA:83:56:02:4F:2A:73:04:ED:25:2E:99 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1B3420D28EEB5ED001D00 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bc14be0-ddaa-3435-b468-d91885b3ada4.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 10796 IP address blocks: 72.128.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:b3:42:0d:28:ee:b5:ed:00:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=9da54ad9-4957-4b99-abac-c852c6b427a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:f1:24:0b:bf:95:4a:c3:cb:60:f4:ae:f2: 71:48:5b:25:38:6b:a6:c6:aa:fb:3e:93:c3:aa:2c: c5:8d:c6:26:f7:31:3d:01:34:bb:5e:8e:ce:a1:98: 8a:2d:74:98:76:89:18:6b:61:79:21:6e:f7:40:48: a7:8f:bb:f2:c3:5f:48:e9:f7:24:40:bf:f8:ed:5b: 24:07:ef:03:0f:df:37:0a:c4:68:cd:6b:61:39:46: 18:39:b1:a3:5f:0b:61:c5:48:b8:8a:44:00:c0:0c: a8:82:f9:19:c8:83:2a:5f:94:12:48:b7:8f:45:9b: e5:a3:c0:8c:0d:e7:2e:3f:de:f3:85:b5:e2:e5:91: 1b:27:56:99:b8:1b:7d:44:c0:53:8e:ab:19:3b:c6: b5:e0:9b:e4:aa:35:5f:51:7c:be:ab:ca:ff:e0:bf: 57:e4:ab:ff:0a:ef:96:d4:d4:36:58:e6:08:73:eb: 70:ac:d8:bc:f2:d0:12:ee:ca:9e:7a:ae:ac:4d:7e: cc:35:79:43:8e:ad:df:90:73:7d:cd:60:e2:e8:0d: f3:54:c0:d8:7d:29:96:e9:8c:11:ee:f8:82:d0:4a: ba:9f:83:96:7c:75:3f:e8:57:5a:7c:27:ea:fa:b5: 3e:00:47:ae:9c:d6:ce:d6:8b:26:1d:c4:d0:1d:f3: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:71:A6:8B:91:03:4C:DA:83:56:02:4F:2A:73:04:ED:25:2E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bc14be0-ddaa-3435-b468-d91885b3ada4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 72.128.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8d:92:2a:7a:bc:d8:93:1c:77:a6:2b:36:20:25:5e:d3:9c: 2a:77:ef:92:fc:4e:0e:2f:67:ca:6d:10:7d:9f:d5:19:99:81: 2d:7d:42:d3:e8:a7:29:23:8d:a6:5d:23:e2:0d:03:6b:04:af: 6f:1d:dc:06:51:b5:65:a2:06:4a:78:cf:8c:5f:77:eb:fc:52: 62:f2:5e:a5:36:7e:f3:3a:bf:9b:79:84:10:22:a1:d9:1a:68: ba:a9:b3:a3:75:11:a9:74:71:3a:1d:0c:1b:b8:d1:34:7a:fa: af:6c:4c:74:00:82:a9:51:e4:04:1e:68:e2:e3:2b:00:6d:71: b3:a3:28:f8:b0:06:fb:64:92:0d:d3:0b:f6:20:85:96:4c:a8: 3a:74:14:66:0b:8b:96:20:9d:af:6a:3e:f7:34:01:3d:96:7d: a0:4c:b5:66:14:c0:3b:1f:16:37:ad:a9:23:d8:df:75:aa:74: 17:9c:40:bc:9d:31:9b:16:e5:cf:7c:c9:41:dd:b1:38:40:fa: e1:5e:ad:58:4c:65:5f:8c:92:15:f1:5c:94:00:58:fc:8a:9e: 66:01:8a:99:6a:e0:ff:43:19:32:93:8c:b9:9f:ed:0f:2f:db: 8d:7c:21:75:f4:d3:44:8e:15:85:e6:36:fa:0f:02:b1:88:da: fc:9d:be:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0bNCDSjute0AHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OWRhNTRhZDktNDk1Ny00Yjk5LWFiYWMtYzg1MmM2YjQyN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljjxJAu/lUrDy2D0rvJxSFslOGumxqr7PpPD qizFjcYm9zE9ATS7Xo7OoZiKLXSYdokYa2F5IW73QEinj7vyw19I6fckQL/47Vsk B+8DD983CsRozWthOUYYObGjXwthxUi4ikQAwAyogvkZyIMqX5QSSLePRZvlo8CM DecuP97zhbXi5ZEbJ1aZuBt9RMBTjqsZO8a14JvkqjVfUXy+q8r/4L9X5Kv/Cu+W 1NQ2WOYIc+twrNi88tAS7sqeeq6sTX7MNXlDjq3fkHN9zWDi6A3zVMDYfSmW6YwR 7viC0Eq6n4OWfHU/6FdafCfq+rU+AEeunNbO1osmHcTQHfNWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiqcaaLkQNM2oNWAk8qcwTtJS6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMWJjMTRiZTAtZGRhYS0z NDM1LWI0NjgtZDkxODg1YjNhZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSIDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+Nkip6vNiTHHemKzYgJV7TnCp375L8Tg4vZ8ptEH2f1RmZgS19QtPo pykjjaZdI+INA2sEr28d3AZRtWWiBkp4z4xfd+v8UmLyXqU2fvM6v5t5hBAiodka aLqps6N1Eal0cTodDBu40TR6+q9sTHQAgqlR5AQeaOLjKwBtcbOjKPiwBvtkkg3T C/YghZZMqDp0FGYLi5Ygna9qPvc0AT2WfaBMtWYUwDsfFjetqSPY33WqdBecQLyd MZsW5c98yUHdsThA+uFerVhMZV+MkhXxXJQAWPyKnmYBiplq4P9DGTKTjLmf7Q8v 2418IXX000SOFYXmNvoPArGI2vydvm0= -----END CERTIFICATE-----Generated at Sun Apr 6 12:16:42 2025 by rpki-client