$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa File: a32b5942-107e-3e4d-88ed-01a410959f3e.roa (raw, json) Hash identifier: sJhhuw+tFKzqeHG5kqpCXqtbi5gWsTIFuyPpH9014sw= Subject key identifier: F8:0B:E8:8C:C6:1B:CC:10:2E:53:D3:C0:65:33:9B:D3:27:22:0D:D0 Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584902EC04D6BB94E157D2D38800 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 22697 IP address blocks: 128.116.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:04:d6:bb:94:e1:57:d2:d3:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=20513dfc-2653-4e93-bb9e-1e4cc12d3f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:bb:93:20:12:5c:ba:ad:ce:82:2d:52:c4: 08:a9:fc:c1:99:65:41:fc:38:ec:7e:4e:ce:cb:32: 0e:12:6f:ee:c4:b0:76:a1:30:ac:4e:19:69:fe:33: bc:15:9d:b3:c8:7b:ae:2e:cc:d6:c2:d7:18:4d:18: c4:79:76:84:e2:cf:ae:9d:11:27:28:64:84:55:97: 9b:bf:16:95:f9:7d:47:8e:bc:e7:b1:d4:16:94:b2: 3e:f9:72:9d:2a:8f:f7:7f:b2:84:13:f7:6f:70:26: 7a:44:fc:0c:45:fc:c8:3c:a3:86:f7:dc:c7:b2:58: bc:9a:72:c5:78:d2:b7:e9:33:fa:28:59:8c:8d:be: 2f:60:9a:58:f0:71:95:e8:1e:c7:11:9b:d0:83:8e: fe:69:8e:5c:5d:70:00:e4:e9:fd:9a:60:32:24:4b: 4c:41:1b:b6:6d:32:39:e7:03:b5:1a:40:02:5d:a5: 5f:9b:bc:94:73:6f:91:ce:c4:14:12:02:a0:d8:84: ff:7c:3c:1d:2b:5d:67:cf:87:e8:e9:15:83:5f:0e: 7c:40:ce:c3:4b:ae:3a:fd:c8:8e:d9:3d:44:0b:a5: 08:27:3c:c1:8d:20:cc:bf:19:e8:41:e5:61:77:b4: 5b:34:8a:b3:e7:42:e1:5b:eb:39:9c:24:73:dd:72: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:E8:8C:C6:1B:CC:10:2E:53:D3:C0:65:33:9B:D3:27:22:0D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 128.116.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3a:d4:3d:7c:7f:44:76:12:d9:03:f5:49:e9:5c:52:29:0e: b8:dc:7d:0a:a0:34:51:ed:5f:44:c9:0d:0f:ed:7b:29:40:1e: a7:58:09:35:21:84:71:3e:c5:e8:13:c3:6c:6e:ef:c5:ca:23: 92:80:ee:53:63:e1:f5:92:de:cf:b1:ba:61:f1:d5:18:3e:1f: 8e:67:89:f9:02:af:c4:8a:fb:54:a9:a6:b6:69:e2:d1:01:bf: 65:5f:1c:49:50:78:c1:47:18:7f:4e:78:1b:9d:0e:d6:ef:82: b1:55:82:73:1d:3a:2f:3d:9d:0b:45:dd:3a:bf:59:ad:24:63: e1:dc:1c:8d:bb:93:cc:39:78:1a:80:79:dc:04:62:ee:ea:55: 73:e0:41:90:66:db:e4:c3:78:10:0f:7f:c9:27:d5:57:4b:05: 3c:1d:48:7b:66:e8:be:c3:3d:1b:b0:2d:fd:0f:37:17:ec:c9: 2e:34:29:a8:69:8e:44:c0:d4:29:18:2a:42:3e:00:63:bd:92: 96:bb:56:32:65:37:1d:2e:e3:e8:ff:b0:2c:08:8f:98:86:d5: ce:b6:2f:34:bd:d7:a4:b8:0f:28:44:02:a6:fb:63:30:29:a3: c1:8f:75:5c:d3:54:97:7f:55:00:11:55:76:28:36:de:53:d8: 26:22:20:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7ATWu5ThV9LTiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MjA1MTNkZmMtMjY1My00ZTkzLWJiOWUtMWU0Y2MxMmQzZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4a7kyASXLqtzoItUsQIqfzBmWVB/Djsfk7O yzIOEm/uxLB2oTCsThlp/jO8FZ2zyHuuLszWwtcYTRjEeXaE4s+unREnKGSEVZeb vxaV+X1HjrznsdQWlLI++XKdKo/3f7KEE/dvcCZ6RPwMRfzIPKOG99zHsli8mnLF eNK36TP6KFmMjb4vYJpY8HGV6B7HEZvQg47+aY5cXXAA5On9mmAyJEtMQRu2bTI5 5wO1GkACXaVfm7yUc2+RzsQUEgKg2IT/fDwdK11nz4fo6RWDXw58QM7DS646/ciO 2T1EC6UIJzzBjSDMvxnoQeVhd7RbNIqz50LhW+s5nCRz3XLKZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgL6IzGG8wQLlPTwGUzm9MnIg3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvYTMyYjU5NDItMTA3ZS0z ZTRkLTg4ZWQtMDFhNDEwOTU5ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgHQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE861D18f0R2EtkD9UnpXFIpDrjcfQqgNFHtX0TJDQ/teylAHqdYCTUh hHE+xegTw2xu78XKI5KA7lNj4fWS3s+xumHx1Rg+H45nifkCr8SK+1SpprZp4tEB v2VfHElQeMFHGH9OeBudDtbvgrFVgnMdOi89nQtF3Tq/Wa0kY+HcHI27k8w5eBqA edwEYu7qVXPgQZBm2+TDeBAPf8kn1VdLBTwdSHtm6L7DPRuwLf0PNxfsyS40Kahp jkTA1CkYKkI+AGO9kpa7VjJlNx0u4+j/sCwIj5iG1c62LzS916S4DyhEAqb7YzAp o8GPdVzTVJd/VQARVXYoNt5T2CYiINM= -----END CERTIFICATE-----Generated at Sat Apr 12 15:07:13 2025 by rpki-client