$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa File: 542301b0-83c1-3997-b59d-aab70751e89e.roa (raw, json) Hash identifier: ZkAxEbTc1PlOe4RFufqtHNaCsZgj2W9RY9CHLSL+vfA= Subject key identifier: 54:E4:D1:8C:AA:80:53:F6:E6:D4:34:D8:B9:AA:B8:D5:50:D5:89:B9 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285848CB16541C99C91E08BF8E0B40 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 55293 IP address blocks: 128.201.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:54:1c:99:c9:1e:08:bf:8e:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=f67e6413-f9f9-4c5e-a0a2-56f941245bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:41:31:29:ce:ab:a1:e1:86:e9:7a:b0:4a: 47:2b:a7:b0:ed:09:31:03:b6:6c:8b:3b:3d:17:47: fb:0f:14:74:28:5a:4d:05:7e:5d:b4:33:ec:47:ba: a1:0d:81:24:00:ea:02:a8:87:35:78:f2:c0:fd:8e: 78:c3:d1:2d:10:d0:1a:de:e4:54:62:2a:05:1b:eb: 50:54:6e:db:5d:49:38:cc:bb:fd:81:58:46:84:08: 67:86:b1:72:1b:25:a5:e5:94:24:00:a4:fd:42:09: eb:8b:b4:97:28:53:11:c6:88:d6:ce:db:94:d6:02: fb:2c:77:ad:73:bc:f3:b6:56:07:f3:b3:9d:b7:9d: 27:67:be:84:5b:39:5b:74:95:98:0e:76:f8:b7:68: 89:23:c4:37:be:86:73:be:9c:54:9f:d7:2a:47:b7: db:99:9d:63:e5:53:87:5d:13:db:c2:29:a8:ce:ad: 70:09:a2:c1:68:a0:b3:74:16:56:63:8b:4f:2f:4e: ce:c5:22:25:c1:97:f4:47:f6:29:db:78:2a:26:73: 42:81:97:8b:01:42:36:0c:03:67:29:80:60:13:d0: 2a:04:33:1f:3c:a8:59:83:64:fa:47:44:73:d0:52: ed:17:ee:84:1a:ea:d8:da:f2:0a:f8:dc:fc:fa:f2: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:D1:8C:AA:80:53:F6:E6:D4:34:D8:B9:AA:B8:D5:50:D5:89:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 128.201.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:46:74:55:d2:f6:61:4e:79:49:44:0c:b1:b4:18:7b:df:5b: a5:07:f4:39:3c:71:77:61:3f:72:dc:9a:f8:14:a5:6f:23:0e: 5c:68:f9:a4:00:7e:c3:c5:c0:42:3b:24:c9:7e:ae:c3:0f:2d: fa:53:53:a9:2f:d0:48:af:b4:2e:c7:c0:67:0d:6c:80:16:d2: f3:c5:b7:2d:7a:f7:3b:40:4f:84:c0:5e:2f:9c:d8:87:0d:69: 51:33:c3:35:bb:c0:6d:fe:0f:bb:c5:b6:26:59:3f:59:b5:fc: 1a:82:dd:3f:d1:cc:a9:fb:7d:be:0d:fc:30:26:e7:e9:f6:78: fc:32:aa:78:f2:64:9a:05:2f:cf:06:89:b1:7b:0d:06:b7:ff: ae:9c:ad:b0:85:f4:f9:0c:4c:78:73:e3:3b:79:b1:0f:05:d3: dd:d8:8c:1d:95:99:32:fa:6b:38:df:76:8f:34:75:85:b5:ac: 3d:09:64:c0:b2:9f:9d:86:46:11:c6:35:75:77:d5:90:be:4a: e5:cd:73:eb:39:1e:c6:da:e8:11:1a:4d:75:75:97:a1:32:6d: 23:69:bd:57:a3:af:77:74:ae:8b:e9:68:86:a3:e0:6b:0e:d6: ec:99:c6:42:c7:16:99:d2:64:ff:6d:2a:54:a0:7c:e4:68:c0: 0b:65:21:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlQcmckeCL+OC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjY3ZTY0MTMtZjlmOS00YzVlLWEwYTItNTZmOTQxMjQ1YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYtBMSnOq6Hhhul6sEpHK6ew7QkxA7Zsizs9 F0f7DxR0KFpNBX5dtDPsR7qhDYEkAOoCqIc1ePLA/Y54w9EtENAa3uRUYioFG+tQ VG7bXUk4zLv9gVhGhAhnhrFyGyWl5ZQkAKT9Qgnri7SXKFMRxojWztuU1gL7LHet c7zztlYH87Odt50nZ76EWzlbdJWYDnb4t2iJI8Q3voZzvpxUn9cqR7fbmZ1j5VOH XRPbwimozq1wCaLBaKCzdBZWY4tPL07OxSIlwZf0R/Yp23gqJnNCgZeLAUI2DANn KYBgE9AqBDMfPKhZg2T6R0Rz0FLtF+6EGurY2vIK+Nz8+vKPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTk0YyqgFP25tQ02LmquNVQ1Ym5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTQyMzAxYjAtODNjMS0z OTk3LWI1OWQtYWFiNzA3NTFlODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgMkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdGdFXS9mFOeUlEDLG0GHvfW6UH9Dk8cXdhP3LcmvgUpW8jDlxo+aQA fsPFwEI7JMl+rsMPLfpTU6kv0EivtC7HwGcNbIAW0vPFty169ztAT4TAXi+c2IcN aVEzwzW7wG3+D7vFtiZZP1m1/BqC3T/RzKn7fb4N/DAm5+n2ePwyqnjyZJoFL88G ibF7DQa3/66crbCF9PkMTHhz4zt5sQ8F093YjB2VmTL6azjfdo80dYW1rD0JZMCy n52GRhHGNXV31ZC+SuXNc+s5Hsba6BEaTXV1l6EybSNpvVejr3d0rovpaIaj4GsO 1uyZxkLHFpnSZP9tKlSgfORowAtlIao= -----END CERTIFICATE-----Generated at Fri Apr 11 21:24:25 2025 by rpki-client