$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa File: 11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa (raw, json) Hash identifier: xy8a4XPpOnNunsJacgE7SSN69nIan1bVA+izvFSS0wA= Subject key identifier: 84:67:1C:56:6F:7F:26:F9:7C:03:61:25:FC:A6:05:E5:44:31:E6:21 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64242705A4F0260E2F9540 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 174.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:24:27:05:a4:f0:26:0e:2f:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=2563e764-6f22-40f9-9ce7-b62e2f604a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:03:51:a4:23:15:82:71:a2:bf:24:1d:02: 86:ee:9c:20:e7:96:aa:f0:41:d5:78:7d:fa:33:37: 96:28:bf:1c:8c:f4:ba:eb:0b:53:1d:3c:54:bf:e4: d6:16:6e:ec:b6:3e:62:95:de:0c:c7:4b:19:e7:b3: 31:63:c1:c0:5b:20:dc:31:d9:77:6d:db:ba:7c:f8: 70:bc:c3:4b:a4:b9:64:eb:05:e2:00:3e:ad:58:c4: 47:d9:80:0d:8f:13:dd:0b:51:0a:b9:3d:3e:06:9d: 2e:c6:59:ba:df:10:d1:58:1a:57:d9:fa:09:af:cf: f0:a5:c6:13:16:5c:8f:ce:bc:46:f1:56:0d:48:76: 57:94:c5:74:0d:47:ae:eb:21:35:7c:b8:ad:3d:48: f6:29:cb:4f:b1:b0:41:53:01:a4:b1:44:8e:c6:b7: d7:7b:02:3f:f6:a3:46:52:66:fb:d4:6c:44:34:55: 51:90:e9:12:1d:be:e2:7d:65:25:12:75:df:0b:2c: 16:ca:9a:ac:d3:00:90:a9:00:68:77:da:13:88:b7: 8f:07:64:57:1c:7c:bd:70:8e:bf:ab:00:e5:b1:42: f0:92:82:1f:37:ba:5f:cb:c8:67:be:49:c4:56:f7: e6:f6:2f:69:57:6a:28:04:6e:06:48:38:43:53:71: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:1C:56:6F:7F:26:F9:7C:03:61:25:FC:A6:05:E5:44:31:E6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/11f24f9b-8bee-3b72-adf1-f7a6486b7777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 174.127.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4f:bb:f8:b8:72:20:aa:f6:6b:f2:60:d9:11:cc:a7:00:ce: b5:b5:3c:3e:07:a7:93:9b:01:62:bb:e0:51:bc:40:b4:0b:49: b6:dd:f2:b9:c0:59:22:f4:ca:dd:d7:63:b5:2d:da:de:53:c5: eb:3d:1d:a5:e6:41:98:e8:c5:7a:5b:d5:47:ae:3e:0a:fe:9b: 6b:b6:58:f2:19:fb:78:19:c7:70:04:26:73:42:13:8c:2e:0d: 9f:22:52:35:64:b4:88:79:36:ce:2f:3d:73:41:2b:4b:84:0b: 36:76:e9:f2:87:a5:5f:1f:d7:80:88:e3:03:f9:df:0d:68:e3: c4:d6:5e:e2:f1:7e:75:84:d4:65:8a:3e:0a:84:e5:b4:e6:68: 87:de:d1:09:08:de:1c:dc:40:e8:e1:17:02:4e:09:a7:19:14: 48:3d:8b:4f:6b:82:dd:db:86:b8:cb:52:15:ff:c6:72:93:90: 91:0f:f1:97:41:55:f2:d3:e2:38:c2:8f:09:14:73:6b:69:09: 81:e7:96:eb:b7:54:0b:60:6a:1e:02:38:46:c9:70:4c:e6:df: 28:92:ea:29:b6:c3:2b:b3:e5:a1:2a:3b:24:2b:6e:ff:b6:60: b4:2f:cf:c4:79:90:29:92:fa:d8:1f:5f:0f:8f:23:20:42:2b: 8c:6d:ff:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCQnBaTwJg4vlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MjU2M2U3NjQtNmYyMi00MGY5LTljZTctYjYyZTJmNjA0YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg0DUaQjFYJxor8kHQKG7pwg55aq8EHVeH36 MzeWKL8cjPS66wtTHTxUv+TWFm7stj5ild4Mx0sZ57MxY8HAWyDcMdl3bdu6fPhw vMNLpLlk6wXiAD6tWMRH2YANjxPdC1EKuT0+Bp0uxlm63xDRWBpX2foJr8/wpcYT FlyPzrxG8VYNSHZXlMV0DUeu6yE1fLitPUj2KctPsbBBUwGksUSOxrfXewI/9qNG Umb71GxENFVRkOkSHb7ifWUlEnXfCywWypqs0wCQqQBod9oTiLePB2RXHHy9cI6/ qwDlsULwkoIfN7pfy8hnvknEVvfm9i9pV2ooBG4GSDhDU3HwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRnHFZvfyb5fANhJfymBeVEMeYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTFmMjRmOWItOGJlZS0z YjcyLWFkZjEtZjdhNjQ4NmI3Nzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrn+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChPu/i4ciCq9mvyYNkRzKcAzrW1PD4Hp5ObAWK74FG8QLQLSbbd8rnA WSL0yt3XY7Ut2t5Txes9HaXmQZjoxXpb1UeuPgr+m2u2WPIZ+3gZx3AEJnNCE4wu DZ8iUjVktIh5Ns4vPXNBK0uECzZ26fKHpV8f14CI4wP53w1o48TWXuLxfnWE1GWK PgqE5bTmaIfe0QkI3hzcQOjhFwJOCacZFEg9i09rgt3bhrjLUhX/xnKTkJEP8ZdB VfLT4jjCjwkUc2tpCYHnluu3VAtgah4COEbJcEzm3yiS6im2wyuz5aEqOyQrbv+2 YLQvz8R5kCmS+tgfXw+PIyBCK4xt/2s= -----END CERTIFICATE-----Generated at Sat Apr 12 12:14:18 2025 by rpki-client