$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: IuQTy/a4FxyDwBDzPOqBJ+zKWHto+o3oW+qN3AHILtE= Subject key identifier: 34:7D:4D:20:72:67:F1:B9:42:5E:2F:1D:21:75:19:D5:BC:35:25:6D Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F43285848E86660AAAE520A858EABC740 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:aa:ae:52:0a:85:8e:ab:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=9176723a-e300-4c59-b766-70d41be0b73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4e:f5:d4:e4:3d:55:ef:18:44:6c:09:32:db: bc:1d:0e:30:fc:59:08:28:87:47:18:84:14:2e:2f: de:26:59:90:68:1c:33:38:90:f3:c5:57:e2:26:c1: 7e:d1:70:63:3d:2e:ff:6a:50:cc:82:42:a1:92:2b: ca:b9:85:7b:dd:5b:96:6f:6d:92:7d:02:cd:54:d3: 17:0f:c1:57:fa:79:4d:63:e7:72:5b:c5:13:d1:f8: ff:60:db:27:2c:4b:6c:a5:c5:59:33:f9:f9:86:de: c9:93:c8:10:d0:70:9a:ab:9c:50:ed:32:0b:97:78: 1d:c1:5b:d6:22:08:70:ad:75:d2:22:f7:69:c3:42: a1:1b:9a:22:80:5e:10:9e:e0:89:88:2b:7c:74:26: e9:61:9a:aa:79:e3:85:16:7e:50:b6:d8:d4:85:fa: 0f:95:8b:cf:72:42:2c:c5:0b:56:50:1c:5f:a3:21: 9e:ad:8f:50:51:56:2d:7d:4c:44:7f:6a:4c:00:28: 35:bd:aa:2b:29:d0:c0:40:dc:60:b7:1f:c0:07:f0: 49:98:a4:65:67:9a:e7:8b:26:ec:78:74:54:8c:0d: 3c:5d:c2:d6:21:cc:c0:20:55:04:09:ab:ac:86:c5: 45:cf:a9:e3:12:cb:f3:a9:87:fa:07:0e:9e:dd:90: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7D:4D:20:72:67:F1:B9:42:5E:2F:1D:21:75:19:D5:BC:35:25:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:07:a6:56:ba:a3:56:88:a4:d4:4c:32:20:49:3e:d6:1e:c4: 24:67:7e:f3:0c:60:1d:3e:9c:8b:47:b6:c2:83:b8:fd:e7:21: 63:a5:02:52:75:cd:ae:ef:4d:3f:05:e7:38:ea:ad:29:b4:63: 19:89:db:65:61:94:cf:46:24:48:fd:1b:0a:82:30:89:a8:60: e9:a8:9d:c6:03:6a:89:95:83:29:93:36:fe:97:eb:ae:c3:c0: 4d:7a:c0:c7:ea:e1:71:15:a1:f3:25:9a:91:f3:62:56:92:ee: bb:2b:c6:62:88:c8:98:35:9c:f7:ba:3e:c2:ea:a0:bf:ad:d0: e5:68:f4:d1:4d:60:e8:53:70:59:91:95:6e:6c:38:52:f4:a6: 05:e3:4c:c8:3a:a0:e8:ec:7e:26:90:d2:df:41:71:a0:96:f1: a9:6b:6b:e3:35:b3:ac:2a:62:cb:b0:dc:3a:93:a3:94:f4:e9: 8b:01:33:d2:f8:05:3e:e0:3a:1b:25:5d:87:7d:bd:6f:7c:d2: 3f:2a:2f:31:04:d2:f0:d7:eb:1d:46:3a:40:1e:d3:2c:f0:73: cf:6f:d0:ad:10:6a:ed:f3:ff:00:ff:4f:7f:d8:60:2e:9f:75: b0:5c:be:7c:97:4a:98:1e:de:ea:78:ab:cc:2e:52:68:47:a9: 8f:7a:dc:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmCqrlIKhY6rx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk OTE3NjcyM2EtZTMwMC00YzU5LWI3NjYtNzBkNDFiZTBiNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk711OQ9Ve8YRGwJMtu8HQ4w/FkIKIdHGIQU Li/eJlmQaBwzOJDzxVfiJsF+0XBjPS7/alDMgkKhkivKuYV73VuWb22SfQLNVNMX D8FX+nlNY+dyW8UT0fj/YNsnLEtspcVZM/n5ht7Jk8gQ0HCaq5xQ7TILl3gdwVvW IghwrXXSIvdpw0KhG5oigF4QnuCJiCt8dCbpYZqqeeOFFn5QttjUhfoPlYvPckIs xQtWUBxfoyGerY9QUVYtfUxEf2pMACg1vaorKdDAQNxgtx/AB/BJmKRlZ5rniybs eHRUjA08XcLWIczAIFUECaushsVFz6njEsvzqYf6Bw6e3ZCLrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR9TSByZ/G5Ql4vHSF1GdW8NSVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUHpla6o1aIpNRMMiBJPtYexCRnfvMMYB0+nItHtsKDuP3nIWOlAlJ1 za7vTT8F5zjqrSm0YxmJ22VhlM9GJEj9GwqCMImoYOmoncYDaomVgymTNv6X667D wE16wMfq4XEVofMlmpHzYlaS7rsrxmKIyJg1nPe6PsLqoL+t0OVo9NFNYOhTcFmR lW5sOFL0pgXjTMg6oOjsfiaQ0t9BcaCW8alra+M1s6wqYsuw3DqTo5T06YsBM9L4 BT7gOhslXYd9vW980j8qLzEE0vDX6x1GOkAe0yzwc89v0K0Qau3z/wD/T3/YYC6f dbBcvnyXSpge3up4q8wuUmhHqY963Ik= -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:46 2025 by rpki-client