$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa File: 603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa (raw, json) Hash identifier: deSkB/8GbRWjm9EJS+2LlAQkoBW/skmxgBiQDzXxrDs= Subject key identifier: DA:F6:4A:38:6C:44:30:EB:C2:91:5D:F9:F0:32:86:94:6C:8E:CD:1D Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F43285848E9CBF0AFAFE29DA23CF82600 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f0:af:af:e2:9d:a2:3c:f8:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=a147996e-6e60-4bb1-92ce-711d9ca4ab83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:d3:6b:3e:19:6f:c3:25:1d:80:73:bd:e6: d7:a1:e4:71:ab:b8:a9:c2:83:ef:4f:9c:38:25:0a: f1:c4:fc:0e:21:90:67:05:82:a9:a0:b9:a2:fb:08: 07:eb:5f:82:67:98:0d:d3:cc:d4:0e:1c:63:be:43: 7a:64:aa:5a:15:18:52:9b:cc:f1:a2:e8:92:d9:fa: 2d:a9:d5:93:ee:56:cf:62:c9:e3:c7:d4:d1:07:7a: de:1b:1c:f8:e0:cf:43:c6:c3:51:08:af:32:5d:0e: 6f:90:72:c5:76:00:9b:89:92:34:86:42:4e:b4:b6: 0c:90:47:87:07:fd:a7:23:5f:2e:2d:06:9a:12:9b: 60:e2:82:e3:9f:83:ef:3e:73:71:2a:30:81:e4:78: f0:0f:97:1f:67:40:c0:c2:e2:51:70:fb:cb:db:78: 65:37:fa:b1:54:57:9a:28:5a:ed:3a:c6:17:68:88: f9:1a:e3:55:8d:91:fb:fe:bf:9d:b2:16:a7:b9:a0: cf:53:f1:d1:34:40:8c:9e:92:5d:fe:32:b0:31:bb: ea:cb:9a:b4:c0:aa:3e:f0:db:ef:ae:98:19:24:29: 49:53:68:6b:f3:ee:86:b7:c8:38:a5:66:93:ee:3a: a7:3f:a0:af:00:a0:ab:bd:f2:fa:72:9c:36:26:3d: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F6:4A:38:6C:44:30:EB:C2:91:5D:F9:F0:32:86:94:6C:8E:CD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9c:a1:b1:de:ff:0c:8a:c4:bd:1e:6b:1e:fc:b0:53:51:1b: 85:4d:60:fd:37:3e:4c:3b:9f:c0:13:ce:13:45:2a:4a:3b:92: 09:95:be:d7:55:e2:c0:f3:4e:12:a7:a4:5e:79:64:e8:a9:91: 28:08:87:fb:61:f3:a8:27:73:f9:e3:dc:4b:34:7d:4b:e2:d4: 61:17:4c:bb:f1:43:6e:b6:d4:81:e4:c3:1e:ec:82:c4:6c:f8: 09:36:b9:4a:19:ab:cb:13:80:04:12:7c:d5:97:86:4f:0e:3c: a0:3e:ab:d0:3e:4b:a8:b1:25:54:d4:44:63:9f:af:93:86:c7: 7d:ef:30:9d:e1:1e:01:92:df:25:21:68:36:e5:b8:0d:d0:78: 16:2c:3f:df:af:fa:fa:69:4d:74:13:c4:f1:0f:b5:8b:f8:8a: 06:c9:e2:00:d5:a6:1f:8c:4c:31:8c:b1:ee:70:16:d8:4b:3e: 64:8b:e2:cc:ec:95:3a:f9:ae:26:fb:47:f3:d2:c5:a1:82:bb: a0:2b:4c:8d:71:c4:ee:83:6e:24:6f:ac:a0:00:59:11:62:5a: 2f:26:1e:c4:22:84:94:dc:1d:ef:85:58:2e:c6:fc:3e:ac:6a: 7f:bc:3e:af:77:ab:a3:50:5d:0b:cd:65:ae:53:45:ae:f1:d7: 6f:dd:26:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/Cvr+Kdojz4JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk YTE0Nzk5NmUtNmU2MC00YmIxLTkyY2UtNzExZDljYTRhYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmznTaz4Zb8MlHYBzvebXoeRxq7ipwoPvT5w4 JQrxxPwOIZBnBYKpoLmi+wgH61+CZ5gN08zUDhxjvkN6ZKpaFRhSm8zxouiS2fot qdWT7lbPYsnjx9TRB3reGxz44M9DxsNRCK8yXQ5vkHLFdgCbiZI0hkJOtLYMkEeH B/2nI18uLQaaEptg4oLjn4PvPnNxKjCB5HjwD5cfZ0DAwuJRcPvL23hlN/qxVFea KFrtOsYXaIj5GuNVjZH7/r+dshanuaDPU/HRNECMnpJd/jKwMbvqy5q0wKo+8Nvv rpgZJClJU2hr8+6Gt8g4pWaT7jqnP6CvAKCrvfL6cpw2Jj0LKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr2SjhsRDDrwpFd+fAyhpRsjs0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvNjAzYTUwYmEtOTMwOC0z ZjRjLWFmNGItN2Y4MWMxODNmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKcobHe/wyKxL0eax78sFNRG4VNYP03Pkw7n8ATzhNFKko7kgmVvtdV 4sDzThKnpF55ZOipkSgIh/th86gnc/nj3Es0fUvi1GEXTLvxQ2621IHkwx7sgsRs +Ak2uUoZq8sTgAQSfNWXhk8OPKA+q9A+S6ixJVTURGOfr5OGx33vMJ3hHgGS3yUh aDbluA3QeBYsP9+v+vppTXQTxPEPtYv4igbJ4gDVph+MTDGMse5wFthLPmSL4szs lTr5rib7R/PSxaGCu6ArTI1xxO6DbiRvrKAAWRFiWi8mHsQihJTcHe+FWC7G/D6s an+8Pq93q6NQXQvNZa5TRa7x12/dJqM= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:51 2025 by rpki-client