$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa File: 7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa (raw, json) Hash identifier: uucVZGuCFQsHGLIcM8UNmELmNeoJNp3MwOjJiCs4TXY= Subject key identifier: AB:67:CA:87:0A:11:C7:D1:C9:F7:3E:A5:1B:E6:50:C8:80:20:AC:56 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F432858495C24443B15AF3FDB62171B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 393249 IP address blocks: 128.189.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:44:3b:15:af:3f:db:62:17:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=f8cba97b-e2f2-4389-bdd4-87fb5f4cff4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:b1:6f:da:2e:6f:16:cd:4f:5f:19:aa:5e: ad:f9:60:66:eb:cf:8a:aa:ac:54:e2:d0:02:d1:cb: a8:90:75:37:f6:67:40:ce:40:80:f1:ff:5e:22:84: 5b:a5:eb:01:64:d6:37:15:e5:27:15:a8:81:df:69: 39:10:c2:c0:f8:41:b8:b1:66:ce:63:86:69:88:80: 78:94:ce:42:3b:b8:dc:aa:50:1a:12:78:c3:7a:b0: d1:c7:98:04:a8:68:8d:41:0f:44:8b:4c:9e:d6:b0: 38:30:da:79:73:25:a2:7a:11:57:9b:54:3c:e4:d0: f8:4b:f5:2d:26:0e:88:66:e0:64:a0:5c:b2:9a:d4: 71:37:1e:c9:a8:75:97:b1:8d:39:cb:5b:fe:04:cf: 36:7f:dd:b2:f2:99:dd:7f:40:44:c9:7c:7b:8b:b1: 1e:13:cb:5e:fa:ca:d6:7e:3e:54:f3:47:59:4d:e3: 8c:c7:e7:d3:93:12:75:98:13:27:42:66:6a:11:7d: 13:d6:47:42:55:df:f8:5c:75:08:81:35:86:1b:f6: eb:2f:17:a5:86:4d:2b:71:ae:d9:21:a0:e1:02:2c: 0a:e4:e2:df:de:d2:36:eb:02:58:9b:b8:c2:e8:fd: 0f:cd:b8:f9:f2:8f:0b:54:ef:c1:ce:23:ac:27:59: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:CA:87:0A:11:C7:D1:C9:F7:3E:A5:1B:E6:50:C8:80:20:AC:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ec:b5:e9:2e:9f:66:9c:fc:f7:b7:17:d5:93:6a:6d:0d:10: fe:1e:4b:81:52:01:9b:37:fb:6a:95:ad:2b:8c:3b:b8:fc:9b: 1f:cb:28:15:b9:b9:0d:88:3b:45:86:81:10:cb:e9:74:fa:60: 71:fd:8e:59:24:2b:09:22:2c:95:16:66:f2:e1:d4:99:07:ef: 2f:2f:fa:e6:00:81:74:6f:84:6e:7b:b7:99:37:4e:06:6b:3f: b9:35:d8:3d:dd:ca:18:91:de:1d:ed:b3:50:b8:30:76:72:a4: d9:ca:61:aa:a0:03:d8:f8:25:f1:de:40:17:67:9d:d9:0d:2c: e3:b3:be:a8:08:f7:59:87:55:c7:68:09:be:41:97:bd:45:19: f0:61:f6:5b:ca:b4:8f:60:99:5c:b0:e5:59:15:55:0e:75:70: 6f:13:4e:48:cb:6f:fd:0f:0e:3a:18:33:d1:c9:dd:56:7c:38: e0:ad:c1:a2:57:45:68:67:ea:17:e3:d6:c2:a3:83:36:c6:45: 77:b0:bf:73:20:7c:8a:03:3b:19:22:e5:c0:2e:13:e3:aa:9b: b8:3d:49:dc:09:4c:0e:5e:49:95:09:8b:7e:26:84:2f:85:1b: 1b:c6:8a:e9:25:0d:33:67:8e:cc:22:11:33:c5:34:cd:00:1e: 21:98:55:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEQ7Fa8/22IXG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZjhjYmE5N2ItZTJmMi00Mzg5LWJkZDQtODdmYjVmNGNmZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVuxb9oubxbNT18Zql6t+WBm68+KqqxU4tAC 0cuokHU39mdAzkCA8f9eIoRbpesBZNY3FeUnFaiB32k5EMLA+EG4sWbOY4ZpiIB4 lM5CO7jcqlAaEnjDerDRx5gEqGiNQQ9Ei0ye1rA4MNp5cyWiehFXm1Q85ND4S/Ut Jg6IZuBkoFyymtRxNx7JqHWXsY05y1v+BM82f92y8pndf0BEyXx7i7EeE8te+srW fj5U80dZTeOMx+fTkxJ1mBMnQmZqEX0T1kdCVd/4XHUIgTWGG/brLxelhk0rca7Z IaDhAiwK5OLf3tI26wJYm7jC6P0Pzbj58o8LVO/BziOsJ1nn/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtnyocKEcfRyfc+pRvmUMiAIKxWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2E2NTY1OWYtMjkxYS0z NDY4LWJmMGItNjMwZDdiN2U2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnstekun2ac/Pe3F9WTam0NEP4eS4FSAZs3+2qVrSuMO7j8mx/LKBW5 uQ2IO0WGgRDL6XT6YHH9jlkkKwkiLJUWZvLh1JkH7y8v+uYAgXRvhG57t5k3TgZr P7k12D3dyhiR3h3ts1C4MHZypNnKYaqgA9j4JfHeQBdnndkNLOOzvqgI91mHVcdo Cb5Bl71FGfBh9lvKtI9gmVyw5VkVVQ51cG8TTkjLb/0PDjoYM9HJ3VZ8OOCtwaJX RWhn6hfj1sKjgzbGRXewv3MgfIoDOxki5cAuE+Oqm7g9SdwJTA5eSZUJi34mhC+F GxvGiuklDTNnjswiETPFNM0AHiGYVfI= -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:41 2025 by rpki-client