$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa File: 84c6b55b-d903-33e7-a64f-292b8c3f765b.roa (raw, json) Hash identifier: SCv9QuGTEp0iYZmHKD1s7MCtPOOAhKs/AYRpf4uFjcg= Subject key identifier: AB:55:36:48:1D:FD:85:57:E7:96:A5:C2:EF:29:DF:2C:F3:32:17:CB Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F432858495C2444714ED1B01771F94C80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 393249 IP address blocks: 128.189.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:44:71:4e:d1:b0:17:71:f9:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=c55e29cb-5f2a-4970-97c3-8bc5d4d874b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:5a:bd:67:68:f5:38:d5:bf:76:52:03:05: d8:7b:f8:e9:03:c6:7d:8e:02:8d:ae:70:3d:d2:fd: 3a:19:29:a8:02:80:28:8a:05:bf:58:26:66:c7:5c: 0d:b3:73:c2:14:2e:45:3b:e1:14:43:1f:6b:bd:ef: 2d:61:49:28:26:85:61:6f:ec:eb:8f:fe:2f:c6:f3: 5f:1c:1d:a5:17:73:e8:14:c5:19:07:b0:1b:de:bf: cd:bc:55:46:c2:7e:95:75:01:2a:49:9a:31:1c:d3: 84:36:55:15:77:f7:72:a8:d2:6e:75:ae:00:63:1b: d9:28:5f:e7:7c:f0:49:d0:16:3e:6d:5d:c4:c6:a2: a9:f2:d6:aa:fb:d0:da:e9:65:60:a9:bd:09:fe:b5: 30:4f:6e:22:19:dc:7e:dd:a8:46:c2:0d:dd:aa:c4: 8e:43:ce:60:da:c2:ef:bd:47:8e:6f:46:4b:e0:d2: ae:13:f9:15:91:3a:9b:68:ee:dc:b3:9c:e7:7f:78: c6:1d:2d:e1:dc:8d:8a:ac:b3:fc:48:1a:ab:f7:ca: 3d:8b:68:8c:c1:f2:48:41:96:57:8f:b2:4d:3e:76: a6:cf:26:2c:f5:e3:29:c6:37:61:e8:34:39:9a:68: 60:63:3e:1b:8c:9d:db:0b:cb:54:d7:3b:68:e8:db: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:36:48:1D:FD:85:57:E7:96:A5:C2:EF:29:DF:2C:F3:32:17:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:10:63:54:14:1d:2f:77:25:49:46:92:e6:d3:73:8b:db:bc: 4c:9a:d8:73:da:78:2a:0e:ed:7f:46:bb:de:ae:3b:d0:b9:35: d4:c4:09:2a:d4:20:d9:90:ef:ba:e7:3d:28:6d:79:54:15:9b: c9:87:04:8f:00:62:5c:a4:9d:8f:1a:50:d6:e4:b2:84:6b:8e: 17:ad:78:13:af:7b:68:4a:49:8c:67:0f:ea:f7:de:48:72:eb: ee:5d:62:9f:60:3b:e8:bf:0b:d9:19:68:33:09:8c:7f:ad:35: 57:d2:d1:f7:cd:46:1f:e5:97:ac:22:3b:e6:4f:9f:ca:f8:8f: e4:55:ca:fa:2b:a6:31:da:53:b6:c1:98:06:fb:5e:b9:01:3d: c5:48:56:71:b6:6c:f6:09:88:20:2d:3a:0c:dc:be:01:46:bf: 82:0a:b1:bd:90:a5:37:f6:13:d6:88:07:ce:2f:d2:aa:96:f0: 1e:95:d7:19:c1:f5:36:f1:17:89:cb:69:19:98:35:ce:29:8e: fc:6f:f1:83:76:c6:9f:11:01:29:fe:09:1e:e4:b6:7f:a0:2f: b1:dc:45:d0:65:c0:00:47:5e:57:38:d2:5f:66:c2:27:1c:3d: b3:d1:82:f6:16:5a:37:44:cd:ab:0a:2e:a6:ad:b0:dd:53:7e: 3e:a0:01:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJERxTtGwF3H5TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YzU1ZTI5Y2ItNWYyYS00OTcwLTk3YzMtOGJjNWQ0ZDg3NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmStavWdo9TjVv3ZSAwXYe/jpA8Z9jgKNrnA9 0v06GSmoAoAoigW/WCZmx1wNs3PCFC5FO+EUQx9rve8tYUkoJoVhb+zrj/4vxvNf HB2lF3PoFMUZB7Ab3r/NvFVGwn6VdQEqSZoxHNOENlUVd/dyqNJuda4AYxvZKF/n fPBJ0BY+bV3ExqKp8taq+9Da6WVgqb0J/rUwT24iGdx+3ahGwg3dqsSOQ85g2sLv vUeOb0ZL4NKuE/kVkTqbaO7cs5znf3jGHS3h3I2KrLP8SBqr98o9i2iMwfJIQZZX j7JNPnamzyYs9eMpxjdh6DQ5mmhgYz4bjJ3bC8tU1zto6Nsw8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtVNkgd/YVX55alwu8p3yzzMhfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODRjNmI1NWItZDkwMy0z M2U3LWE2NGYtMjkyYjhjM2Y3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkQY1QUHS93JUlGkubTc4vbvEya2HPaeCoO7X9Gu96uO9C5NdTECSrU INmQ77rnPShteVQVm8mHBI8AYlyknY8aUNbksoRrjheteBOve2hKSYxnD+r33khy 6+5dYp9gO+i/C9kZaDMJjH+tNVfS0ffNRh/ll6wiO+ZPn8r4j+RVyvorpjHaU7bB mAb7XrkBPcVIVnG2bPYJiCAtOgzcvgFGv4IKsb2QpTf2E9aIB84v0qqW8B6V1xnB 9TbxF4nLaRmYNc4pjvxv8YN2xp8RASn+CR7ktn+gL7HcRdBlwABHXlc40l9mwicc PbPRgvYWWjdEzasKLqatsN1Tfj6gAck= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:46 2025 by rpki-client