$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa File: 10f72b7c-8477-34d9-84e6-673dfd0817f0.roa (raw, json) Hash identifier: wCcvP2Sjhrsl/Qp1d+ClqoJXr1xYhGlQaqE8ZTYwnho= Subject key identifier: 4A:E5:0D:B7:FA:66:2C:9F:D2:58:A0:80:A0:FB:BC:62:22:A5:E6:EF Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849071BE6259512D056EB3BAAA0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 5744 IP address blocks: 151.207.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e6:25:95:12:d0:56:eb:3b:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=5ef01e26-be83-48b0-aad5-20c21a2386dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:4e:9e:43:fb:6a:8f:67:d3:c7:59:37:79: 82:53:cb:78:e0:7b:c5:9f:0c:b2:05:41:94:39:da: 9a:21:38:65:b8:52:bb:8d:98:80:7f:9a:81:5c:8a: 74:81:35:d8:9b:d7:d1:92:13:42:d0:9c:5a:f9:70: f5:14:77:c8:94:0b:22:b0:56:ae:69:4b:a5:e7:37: c6:6a:e9:63:53:f0:64:d0:2a:55:fe:b2:63:38:da: bc:ae:4d:a5:d8:1e:f8:ea:3c:1c:58:f6:ae:f7:56: b4:97:96:ca:9e:2f:59:20:02:94:0f:0f:ca:26:8c: 7c:ad:79:3d:35:6f:2c:5d:6b:97:06:a9:0b:b3:fe: ea:84:5e:77:73:fe:8d:e0:28:90:62:b8:4f:33:3a: f3:32:3f:6b:e9:c5:70:71:11:a3:e5:97:3c:7a:6b: 1a:f0:bd:cf:cb:a0:28:4b:4b:f1:33:21:f1:cd:24: a7:1c:d9:6b:c4:3e:e9:9b:a7:92:d5:de:b6:bb:18: 6e:f7:33:d8:f5:13:7e:fc:91:b4:d7:74:9a:de:c0: 8c:a3:ee:ea:b2:3d:d7:72:23:e5:60:79:c0:0d:33: 75:39:5d:56:43:d8:15:32:25:60:06:ae:3f:11:a2: 5b:b7:d7:44:e2:bd:63:3b:85:f0:29:90:2b:40:2f: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E5:0D:B7:FA:66:2C:9F:D2:58:A0:80:A0:FB:BC:62:22:A5:E6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:f9:0a:01:26:63:ea:5b:c6:5d:cc:b4:8c:d1:36:e7:b6:ab: 4a:df:c3:4a:86:e8:31:9e:08:62:1a:45:3e:26:fd:5e:c7:1a: 63:5f:4b:22:74:34:e1:38:16:9e:2a:9a:70:27:af:c9:17:c4: b3:22:26:b8:af:98:b0:97:67:a0:6b:30:2c:47:12:5f:a7:8e: a2:f7:b2:a7:d0:fa:97:8b:fc:86:11:de:2c:cd:b0:1b:41:24: d7:54:c4:5b:e1:57:c4:f3:ea:86:78:51:ee:a0:b7:7b:fc:4b: 27:49:dc:fc:64:8f:53:9b:d8:69:5a:ac:2a:34:b6:b3:4b:df: 8e:4e:b4:2e:08:94:6c:8a:2b:40:19:a6:a8:36:cc:43:14:b7: 9a:54:e7:0d:d6:65:33:3b:6f:c4:31:95:e0:f7:90:09:c6:41: dd:a9:be:52:57:63:1b:90:fe:38:37:19:31:51:eb:ef:4a:b9: df:8e:16:76:f3:f2:e4:fc:ff:f2:70:7a:cc:09:0b:49:c5:0e: 27:6c:a7:83:58:72:b5:db:9d:fc:16:ef:57:86:a7:e5:e8:16: e9:8d:1e:4c:fa:16:02:60:c6:b4:45:37:aa:15:36:21:5c:ba: 34:e9:da:64:5c:a3:52:3e:64:65:d4:08:54:02:46:75:af:4c: a1:b8:4c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+YllRLQVus7qqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NWVmMDFlMjYtYmU4My00OGIwLWFhZDUtMjBjMjFhMjM4NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHdOnkP7ao9n08dZN3mCU8t44HvFnwyyBUGU OdqaIThluFK7jZiAf5qBXIp0gTXYm9fRkhNC0Jxa+XD1FHfIlAsisFauaUul5zfG auljU/Bk0CpV/rJjONq8rk2l2B746jwcWPau91a0l5bKni9ZIAKUDw/KJox8rXk9 NW8sXWuXBqkLs/7qhF53c/6N4CiQYrhPMzrzMj9r6cVwcRGj5Zc8emsa8L3Py6Ao S0vxMyHxzSSnHNlrxD7pm6eS1d62uxhu9zPY9RN+/JG013Sa3sCMo+7qsj3XciPl YHnADTN1OV1WQ9gVMiVgBq4/EaJbt9dE4r1jO4XwKZArQC8r6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErlDbf6Ziyf0liggKD7vGIipebvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMTBmNzJiN2MtODQ3Ny0z NGQ5LTg0ZTYtNjczZGZkMDgxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANr5CgEmY+pbxl3MtIzRNue2q0rfw0qG6DGeCGIaRT4m/V7HGmNfSyJ0 NOE4Fp4qmnAnr8kXxLMiJrivmLCXZ6BrMCxHEl+njqL3sqfQ+peL/IYR3izNsBtB JNdUxFvhV8Tz6oZ4Ue6gt3v8SydJ3Pxkj1Ob2GlarCo0trNL345OtC4IlGyKK0AZ pqg2zEMUt5pU5w3WZTM7b8QxleD3kAnGQd2pvlJXYxuQ/jg3GTFR6+9Kud+OFnbz 8uT8//JweswJC0nFDidsp4NYcrXbnfwW71eGp+XoFumNHkz6FgJgxrRFN6oVNiFc ujTp2mRco1I+ZGXUCFQCRnWvTKG4TEk= -----END CERTIFICATE-----Generated at Fri Apr 4 18:53:43 2025 by rpki-client