$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa File: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json) Hash identifier: XMkTW2f2p45ZjR2nV+IEk8NPXgO4XJkwIofCHVkkbbQ= Subject key identifier: FC:25:A4:9E:58:72:16:25:1C:ED:D3:2C:0E:A3:52:FB:94:59:BD:39 Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F43285848A29B567EF0E87F0AC7A29500 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 23162 IP address blocks: 128.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:56:7e:f0:e8:7f:0a:c7:a2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=a0567437-5f9f-4ef6-9c1c-54f743931eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:44:b2:59:02:9d:e3:84:49:27:3f:81:22: fb:21:21:22:34:f7:f1:66:28:48:4a:b5:25:ca:aa: 6e:41:d8:7e:d9:f1:0e:21:6e:bb:19:c3:b4:c7:02: 4a:7f:b8:9d:7f:3a:7a:6b:01:41:87:b7:90:d5:b9: 30:79:48:78:36:e8:46:4c:52:f9:c5:84:72:16:db: b6:89:14:93:08:41:d9:4e:71:89:2f:4c:a1:eb:1f: e4:61:a9:f5:27:23:44:ef:e8:9b:3e:9f:f9:5d:72: 3b:1e:33:1b:d4:a7:b3:ca:c1:14:5f:c2:e6:8e:96: 8f:84:90:11:97:be:80:9a:05:a5:45:c1:f9:ec:55: d1:86:d9:9b:89:a5:f2:3f:be:96:b9:11:f3:94:c6: 46:66:56:14:42:1d:25:45:9f:0a:28:66:5c:3d:8c: a0:af:17:d8:05:a2:4c:27:94:39:9a:44:1c:2a:5e: 69:e4:5e:d6:c3:73:42:28:b7:06:fa:b9:8e:9a:22: 39:11:b4:47:8d:ec:44:a0:0f:0f:35:c1:d6:f5:29: 56:9f:15:0e:96:64:ee:cd:3d:ec:26:a5:82:dd:87: 98:4e:ec:2e:96:2d:02:4b:8b:f0:30:c6:0a:25:c2: 97:72:aa:55:3c:92:d5:23:4e:87:9c:31:b5:f5:49: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:A4:9E:58:72:16:25:1C:ED:D3:2C:0E:A3:52:FB:94:59:BD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3a:e3:be:22:46:a1:2f:d9:fe:78:4e:92:74:ed:8e:1d:7f: ed:d3:c0:d9:1a:16:93:dc:ca:d4:f2:0e:9f:08:ce:5b:8d:89: ef:05:13:12:2b:25:10:db:fe:d4:83:46:fc:da:a5:11:e3:ee: a8:d8:dc:bb:ff:fe:26:bb:46:0f:ae:f5:2c:ef:a5:7f:d4:3c: c8:39:f2:1c:45:cc:17:40:71:07:d0:22:71:d3:1c:5b:73:17: e4:e4:5a:59:26:be:27:9f:74:32:fb:88:6c:2e:3c:16:07:7a: 2a:d1:e7:77:f9:35:74:c3:93:ad:46:ad:3d:c8:74:61:2a:76: 88:23:d7:e3:d4:58:1f:25:17:30:ff:90:46:e1:d3:10:1a:0d: b1:d1:37:85:6d:48:1f:48:b5:69:33:ff:cc:37:b2:1b:23:d9: 0d:b1:0b:ce:c8:51:18:ca:bd:1c:dc:88:42:57:5c:20:de:59: 31:44:38:c4:99:65:4d:09:b2:90:88:a8:a0:1f:a8:a6:54:fc: 96:61:25:a0:de:d8:17:30:e1:cb:30:18:13:29:23:25:68:6f: 55:b5:e1:a5:52:3d:e3:6e:c8:42:ba:ac:bd:e3:ab:12:66:6f: d9:16:4c:85:bf:33:06:20:85:63:02:71:05:43:a6:af:2c:12: 3d:c4:86:1d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiim1Z+8Oh/CseilQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YTA1Njc0MzctNWY5Zi00ZWY2LTljMWMtNTRmNzQzOTMxZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1NEslkCneOESSc/gSL7ISEiNPfxZihISrUl yqpuQdh+2fEOIW67GcO0xwJKf7idfzp6awFBh7eQ1bkweUh4NuhGTFL5xYRyFtu2 iRSTCEHZTnGJL0yh6x/kYan1JyNE7+ibPp/5XXI7HjMb1KezysEUX8LmjpaPhJAR l76AmgWlRcH57FXRhtmbiaXyP76WuRHzlMZGZlYUQh0lRZ8KKGZcPYygrxfYBaJM J5Q5mkQcKl5p5F7Ww3NCKLcG+rmOmiI5EbRHjexEoA8PNcHW9SlWnxUOlmTuzT3s JqWC3YeYTuwuli0CS4vwMMYKJcKXcqpVPJLVI06HnDG19UkWewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPwlpJ5YchYlHO3TLA6jUvuUWb05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDliNWM4MGUtZWMyYS0z YTQ0LWE1NmYtZmM2NTk1NjVmZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFjrjviJGoS/Z/nhOknTtjh1/7dPA2RoWk9zK1PIOnwjOW42J7wUTEisl ENv+1ING/NqlEePuqNjcu//+JrtGD671LO+lf9Q8yDnyHEXMF0BxB9AicdMcW3MX 5ORaWSa+J590MvuIbC48Fgd6KtHnd/k1dMOTrUatPch0YSp2iCPX49RYHyUXMP+Q RuHTEBoNsdE3hW1IH0i1aTP/zDeyGyPZDbELzshRGMq9HNyIQldcIN5ZMUQ4xJll TQmykIiooB+oplT8lmEloN7YFzDhyzAYEykjJWhvVbXhpVI9427IQrqsveOrEmZv 2RZMhb8zBiCFYwJxBUOmrywSPcSGHQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:02:21 2025 by rpki-client