$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa File: 45005f29-389f-31e2-80b8-8e673e32200b.roa (raw, json) Hash identifier: CcGBWI0CeabcvqymvGWjDgp+X8z6QQdjiuRAaBRcHGk= Subject key identifier: A4:A6:0E:F1:92:35:80:2E:3F:3A:FB:88:05:B0:B0:91:34:81:C9:CB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849BF3F644A847F0FBE2EE95780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 204670 IP address blocks: 128.121.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:64:4a:84:7f:0f:be:2e:e9:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2d477655-753e-4f2e-b6cf-0975f55b7995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:7f:3c:ee:08:98:dc:3a:0b:e1:ff:3d:e3: 9f:bd:69:69:56:d4:b8:81:bd:ba:d0:24:8b:e8:09: a2:1b:41:c6:84:19:01:70:6a:02:74:ac:a0:1f:05: 48:89:dc:ca:02:71:2a:33:b7:bb:86:1c:3f:62:81: a3:b3:80:c4:44:a1:e2:3f:5d:10:ef:77:19:3a:f7: 6e:34:b4:c5:ed:6d:01:44:31:a6:76:4d:72:ce:d8: d4:9a:65:2a:3f:82:21:63:33:5e:e4:9c:8f:05:54: 13:ba:79:5c:3d:4a:fe:aa:7c:c4:a3:a8:92:8d:ff: 94:f2:6f:33:80:8b:db:14:24:5e:8a:0b:e4:5d:ad: e0:e4:80:fa:ff:97:e9:e2:9b:db:4f:ef:f0:09:b0: 4a:46:9e:6a:93:8f:12:a4:29:1d:2b:b8:da:d9:87: 3a:72:3e:03:0c:49:94:c1:0f:2e:b7:33:e3:aa:c3: fe:1a:d1:78:f3:af:5e:8c:70:48:5f:38:a6:cc:5d: f6:44:d1:3c:55:85:06:3a:5a:87:3a:0a:8d:13:dc: 67:a0:dc:9e:e3:bd:8f:70:73:c7:ff:71:4d:ee:4f: 16:1e:ca:af:4b:d8:c9:63:de:64:ef:83:19:d1:41: e7:4c:20:38:62:ce:13:f9:47:25:0f:95:44:48:c2: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:0E:F1:92:35:80:2E:3F:3A:FB:88:05:B0:B0:91:34:81:C9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:17:af:3f:ac:53:97:1a:1b:b2:8c:fb:e7:67:65:22:5c:7f: 87:6a:fe:75:ec:f2:3b:1e:8a:6b:1b:02:72:bb:e3:4d:30:67: 62:74:61:96:80:04:d6:1a:d0:6a:a3:4a:6b:0f:ca:d7:d4:6c: 5a:33:dc:e4:30:41:9d:33:d6:9e:d7:be:f4:9d:40:8e:e5:1a: 07:59:48:3f:f0:7c:91:48:17:7c:15:83:0b:8c:f3:8f:f9:c1: 6c:09:4b:88:98:33:61:7f:8e:8c:51:6e:37:74:65:6a:e4:58: 36:d5:41:d1:1b:80:cb:6c:e0:98:fe:47:eb:95:2c:04:b5:df: 1a:1b:e5:0b:0c:cc:b0:bb:39:c6:cf:3b:83:71:ef:fd:65:87: e9:83:c1:82:34:66:42:66:e2:c1:6c:c7:b4:af:47:58:1c:f2: 86:66:3c:d4:d0:7a:bb:4a:c6:82:6f:9f:29:a5:03:a4:ef:1d: 18:f8:ed:c4:60:06:14:65:80:ab:97:1d:48:2e:ee:e3:11:de: c2:b9:7e:2c:98:77:aa:81:bd:30:ff:fd:1b:31:01:a5:d0:41: ae:58:f9:49:44:55:57:c9:a2:5d:40:ed:3f:eb:da:37:bc:a8: a2:b3:92:98:5c:8c:90:28:42:e4:b4:1f:2c:f8:5c:98:8b:20: 9e:84:50:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2RKhH8Pvi7pV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmQ0Nzc2NTUtNzUzZS00ZjJlLWI2Y2YtMDk3NWY1NWI3OTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQN/PO4ImNw6C+H/PeOfvWlpVtS4gb260CSL 6AmiG0HGhBkBcGoCdKygHwVIidzKAnEqM7e7hhw/YoGjs4DERKHiP10Q73cZOvdu NLTF7W0BRDGmdk1yztjUmmUqP4IhYzNe5JyPBVQTunlcPUr+qnzEo6iSjf+U8m8z gIvbFCReigvkXa3g5ID6/5fp4pvbT+/wCbBKRp5qk48SpCkdK7ja2Yc6cj4DDEmU wQ8utzPjqsP+GtF4869ejHBIXzimzF32RNE8VYUGOlqHOgqNE9xnoNye472PcHPH /3FN7k8WHsqvS9jJY95k74MZ0UHnTCA4Ys4T+UclD5VESMJnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSmDvGSNYAuPzr7iAWwsJE0gcnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDUwMDVmMjktMzg5Zi0z MWUyLTgwYjgtOGU2NzNlMzIyMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkXrz+sU5caG7KM++dnZSJcf4dq/nXs8jseimsbAnK7400wZ2J0YZaA BNYa0GqjSmsPytfUbFoz3OQwQZ0z1p7XvvSdQI7lGgdZSD/wfJFIF3wVgwuM84/5 wWwJS4iYM2F/joxRbjd0ZWrkWDbVQdEbgMts4Jj+R+uVLAS13xob5QsMzLC7OcbP O4Nx7/1lh+mDwYI0ZkJm4sFsx7SvR1gc8oZmPNTQertKxoJvnymlA6TvHRj47cRg BhRlgKuXHUgu7uMR3sK5fiyYd6qBvTD//RsxAaXQQa5Y+UlEVVfJol1A7T/r2je8 qKKzkphcjJAoQuS0Hyz4XJiLIJ6EUJ4= -----END CERTIFICATE-----Generated at Sat May 10 13:30:45 2025 by rpki-client