$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa File: 95f3b12c-fbc5-3b30-bade-a3126d702a46.roa (raw, json) Hash identifier: 8wB4dXlTWDUfP7SXbYz3jedeEeYPJgag0tKaDmPALLk= Subject key identifier: 0A:FC:1F:06:BA:F4:F6:69:0D:15:EE:34:23:08:23:44:97:88:C5:B8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849BF3F64696954862FFC789D40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 204670 IP address blocks: 128.121.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:64:69:69:54:86:2f:fc:78:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=3a9cae69-d6a7-45f4-aa47-b2de4d7fb5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:7c:ea:f9:f7:4d:7a:08:94:14:42:2d:15: fa:78:fd:56:e9:cd:c0:5d:9c:ee:d3:1d:85:74:2e: 65:6f:b6:d5:d8:7d:90:4f:b5:72:16:e7:63:d5:69: 54:b5:3c:59:d9:77:17:ef:4a:36:79:bf:51:9e:51: 79:07:88:c5:8c:61:e9:ea:52:ee:1b:5e:0e:6d:cb: 21:3c:18:85:fa:41:9c:03:b6:aa:55:fa:73:54:d7: 8e:61:a3:5c:3d:81:d1:af:e8:8b:2d:c0:f7:7b:b2: 7a:7a:c1:1e:15:0e:d7:ea:12:59:fc:c8:e7:bb:24: a8:95:dd:da:44:e5:e2:42:59:f2:79:16:51:ea:95: 9d:e8:37:ae:dd:f0:19:f7:69:a5:b1:fc:86:e4:4e: 8c:61:ef:53:2f:7a:87:d5:5b:29:81:3f:4f:45:25: 5e:88:52:ab:4b:1f:0d:26:e6:68:34:64:fb:ba:99: 71:d3:9b:7a:39:41:aa:c7:2f:d3:43:4d:b7:7d:82: 74:77:b9:3d:fa:ab:62:44:14:19:6b:10:27:49:3f: 3d:96:9b:08:b1:30:49:4a:6b:1c:73:25:8b:77:a3: 7e:38:70:5f:47:02:2f:85:34:65:98:3b:f9:3b:b0: c7:e6:80:c8:d3:8c:d9:95:a1:53:06:dd:c2:c7:c3: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:1F:06:BA:F4:F6:69:0D:15:EE:34:23:08:23:44:97:88:C5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:59:c0:8b:0a:82:f5:17:a9:80:0f:49:3f:cb:1b:e7:0f:e3: b0:6d:76:a9:2e:0e:be:f5:4b:bb:b5:cc:69:2b:82:65:75:1d: 47:7b:d1:35:94:f5:1e:e3:6f:73:11:b1:4c:c0:23:38:3f:89: 5b:b4:16:44:b2:ab:2d:15:ae:7c:a1:b3:25:74:5e:ed:41:66: 34:9b:23:ad:11:2f:75:f3:24:c8:55:48:8d:b0:a8:ef:ba:dd: bc:19:19:fc:72:a2:8d:b1:e7:82:84:89:65:9a:29:1b:31:e0: ef:79:9e:73:22:47:a7:41:60:98:44:88:3b:8b:13:e7:da:9f: f6:0b:4c:4d:fe:36:92:b8:bf:67:f1:c7:1d:54:11:4e:fd:72: d6:d5:68:e7:52:e2:d0:64:22:62:e7:25:71:eb:98:55:88:94: d1:96:cb:cb:95:33:6b:79:46:7f:cf:f9:03:9b:b8:ab:17:bd: 29:19:be:2b:74:b3:38:f9:17:9b:1f:15:e1:d3:01:0c:35:e0: ef:39:51:2b:5a:e2:79:33:0a:33:08:91:43:5f:75:bd:e3:99: df:12:37:aa:82:4a:2a:1f:d2:b9:f8:a7:c4:26:ec:d9:8b:d8: 13:c6:f8:b3:5f:d9:2c:23:ce:17:5b:37:1c:68:37:e1:93:78: 31:f4:e0:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2RpaVSGL/x4nUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk M2E5Y2FlNjktZDZhNy00NWY0LWFhNDctYjJkZTRkN2ZiNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotx86vn3TXoIlBRCLRX6eP1W6c3AXZzu0x2F dC5lb7bV2H2QT7VyFudj1WlUtTxZ2XcX70o2eb9RnlF5B4jFjGHp6lLuG14Obcsh PBiF+kGcA7aqVfpzVNeOYaNcPYHRr+iLLcD3e7J6esEeFQ7X6hJZ/MjnuySold3a ROXiQlnyeRZR6pWd6Deu3fAZ92mlsfyG5E6MYe9TL3qH1VspgT9PRSVeiFKrSx8N JuZoNGT7uplx05t6OUGqxy/TQ023fYJ0d7k9+qtiRBQZaxAnST89lpsIsTBJSmsc cyWLd6N+OHBfRwIvhTRlmDv5O7DH5oDI04zZlaFTBt3Cx8PO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr8Hwa69PZpDRXuNCMII0SXiMW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTVmM2IxMmMtZmJjNS0z YjMwLWJhZGUtYTMxMjZkNzAyYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdZwIsKgvUXqYAPST/LG+cP47BtdqkuDr71S7u1zGkrgmV1HUd70TWU 9R7jb3MRsUzAIzg/iVu0FkSyqy0VrnyhsyV0Xu1BZjSbI60RL3XzJMhVSI2wqO+6 3bwZGfxyoo2x54KEiWWaKRsx4O95nnMiR6dBYJhEiDuLE+fan/YLTE3+NpK4v2fx xx1UEU79ctbVaOdS4tBkImLnJXHrmFWIlNGWy8uVM2t5Rn/P+QObuKsXvSkZvit0 szj5F5sfFeHTAQw14O85USta4nkzCjMIkUNfdb3jmd8SN6qCSiof0rn4p8Qm7NmL 2BPG+LNf2SwjzhdbNxxoN+GTeDH04I4= -----END CERTIFICATE-----Generated at Tue May 6 01:29:38 2025 by rpki-client