$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa File: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (raw, json) Hash identifier: uwKRb6/693deUrPCOhw9F0NORgXWuDY2ELRlNdf44Ws= Subject key identifier: 1F:9D:B5:8E:B6:A8:66:62:B1:1F:CB:DC:05:D9:75:06:4F:46:2A:26 Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F43285849A089D1E5DB54C091D7161850 Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 31829 IP address blocks: 199.127.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d1:e5:db:54:c0:91:d7:16:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=4adeaccd-4687-48b9-a22d-6c51c235d290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:8a:d3:34:dc:65:d3:b2:5b:e1:d5:24:af: 5f:99:f2:ee:ed:aa:9b:e0:8c:f9:b9:cc:e6:92:a6: 01:b2:e9:0f:93:d1:0e:65:4b:04:0f:6a:fa:bb:e3: af:60:51:00:c6:2d:85:31:f8:ce:5e:dd:66:5e:51: 76:14:e9:84:c6:c2:22:55:2d:b6:4a:9e:7c:1e:43: d1:e0:37:13:b3:f7:cc:68:85:68:f9:7b:6c:94:9b: 99:b7:e0:bb:e8:b7:de:83:0d:39:b8:19:0b:43:8c: d3:87:e4:17:63:b0:b7:a7:bf:33:51:23:21:5e:e3: ba:65:bd:cf:e7:4d:58:be:22:49:6c:c6:d4:cf:4c: df:d7:1c:d0:ee:65:21:5f:16:69:6c:ac:78:81:41: be:74:d9:50:2a:40:6f:66:95:a9:64:9e:eb:3a:5e: ac:5d:d1:5f:99:55:77:3c:b3:e0:25:90:fa:7e:45: 1a:74:41:f7:df:63:0e:22:d9:69:01:59:46:4e:a4: 88:44:e6:15:55:7f:85:38:d8:ee:59:dc:37:0e:da: 09:36:e5:84:d9:ae:af:98:95:59:a4:3e:13:69:a0: 42:e3:59:d9:0d:d0:ae:6d:61:3d:ce:4b:da:01:a2: 12:38:8b:6d:9b:8a:62:32:0a:d7:86:08:ac:8f:ee: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:B5:8E:B6:A8:66:62:B1:1F:CB:DC:05:D9:75:06:4F:46:2A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1f:b0:dd:4d:84:b8:e6:ad:11:fe:12:0f:b4:70:e0:db:fa: 94:c1:4f:26:f5:68:f0:85:2f:f7:70:c2:76:4a:8e:40:a9:4a: f3:a4:7f:86:24:e6:e8:ea:f1:5d:10:34:fc:e0:dd:f3:26:a5: b9:14:62:8d:32:10:a1:1a:ad:6a:02:b0:76:80:d3:7f:e3:a5: d0:83:c0:18:bc:1d:d9:ab:2b:b6:08:e8:32:6a:2a:fa:57:26: f3:7d:11:73:86:13:42:d1:b7:17:f7:46:93:96:41:b4:ca:53: dd:2c:06:d9:ae:93:8a:38:42:99:54:72:21:eb:ae:c4:82:ea: 9d:04:62:4e:9f:00:19:f6:61:c0:39:91:6b:91:2a:97:72:c5: 42:83:65:44:44:05:3a:cc:b1:f3:6a:bd:e1:01:ce:0c:f5:f4: e5:50:8d:8f:97:f4:bf:2c:14:ad:b1:d9:ba:2d:0a:95:d8:24: 1d:d8:0f:0e:ed:61:da:ed:e0:55:49:76:87:60:6b:56:1e:19: 04:53:91:14:8e:85:9e:a2:90:3e:09:17:48:e9:8f:2c:40:d1: 83:9a:cc:bf:91:98:4f:d0:06:21:ca:f4:4a:dc:a6:7e:5f:e4: d7:dc:c5:a7:be:04:e1:05:9a:27:36:91:21:dc:bf:fc:de:4d: 95:94:4b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidHl21TAkdcWGFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NGFkZWFjY2QtNDY4Ny00OGI5LWEyMmQtNmM1MWMyMzVkMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5WK0zTcZdOyW+HVJK9fmfLu7aqb4Iz5uczm kqYBsukPk9EOZUsED2r6u+OvYFEAxi2FMfjOXt1mXlF2FOmExsIiVS22Sp58HkPR 4DcTs/fMaIVo+XtslJuZt+C76Lfegw05uBkLQ4zTh+QXY7C3p78zUSMhXuO6Zb3P 501YviJJbMbUz0zf1xzQ7mUhXxZpbKx4gUG+dNlQKkBvZpWpZJ7rOl6sXdFfmVV3 PLPgJZD6fkUadEH332MOItlpAVlGTqSIROYVVX+FONjuWdw3DtoJNuWE2a6vmJVZ pD4TaaBC41nZDdCubWE9zkvaAaISOIttm4piMgrXhgisj+4TRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+dtY62qGZisR/L3AXZdQZPRiomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvYWI3ZTMyZDctNTFkOS0z MDQ1LTkyZDctZTc0NmJmNmJmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwfsN1NhLjmrRH+Eg+0cODb+pTBTyb1aPCFL/dwwnZKjkCpSvOkf4Yk 5ujq8V0QNPzg3fMmpbkUYo0yEKEarWoCsHaA03/jpdCDwBi8HdmrK7YI6DJqKvpX JvN9EXOGE0LRtxf3RpOWQbTKU90sBtmuk4o4QplUciHrrsSC6p0EYk6fABn2YcA5 kWuRKpdyxUKDZUREBTrMsfNqveEBzgz19OVQjY+X9L8sFK2x2botCpXYJB3YDw7t Ydrt4FVJdodga1YeGQRTkRSOhZ6ikD4JF0jpjyxA0YOazL+RmE/QBiHK9Ercpn5f 5Nfcxae+BOEFmic2kSHcv/zeTZWUS0s= -----END CERTIFICATE-----Generated at Mon May 12 10:56:12 2025 by rpki-client