$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa File: 8edc1a27-c324-3d26-be3c-15679ecee128.roa (raw, json) Hash identifier: T/x9nYWIagASCQVuPYaTyybyOiJen1T22ggwA86u8Yc= Subject key identifier: AE:A0:ED:33:0E:97:BF:2D:DD:2B:8F:52:08:78:D0:56:63:88:01:E0 Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Certificate serial: 010D0C9F432858498339F66A6B6E62B8E6A245C0 Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 398888 IP address blocks: 128.254.220.0/24 maxlen: 24 163.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f6:6a:6b:6e:62:b8:e6:a2:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=29813842-6fd1-496a-9c62-83d03a935908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:91:3f:06:75:85:a8:3e:5b:4a:f6:34:e9: 05:90:e7:5e:31:87:79:ca:64:5f:11:41:62:14:72: fc:b8:07:6a:5b:13:c6:46:01:6c:5d:24:fa:a4:22: 13:aa:d3:cb:44:55:4b:20:5d:e1:32:44:fe:9a:ee: 6d:b2:b1:ab:ac:ba:ba:6e:85:d5:ab:2b:33:e5:71: 13:20:65:1b:d9:67:71:98:fe:54:4d:bc:c4:88:8f: fa:92:a3:d4:76:2e:e1:9a:23:42:a5:58:6a:32:6b: 67:6c:c6:db:11:99:29:d4:58:25:99:cd:d0:fa:8d: 28:9b:f5:84:cf:87:91:56:5c:52:d2:a7:74:b2:99: f2:b2:6e:e5:c5:eb:74:bf:9a:e5:bf:46:11:4d:cf: 01:37:1e:e7:f0:13:84:b9:99:b0:93:4f:00:1e:34: 33:27:c9:74:ab:08:eb:de:2f:41:70:0f:0c:6a:7f: a2:ba:9d:2e:4c:fb:ce:dd:a8:0e:85:a8:00:28:3e: b0:12:f5:01:83:dc:30:82:c6:fc:83:d0:19:0e:8f: 0a:58:e1:48:71:2d:12:0e:4e:48:60:e6:9f:cc:00: b1:49:63:3c:e9:f8:de:03:32:5f:49:cc:46:a1:4c: bf:ef:b0:60:31:63:c1:6a:ce:49:60:db:43:cc:0c: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:ED:33:0E:97:BF:2D:DD:2B:8F:52:08:78:D0:56:63:88:01:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl X509v3 Authority Key Identifier: keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/24 163.123.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6e:f4:28:c2:d8:d2:bd:29:42:88:55:a4:3c:ee:27:38:bf: 07:81:85:2b:85:03:8e:ca:6b:1c:5a:64:d6:af:99:57:9d:72: 12:80:b3:86:fc:d1:31:bc:57:a3:98:5a:bd:ef:af:7d:39:97: b7:88:c1:01:8b:85:1f:c1:aa:b3:40:a3:16:aa:ad:85:de:59: 83:50:ae:83:1f:fb:77:43:bf:c5:c0:84:34:b3:bd:84:e1:af: 18:38:b3:3f:96:44:bd:17:8f:81:e6:e3:cd:8f:f4:f5:51:32: 2d:fa:f6:65:1a:af:9e:12:55:e6:f3:db:e3:d8:78:22:3c:4e: 7d:f7:77:f9:4f:38:1f:46:3e:ee:ec:5a:0d:e6:c1:14:f3:55: 6e:61:10:28:35:9b:e0:9c:91:c4:17:fb:b7:b4:c1:5d:e6:f4: 64:94:74:2f:27:02:df:58:3b:f0:55:dc:de:88:5b:ae:8d:24: 79:87:49:9c:0e:43:38:5e:a6:db:ee:fc:a3:99:c8:6f:e0:ec: bd:35:e3:13:d1:65:52:21:cd:3c:6a:00:9a:1a:bb:6a:33:a4: 41:70:79:08:6d:df:bf:03:d5:0f:4f:8d:0d:99:f3:27:7a:7c: 77:23:97:39:0d:71:51:3f:15:82:65:74:c2:4c:64:aa:68:40: 03:a2:dc:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmDOfZqa25iuOaiRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMz MjNkMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk Mjk4MTM4NDItNmZkMS00OTZhLTljNjItODNkMDNhOTM1OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jSRPwZ1hag+W0r2NOkFkOdeMYd5ymRfEUFi FHL8uAdqWxPGRgFsXST6pCITqtPLRFVLIF3hMkT+mu5tsrGrrLq6boXVqysz5XET IGUb2WdxmP5UTbzEiI/6kqPUdi7hmiNCpVhqMmtnbMbbEZkp1Fglmc3Q+o0om/WE z4eRVlxS0qd0spnysm7lxet0v5rlv0YRTc8BNx7n8BOEuZmwk08AHjQzJ8l0qwjr 3i9BcA8Man+iup0uTPvO3agOhagAKD6wEvUBg9wwgsb8g9AZDo8KWOFIcS0SDk5I YOafzACxSWM86fjeAzJfScxGoUy/77BgMWPBas5JYNtDzAxr/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK6g7TMOl78t3SuPUgh40FZjiAHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Rl NjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvOGVkYzFhMjctYzMyNC0z ZDI2LWJlM2MtMTU2NzllY2VlMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkZTY4M2EtMDRiMS00ZTFjLTk0 YzUtY2I0NWU5ODMzMjNkL2QzZGU2ODNhLTA0YjEtNGUxYy05NGM1LWNiNDVlOTgz MzIzZC5jcmwwHwYDVR0jBBgwFoAUIf0rCB2hYHaj1ZCVi5hdPuCb8aQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1 ZTk4MzMyM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7cAwQA o3vYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGhu9CjC2NK9KUKIVaQ87ic4vweBhSuFA47KaxxaZNavmVed chKAs4b80TG8V6OYWr3vr305l7eIwQGLhR/BqrNAoxaqrYXeWYNQroMf+3dDv8XA hDSzvYThrxg4sz+WRL0Xj4Hm482P9PVRMi369mUar54SVebz2+PYeCI8Tn33d/lP OB9GPu7sWg3mwRTzVW5hECg1m+CckcQX+7e0wV3m9GSUdC8nAt9YO/BV3N6IW66N JHmHSZwOQzheptvu/KOZyG/g7L014xPRZVIhzTxqAJoau2ozpEFweQht378D1Q9P jQ2Z8yd6fHcjlzkNcVE/FYJldMJMZKpoQAOi3Ao= -----END CERTIFICATE-----Generated at Wed May 7 17:34:32 2025 by rpki-client