$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa File: 505caf77-22a6-383d-87ff-65fafc12e556.roa (raw, json) Hash identifier: Ay0hF/xyQCE/WsrXBoPaqi8lzDkPVvK30uTlY9beirw= Subject key identifier: B2:A9:BD:08:85:E1:2C:2F:DE:79:47:40:38:0B:9B:29:73:CB:0D:CF Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A3B7AF385A15F050A667EDC80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 138571 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f3:85:a1:5f:05:0a:66:7e:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=318ea832-ff46-4da0-9234-01ecbb81dc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:41:10:3a:a7:79:8f:4f:f5:16:ae:30:91: 4e:b9:66:2d:51:6e:83:9a:5a:df:6f:4e:85:57:c2: 6a:89:44:d0:fa:05:60:7c:9d:72:8d:d8:16:f4:61: 82:82:05:71:60:38:99:f8:0b:ad:cb:f1:5a:12:98: 79:e8:60:85:3a:bf:5a:82:b2:b6:9b:db:6e:33:60: ae:0d:af:ee:0a:fa:93:37:09:1e:ca:11:bf:71:83: 97:7f:12:44:15:68:d5:8f:9e:10:86:97:b8:f2:89: 03:e6:19:14:5d:1d:c5:e8:de:36:e7:f3:08:5d:19: 9e:54:b4:4b:0c:a3:d8:9b:dc:2b:4c:11:b7:c9:b1: a6:b4:02:1d:e3:5f:7b:3b:38:21:9f:27:e5:76:b3: e4:27:21:6a:25:21:7b:25:7f:80:e6:46:87:55:83: b4:7b:32:d8:03:bd:8a:fb:27:2f:9b:52:24:93:d5: 6a:b4:f3:a2:b9:dd:9c:55:99:73:c3:5c:f7:5c:63: c7:87:4c:12:37:ab:55:ba:51:ab:1d:46:5f:a1:00: 69:58:b3:56:10:e1:64:75:df:24:bc:ae:e1:4e:44: 2d:28:ee:77:81:69:a3:de:56:c0:39:5f:f4:cc:4d: c4:41:91:22:fc:ac:15:52:c7:01:4c:43:dc:fa:29: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:BD:08:85:E1:2C:2F:DE:79:47:40:38:0B:9B:29:73:CB:0D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:30:17:a1:f3:c6:ea:35:12:e2:b5:d1:e3:fa:05:dc:bd:20: 64:8b:20:5e:20:86:fe:4d:8e:61:16:13:fe:6d:03:03:28:a9: 82:68:a7:19:75:96:e1:80:f2:6e:29:26:ce:cf:26:b3:06:fd: 0f:48:b7:cf:8f:57:b8:a1:db:94:a5:51:bf:4d:b4:9c:8c:31: 71:f5:82:89:6c:bd:5a:fc:47:9f:d5:00:81:f3:0f:e9:ae:74: fc:8c:b1:1d:2a:4e:3c:c1:3a:e8:ef:00:c6:14:6f:ca:2f:5f: b9:45:af:11:98:dd:5c:6f:15:e6:99:23:81:e7:e2:66:5e:45: 4c:c1:1b:5c:42:06:1d:52:e1:9a:91:b9:da:77:6e:5c:04:d0: 39:00:3c:ad:89:23:19:d5:af:19:07:4c:e0:2e:9b:0f:63:3e: 40:7e:d5:8d:e3:5a:69:e2:5a:16:42:50:20:a8:02:b5:23:ff: 3d:2f:64:f4:dc:a9:00:6b:be:7f:00:02:6d:a9:c9:7d:c7:29: b6:7a:4a:5c:5e:8e:66:be:a3:ad:99:11:d3:58:98:1e:c5:be: ea:80:36:ae:47:18:33:38:8a:88:13:3a:d7:66:b7:cf:9a:06: 6b:1b:ba:a7:f7:ff:70:90:bc:d1:34:0f:17:82:fc:16:1c:25: ad:e6:43:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evOFoV8FCmZ+3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MzE4ZWE4MzItZmY0Ni00ZGEwLTkyMzQtMDFlY2JiODFkYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmypBEDqneY9P9RauMJFOuWYtUW6Dmlrfb06F V8JqiUTQ+gVgfJ1yjdgW9GGCggVxYDiZ+Auty/FaEph56GCFOr9agrK2m9tuM2Cu Da/uCvqTNwkeyhG/cYOXfxJEFWjVj54Qhpe48okD5hkUXR3F6N425/MIXRmeVLRL DKPYm9wrTBG3ybGmtAId4197OzghnyfldrPkJyFqJSF7JX+A5kaHVYO0ezLYA72K +ycvm1Ikk9VqtPOiud2cVZlzw1z3XGPHh0wSN6tVulGrHUZfoQBpWLNWEOFkdd8k vK7hTkQtKO53gWmj3lbAOV/0zE3EQZEi/KwVUscBTEPc+injLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKpvQiF4Swv3nlHQDgLmylzyw3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTA1Y2FmNzctMjJhNi0z ODNkLTg3ZmYtNjVmYWZjMTJlNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIwF6Hzxuo1EuK10eP6Bdy9IGSLIF4ghv5NjmEWE/5tAwMoqYJopxl1 luGA8m4pJs7PJrMG/Q9It8+PV7ih25SlUb9NtJyMMXH1golsvVr8R5/VAIHzD+mu dPyMsR0qTjzBOujvAMYUb8ovX7lFrxGY3VxvFeaZI4Hn4mZeRUzBG1xCBh1S4ZqR udp3blwE0DkAPK2JIxnVrxkHTOAumw9jPkB+1Y3jWmniWhZCUCCoArUj/z0vZPTc qQBrvn8AAm2pyX3HKbZ6Slxejma+o62ZEdNYmB7FvuqANq5HGDM4iogTOtdmt8+a Bmsbuqf3/3CQvNE0DxeC/BYcJa3mQ2c= -----END CERTIFICATE-----Generated at Tue Jul 1 19:03:09 2025 by rpki-client