$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96506768-bac2-3fe5-bb94-963345efe5a3.roa File: 96506768-bac2-3fe5-bb94-963345efe5a3.roa (raw, json) Hash identifier: aloHz9nRFCuOPtNukqF6ksCCbcTGrLPBUAK+vnFmiUA= Subject key identifier: 41:84:C6:88:8B:C3:6D:86:34:5B:A3:E0:1C:DE:74:86:29:28:89:5C Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F43285849B2AF5D1D17B9AA6100373CD8 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96506768-bac2-3fe5-bb94-963345efe5a3.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 150436 IP address blocks: 128.1.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:5d:1d:17:b9:aa:61:00:37:3c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=88d23c9b-7db0-4367-bc31-fafddf638f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:e2:dd:24:5c:0e:2d:22:3b:ce:2b:0c:eb: 23:bc:b7:4e:f0:31:39:d2:4a:00:87:7c:9a:ee:e0: ce:b0:b0:d9:c2:4d:09:9c:66:c4:fc:ac:e3:b7:41: 7b:fe:57:fc:f8:91:40:21:e7:96:3e:e6:04:33:e7: 78:86:41:d1:de:e0:f3:bf:d5:a7:60:f2:22:dc:55: e1:0e:6d:b5:86:d3:5e:23:22:4c:ef:c5:c5:84:c9: cd:f3:97:18:06:33:59:c4:c9:9a:51:b3:fb:0c:82: 68:67:2e:f6:b6:67:f4:5a:35:60:e4:e9:16:80:05: 4d:64:9d:1f:3f:a8:83:4a:40:f8:ba:6a:2d:94:7a: 90:47:bc:c0:0e:90:9b:df:c3:94:f5:0d:75:8e:26: 3a:b3:39:26:88:f8:ab:c1:39:4a:9d:f5:54:55:26: 77:d7:1a:be:ed:03:17:66:a5:34:72:59:3f:23:1c: a5:8f:e3:03:6b:69:60:fd:2c:f7:8e:f7:97:01:67: 95:be:54:be:ae:b5:ed:af:fc:64:74:4a:b0:3d:c3: 95:a1:6f:0f:4c:9f:bd:c1:24:c3:60:4b:ae:22:3d: ca:71:97:08:c2:e5:b9:92:c0:63:80:02:ce:b3:e9: 7e:c5:73:52:3c:6b:50:10:bf:89:fa:de:b3:d4:88: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:84:C6:88:8B:C3:6D:86:34:5B:A3:E0:1C:DE:74:86:29:28:89:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96506768-bac2-3fe5-bb94-963345efe5a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ce:35:ad:8f:62:8a:45:2e:f9:12:09:ad:84:14:2c:01:92: ae:ff:f6:9e:f8:13:24:31:ab:13:e9:26:8b:54:7c:c6:25:2f: a8:df:00:3d:0b:4d:ee:ca:bc:7e:06:af:28:08:46:71:da:94: c7:cc:9b:50:75:da:d2:fb:f2:87:d6:f6:14:86:4c:32:3d:4a: 81:eb:33:a6:65:dd:e0:27:cc:d5:93:5c:20:9a:ce:c7:30:37: 89:63:09:20:55:fd:07:cb:08:a5:67:f3:1c:0e:3f:7a:ae:93: 08:1c:a4:a1:78:2b:46:10:5d:9e:14:a2:91:e0:11:29:54:d1: 15:60:a1:f4:ce:19:5b:60:1a:2b:fa:2e:f4:64:96:65:af:69: 6e:5a:e6:d6:2c:19:fc:39:88:fd:c9:24:c7:cb:94:f4:f7:57: 3e:02:68:09:3a:0a:bf:2c:2f:04:3d:ae:20:1f:59:5a:16:8e: 54:aa:3d:9d:0a:b0:c4:11:a6:96:a3:92:d4:c6:11:3d:41:91: 5b:26:02:8a:92:55:c5:9a:62:c2:67:08:eb:c2:f7:7f:2e:9b: 83:b6:a8:15:55:8b:28:3e:47:68:ab:5b:44:2e:b5:42:cb:e6: b6:a5:8f:f0:50:36:5e:d8:cf:0d:c1:6b:d0:af:88:84:a0:95: a8:02:61:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr10dF7mqYQA3PNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk ODhkMjNjOWItN2RiMC00MzY3LWJjMzEtZmFmZGRmNjM4ZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWTi3SRcDi0iO84rDOsjvLdO8DE50koAh3ya 7uDOsLDZwk0JnGbE/Kzjt0F7/lf8+JFAIeeWPuYEM+d4hkHR3uDzv9WnYPIi3FXh Dm21htNeIyJM78XFhMnN85cYBjNZxMmaUbP7DIJoZy72tmf0WjVg5OkWgAVNZJ0f P6iDSkD4umotlHqQR7zADpCb38OU9Q11jiY6szkmiPirwTlKnfVUVSZ31xq+7QMX ZqU0clk/Ixylj+MDa2lg/Sz3jveXAWeVvlS+rrXtr/xkdEqwPcOVoW8PTJ+9wSTD YEuuIj3KcZcIwuW5ksBjgALOs+l+xXNSPGtQEL+J+t6z1IhDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGExoiLw22GNFuj4BzedIYpKIlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTY1MDY3NjgtYmFjMi0z ZmU1LWJiOTQtOTYzMzQ1ZWZlNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7ONa2PYopFLvkSCa2EFCwBkq7/9p74EyQxqxPpJotUfMYlL6jfAD0L Te7KvH4GrygIRnHalMfMm1B12tL78ofW9hSGTDI9SoHrM6Zl3eAnzNWTXCCazscw N4ljCSBV/QfLCKVn8xwOP3qukwgcpKF4K0YQXZ4UopHgESlU0RVgofTOGVtgGiv6 LvRklmWvaW5a5tYsGfw5iP3JJMfLlPT3Vz4CaAk6Cr8sLwQ9riAfWVoWjlSqPZ0K sMQRppajktTGET1BkVsmAoqSVcWaYsJnCOvC938um4O2qBVViyg+R2irW0QutULL 5ralj/BQNl7Yzw3Ba9CviISglagCYVM= -----END CERTIFICATE-----Generated at Sun May 11 10:39:51 2025 by rpki-client