$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: a3HMZsx/To2RQpkMKzG9ffAnUN/VlmnOhL6CrOaFQiw= Subject key identifier: 7E:2B:C1:BC:61:F3:03:1D:96:A2:89:AF:58:4B:E5:C7:72:6B:79:12 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F43285849C79F6519C3C7E825E3C13280 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:65:19:c3:c7:e8:25:e3:c1:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=a0954107-8f11-4668-86c5-244988d70258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:67:ae:59:06:68:bd:2a:cd:5a:87:ff:59: 79:2a:dd:7c:3c:24:87:c4:b5:a9:82:77:33:a8:5d: 28:ce:79:6b:8b:95:06:02:92:c5:66:97:65:aa:19: 8c:09:72:51:66:1f:ec:8e:26:06:4d:a0:5a:ed:32: 54:bb:f4:8a:69:87:66:79:08:a4:b6:96:be:52:80: f8:fe:65:8b:31:1a:c5:16:a6:31:32:08:e2:92:e9: 27:f1:d6:d0:ca:90:a6:f9:ae:e5:c9:9b:24:ad:60: 83:fe:0a:5f:54:fa:3d:d0:83:ca:8f:3f:95:f4:9d: d9:cf:46:d3:cb:44:0d:2c:0a:63:dc:3c:ac:35:a1: 70:cb:26:2c:23:5f:19:3c:8f:0d:2c:77:64:cb:ac: 9c:d5:f4:06:45:22:cc:36:9c:03:94:fb:58:a6:d2: 5d:d1:43:02:37:82:08:b5:f6:53:7b:0f:22:4a:e5: e3:de:19:0f:b8:de:26:e0:11:f0:01:19:8d:f3:05: 25:8e:b3:62:3b:d7:a1:be:f9:6a:77:63:04:35:49: 8c:a0:8b:fc:c7:66:ba:91:ff:45:28:43:ed:a3:b6: 7b:1e:be:61:33:fe:e2:bc:44:da:ea:a4:08:d5:e5: e4:62:6c:5d:86:c5:40:5d:fb:dd:98:99:5e:ef:5f: 4e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:C1:BC:61:F3:03:1D:96:A2:89:AF:58:4B:E5:C7:72:6B:79:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:51:d1:a7:de:0b:83:0a:35:72:b6:ab:47:82:e8:78:5a:cb: 86:a6:08:a4:b4:8d:b3:8f:38:f4:d4:42:3c:05:fe:68:91:21: 3e:48:fe:14:83:16:8c:fc:92:47:cb:0e:8a:ca:9e:90:93:6c: 17:91:c3:f0:ca:57:e2:aa:ce:c8:c5:bd:d8:62:63:46:cc:a4: e1:d0:da:f4:e7:af:01:cb:0f:78:0f:e7:dc:e2:9f:ee:f0:a7: f9:d7:b8:9b:98:aa:28:dc:2c:f1:90:93:e7:6e:07:e8:04:0e: 21:9e:17:be:07:94:54:0a:65:a8:bb:6d:0e:e8:ae:7b:9e:84: 56:dc:23:7c:84:08:41:c5:72:1d:e2:8e:b2:b0:2e:e8:58:da: b0:7c:1d:48:18:ed:e4:23:07:ce:1a:a6:d8:d3:78:bf:64:86: 15:cd:86:06:c8:38:ff:d7:ce:ed:c4:2b:d7:00:67:68:67:55: 9e:36:f4:2d:f4:52:4d:df:22:a1:2e:4d:14:75:27:04:a3:68: ef:0d:34:36:54:6d:b2:c3:ec:4a:0f:e4:5f:c1:03:1f:c1:5b: c1:47:ce:33:8d:48:22:11:ad:b8:38:81:c5:cf:56:1a:99:21: 25:ea:7c:e9:bc:c0:72:f8:cf:2c:73:9c:8f:a0:34:21:39:36: 94:4e:e4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2UZw8foJePBMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YTA5NTQxMDctOGYxMS00NjY4LTg2YzUtMjQ0OTg4ZDcwMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRRnrlkGaL0qzVqH/1l5Kt18PCSHxLWpgncz qF0oznlri5UGApLFZpdlqhmMCXJRZh/sjiYGTaBa7TJUu/SKaYdmeQiktpa+UoD4 /mWLMRrFFqYxMgjikukn8dbQypCm+a7lyZskrWCD/gpfVPo90IPKjz+V9J3Zz0bT y0QNLApj3DysNaFwyyYsI18ZPI8NLHdky6yc1fQGRSLMNpwDlPtYptJd0UMCN4II tfZTew8iSuXj3hkPuN4m4BHwARmN8wUljrNiO9ehvvlqd2MENUmMoIv8x2a6kf9F KEPto7Z7Hr5hM/7ivETa6qQI1eXkYmxdhsVAXfvdmJle719ODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4rwbxh8wMdlqKJr1hL5cdya3kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNR0afeC4MKNXK2q0eC6Hhay4amCKS0jbOPOPTUQjwF/miRIT5I/hSD Foz8kkfLDorKnpCTbBeRw/DKV+KqzsjFvdhiY0bMpOHQ2vTnrwHLD3gP59zin+7w p/nXuJuYqijcLPGQk+duB+gEDiGeF74HlFQKZai7bQ7ornuehFbcI3yECEHFch3i jrKwLuhY2rB8HUgY7eQjB84aptjTeL9khhXNhgbIOP/Xzu3EK9cAZ2hnVZ429C30 Uk3fIqEuTRR1JwSjaO8NNDZUbbLD7EoP5F/BAx/BW8FHzjONSCIRrbg4gcXPVhqZ ISXqfOm8wHL4zyxznI+gNCE5NpRO5Dc= -----END CERTIFICATE-----Generated at Thu May 8 09:57:52 2025 by rpki-client