$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa File: 942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json) Hash identifier: 9Pmz7XXE2SMu3KceOpnRKruCgqJ+48OSKB9okXukX9o= Subject key identifier: 6D:85:EE:FC:86:50:0F:3A:15:90:83:1A:C9:50:F9:F7:EB:5E:29:0F Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F432858495C24444A418CA2A1255D2FC0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 393249 IP address blocks: 128.189.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:44:4a:41:8c:a2:a1:25:5d:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=8e86c95a-4015-4b42-9d9b-879ecd118318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:4c:31:ee:cc:ee:d2:41:43:d9:b6:81:e8: 90:c6:51:3b:10:8c:37:08:1c:b8:a5:c3:f3:62:55: 9d:70:7f:22:a1:ad:f2:c4:60:15:e9:43:34:86:08: f9:b9:72:0a:0a:e8:4c:1f:f8:90:aa:a2:35:3e:0b: 01:43:0b:9d:ba:1f:35:be:73:ed:27:7c:19:1c:41: 7a:b9:a5:6f:cf:1d:be:98:19:6b:2f:40:7d:a3:dc: 5f:ba:56:5f:4b:59:97:a1:61:4f:15:cb:7e:28:37: ee:f9:0a:04:29:70:ed:56:79:19:84:7d:4f:28:1d: 00:43:fa:2b:f1:5c:c0:09:3c:57:1f:71:cd:1c:b9: f1:ba:72:0d:a9:a8:5a:c6:8a:cb:83:6b:18:f2:07: e5:ea:39:bb:37:57:a7:29:e4:c0:77:fa:52:25:a4: 2c:a8:ae:d6:06:10:f6:92:ee:cd:45:bc:08:e5:5c: 28:6e:76:dc:d6:cb:35:bc:3f:e2:74:79:81:a1:39: b9:99:d3:e8:c5:7f:48:e1:3f:60:b8:f6:94:ba:3e: ee:b2:ea:bc:eb:34:21:54:dd:fb:2e:f9:02:b0:76: b1:13:99:46:7e:66:bf:01:d3:9a:8f:00:c9:3a:c3: 66:0b:a1:fe:e0:9c:c2:39:99:a6:77:bc:49:ea:8c: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:85:EE:FC:86:50:0F:3A:15:90:83:1A:C9:50:F9:F7:EB:5E:29:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:93:ed:11:bf:45:e1:c4:67:25:0a:55:21:6d:3c:96:4d:1e: a2:b8:9c:f3:a9:e6:79:cb:c7:4a:a1:c2:b9:0f:37:73:7a:8b: 22:8b:54:9e:10:5a:fc:92:b0:d2:29:fe:db:67:9d:c9:27:d8: 31:73:f6:e7:8d:89:b8:5d:9e:e9:e8:e7:59:4d:14:23:ca:a0: fa:56:42:47:61:1d:c5:d8:2c:a0:16:c9:73:24:9a:e0:95:06: 57:e0:5c:4b:b7:c6:e2:69:85:a3:96:44:fb:a7:fb:42:0b:b1: da:91:97:9e:85:16:f9:80:82:0b:6a:7e:08:37:eb:75:e8:f0: 30:e7:4b:88:89:bd:3b:dc:7a:66:87:09:3b:53:d3:8b:b7:1b: 79:a9:aa:57:b0:cf:1b:fa:93:44:98:5b:85:08:ef:5f:be:f3: 91:a1:06:ce:31:89:e4:14:e8:23:d2:1e:84:15:e3:62:37:24: cf:28:5e:26:20:3b:ca:34:b0:35:b3:e6:6d:95:dd:bb:9d:a1: 76:92:54:6e:67:83:78:85:30:55:98:e6:a4:fb:71:55:6c:bd: 7d:bf:3f:94:aa:94:8e:3e:ff:e9:56:9f:0f:02:c2:e2:4d:8d: ac:84:42:87:c2:c9:cd:57:ce:d4:4b:3c:7b:ce:f7:05:25:a9: 86:d2:e0:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJERKQYyioSVdL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OGU4NmM5NWEtNDAxNS00YjQyLTlkOWItODc5ZWNkMTE4MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwJMMe7M7tJBQ9m2geiQxlE7EIw3CBy4pcPz YlWdcH8ioa3yxGAV6UM0hgj5uXIKCuhMH/iQqqI1PgsBQwuduh81vnPtJ3wZHEF6 uaVvzx2+mBlrL0B9o9xfulZfS1mXoWFPFct+KDfu+QoEKXDtVnkZhH1PKB0AQ/or 8VzACTxXH3HNHLnxunINqahaxorLg2sY8gfl6jm7N1enKeTAd/pSJaQsqK7WBhD2 ku7NRbwI5Vwobnbc1ss1vD/idHmBoTm5mdPoxX9I4T9guPaUuj7usuq86zQhVN37 LvkCsHaxE5lGfma/AdOajwDJOsNmC6H+4JzCOZmmd7xJ6ozD3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2F7vyGUA86FZCDGslQ+ffrXikPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTQyZWM0MjUtMjI1OS0z Y2Q0LTk3ZjEtZjdlZmJjYjRmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuT7RG/ReHEZyUKVSFtPJZNHqK4nPOp5nnLx0qhwrkPN3N6iyKLVJ4Q WvySsNIp/ttnnckn2DFz9ueNibhdnuno51lNFCPKoPpWQkdhHcXYLKAWyXMkmuCV BlfgXEu3xuJphaOWRPun+0ILsdqRl56FFvmAggtqfgg363Xo8DDnS4iJvTvcemaH CTtT04u3G3mpqlewzxv6k0SYW4UI71++85GhBs4xieQU6CPSHoQV42I3JM8oXiYg O8o0sDWz5m2V3budoXaSVG5ng3iFMFWY5qT7cVVsvX2/P5SqlI4+/+lWnw8CwuJN jayEQofCyc1XztRLPHvO9wUlqYbS4JU= -----END CERTIFICATE-----Generated at Tue May 6 18:24:35 2025 by rpki-client