$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa File: d56026a1-cfac-3474-a6ad-48aea0c9a396.roa (raw, json) Hash identifier: ZRAYXo/PiFZIVmRAyRcWzBxWBqNXpRXHn2wY+ebGGN8= Subject key identifier: 3C:7C:E8:D0:5A:67:D4:8F:5D:44:A9:F2:A3:61:94:BB:14:28:EC:90 Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F432858497F09A7CAB2CF38810F098800 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 396261 IP address blocks: 128.163.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a7:ca:b2:cf:38:81:0f:09:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=cbe69138-8011-4600-8c3e-fa339a339aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:4e:53:e8:49:8b:79:d4:f0:db:50:d5:b4: 0b:62:a3:72:cb:e0:b2:27:23:05:cf:10:23:94:d5: cb:4f:51:64:ef:89:3c:89:d4:fe:58:78:cf:7d:a0: dd:5c:e0:7a:71:14:fe:1e:40:d0:9b:9f:fe:3e:f2: d2:91:ab:f5:66:14:f5:03:31:9c:24:c0:36:63:e5: de:46:85:d1:25:69:cd:c4:cc:ee:9a:46:09:43:d4: 2d:f4:c9:9d:4a:cf:9a:cf:a1:bd:72:b7:85:db:44: e6:9d:e9:8a:6f:ba:14:d8:ac:8e:fb:43:1c:b6:cc: b7:90:b8:f9:30:7e:44:73:fe:cb:f7:72:e0:03:07: bb:90:9f:0f:f0:ae:fd:75:72:27:50:57:4c:42:76: b6:6f:f2:53:54:fc:52:85:49:96:aa:a9:c7:63:79: 01:fd:6a:dc:bd:72:eb:37:b9:f3:a6:1e:b6:11:0e: 8e:f4:bb:a0:31:4a:c2:d6:8e:a4:98:09:a6:b1:fb: 65:57:73:68:bc:fb:c6:3a:52:33:35:68:37:11:83: 95:d1:83:20:05:32:9a:e0:69:d6:9d:ee:5b:44:8c: 0d:0d:f3:8c:24:d7:6f:63:b1:35:dc:a4:e3:d2:cd: 2a:97:89:fe:8d:05:16:c3:2e:df:d3:14:67:3e:20: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7C:E8:D0:5A:67:D4:8F:5D:44:A9:F2:A3:61:94:BB:14:28:EC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d9:60:4e:73:ec:a3:91:94:0c:1e:17:90:6f:bd:23:31:a3: 2c:b1:f9:94:1e:95:03:0e:fa:a8:0d:b9:91:98:f8:b4:13:c2: 5f:93:68:e9:55:53:12:2e:e6:6b:72:11:e3:75:b0:06:4b:3c: 50:26:1a:fb:67:11:a7:45:27:c3:d0:4d:21:34:37:71:04:15: d5:38:ba:31:0f:5c:a0:a8:19:e4:92:d7:fb:a6:42:1c:03:4f: 27:b6:5a:14:25:81:a0:d2:53:91:15:b0:5f:20:80:0c:bc:4c: 4a:f4:21:19:91:b0:43:e9:82:68:ac:d7:e9:dc:d9:f0:aa:16: 01:46:a6:7a:a0:91:02:03:3a:56:f5:c7:78:49:6c:7e:e1:ee: 8a:e3:d0:43:d4:fa:dc:a2:e3:ac:6f:c6:02:64:fb:88:ae:65: a7:05:e4:e8:b5:49:31:b9:fb:ff:63:6f:ee:46:b4:9d:ac:95: 95:00:4a:e9:47:2f:cc:77:f8:49:13:7f:54:b3:2a:b7:ec:c7: c8:47:fb:48:b4:3d:19:ca:ff:b3:01:7c:5c:b5:8d:32:9b:fe: 04:60:56:ec:9e:e8:e0:5f:39:9c:01:06:a2:8a:3b:bf:85:b9: 73:09:f9:ab:3e:cd:87:e7:49:59:e7:05:1a:e2:be:f1:01:0e: d6:1c:00:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CafKss84gQ8JiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk Y2JlNjkxMzgtODAxMS00NjAwLThjM2UtZmEzMzlhMzM5YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAketOU+hJi3nU8NtQ1bQLYqNyy+CyJyMFzxAj lNXLT1Fk74k8idT+WHjPfaDdXOB6cRT+HkDQm5/+PvLSkav1ZhT1AzGcJMA2Y+Xe RoXRJWnNxMzumkYJQ9Qt9MmdSs+az6G9creF20TmnemKb7oU2KyO+0Mctsy3kLj5 MH5Ec/7L93LgAwe7kJ8P8K79dXInUFdMQna2b/JTVPxShUmWqqnHY3kB/WrcvXLr N7nzph62EQ6O9LugMUrC1o6kmAmmsftlV3NovPvGOlIzNWg3EYOV0YMgBTKa4GnW ne5bRIwNDfOMJNdvY7E13KTj0s0ql4n+jQUWwy7f0xRnPiC/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx86NBaZ9SPXUSp8qNhlLsUKOyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDU2MDI2YTEtY2ZhYy0z NDc0LWE2YWQtNDhhZWEwYzlhMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgKPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ZYE5z7KORlAweF5BvvSMxoyyx+ZQelQMO+qgNuZGY+LQTwl+TaOlV UxIu5mtyEeN1sAZLPFAmGvtnEadFJ8PQTSE0N3EEFdU4ujEPXKCoGeSS1/umQhwD Tye2WhQlgaDSU5EVsF8ggAy8TEr0IRmRsEPpgmis1+nc2fCqFgFGpnqgkQIDOlb1 x3hJbH7h7orj0EPU+tyi46xvxgJk+4iuZacF5Oi1STG5+/9jb+5GtJ2slZUASulH L8x3+EkTf1SzKrfsx8hH+0i0PRnK/7MBfFy1jTKb/gRgVuye6OBfOZwBBqKKO7+F uXMJ+as+zYfnSVnnBRrivvEBDtYcALc= -----END CERTIFICATE-----Generated at Wed May 7 06:24:51 2025 by rpki-client