$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa File: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (raw, json) Hash identifier: 3xg6wT+z1MwF7dpho5YhGMhfC8hk0z3UXfRvc1G+Rxs= Subject key identifier: 08:5B:8F:A5:FE:8E:49:4B:94:20:BE:DD:E8:16:57:63:35:43:D5:05 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F43285848CC7B8C6D61EE057B43B72D00 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11342 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8c:6d:61:ee:05:7b:43:b7:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=c9d92a00-4b11-4cf9-bbbc-a8a87f24a8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:8e:a3:56:9a:3d:9c:41:fd:fc:e7:36:0a: f9:3a:d6:e1:4e:95:03:42:d2:1a:67:d9:ea:51:3b: 37:86:7a:2b:6b:97:51:27:19:b3:e9:40:34:41:41: 90:68:55:c5:63:75:47:5e:dc:71:8a:f5:02:2d:9a: 33:cd:01:54:9a:e9:9b:1e:0f:28:06:9d:69:5f:00: 85:2e:82:1d:7e:5a:05:16:3c:e9:20:86:1c:99:48: 6f:03:6b:0e:23:3c:64:e6:90:9f:89:64:b5:d9:38: c4:db:fc:e8:32:08:85:45:37:d8:88:3c:5d:b5:05: 70:6f:80:86:6c:2c:1b:aa:16:04:00:23:8a:e7:e8: 49:3e:ca:e7:6a:b2:b6:0e:0a:6e:db:8e:27:43:51: 4a:37:ec:da:10:82:6f:07:18:d4:7b:8c:7d:85:4d: bd:ec:b2:93:6d:21:e7:72:9c:44:bd:a3:38:88:83: f0:a3:82:bb:06:73:d4:19:58:1f:db:e3:45:d7:99: ab:8c:7e:37:d0:1c:0d:a7:7a:20:44:ab:1c:d7:1f: 55:78:46:91:a7:62:59:6b:fd:ca:36:6e:4b:36:4f: c1:a3:e7:4b:5a:10:d4:75:61:56:46:7f:94:52:03: d6:12:31:97:78:93:f5:df:47:2f:19:64:6a:54:8c: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5B:8F:A5:FE:8E:49:4B:94:20:BE:DD:E8:16:57:63:35:43:D5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/27626520-245c-33fb-bb99-5dc7d0821da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:92:c8:2a:92:1f:84:f2:2b:97:59:c9:d2:6a:d2:64:a1:e2: 51:48:78:28:f5:38:29:32:c9:0f:ca:49:5f:8a:aa:b1:dd:30: d9:49:5e:53:db:14:1f:83:d5:be:49:5a:4a:12:7d:13:6b:19: 45:e0:54:da:cb:2f:6c:7e:aa:69:35:17:8c:95:c7:23:03:8c: 2d:9f:7c:1e:a9:dd:58:65:c6:ca:07:23:9d:80:90:ce:7d:f0: 71:0d:4b:f1:9d:7d:d0:bc:b5:af:d2:73:19:ac:e5:c5:46:fa: 5a:07:9a:c3:54:1c:0b:62:dc:26:66:79:3f:6f:8e:03:60:3f: a5:a9:e4:b9:3e:9b:47:40:f1:72:21:7a:55:5c:78:ef:6f:0a: 7a:b8:5f:41:65:cb:21:fb:a9:cc:b4:22:31:69:ba:40:cb:ae: 91:43:80:14:a8:4a:2f:2d:ba:1e:96:6e:cd:74:4c:d2:6b:84: 25:b4:d4:32:81:b2:b6:47:df:76:38:5e:1b:17:29:fe:34:46: a5:62:c8:15:a8:7f:bf:d9:ee:e0:73:05:c0:6f:ae:1a:ac:42: 95:d0:9b:21:c6:f5:8c:49:b2:30:46:bc:4a:2c:ab:c9:7b:c8: f7:f9:84:cc:af:ba:b4:91:26:6a:2a:a8:37:05:ae:37:36:25: 92:b7:5c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4xtYe4Fe0O3LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YzlkOTJhMDAtNGIxMS00Y2Y5LWJiYmMtYThhODdmMjRhOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeOOo1aaPZxB/fznNgr5OtbhTpUDQtIaZ9nq UTs3hnora5dRJxmz6UA0QUGQaFXFY3VHXtxxivUCLZozzQFUmumbHg8oBp1pXwCF LoIdfloFFjzpIIYcmUhvA2sOIzxk5pCfiWS12TjE2/zoMgiFRTfYiDxdtQVwb4CG bCwbqhYEACOK5+hJPsrnarK2Dgpu244nQ1FKN+zaEIJvBxjUe4x9hU297LKTbSHn cpxEvaM4iIPwo4K7BnPUGVgf2+NF15mrjH430BwNp3ogRKsc1x9VeEaRp2JZa/3K Nm5LNk/Bo+dLWhDUdWFWRn+UUgPWEjGXeJP130cvGWRqVIwq/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhbj6X+jklLlCC+3egWV2M1Q9UFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjc2MjY1MjAtMjQ1Yy0z M2ZiLWJiOTktNWRjN2QwODIxZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6SyCqSH4TyK5dZydJq0mSh4lFIeCj1OCkyyQ/KSV+KqrHdMNlJXlPb FB+D1b5JWkoSfRNrGUXgVNrLL2x+qmk1F4yVxyMDjC2ffB6p3VhlxsoHI52AkM59 8HENS/GdfdC8ta/Scxms5cVG+loHmsNUHAti3CZmeT9vjgNgP6Wp5Lk+m0dA8XIh elVceO9vCnq4X0FlyyH7qcy0IjFpukDLrpFDgBSoSi8tuh6Wbs10TNJrhCW01DKB srZH33Y4XhsXKf40RqViyBWof7/Z7uBzBcBvrhqsQpXQmyHG9YxJsjBGvEosq8l7 yPf5hMyvurSRJmoqqDcFrjc2JZK3XA0= -----END CERTIFICATE-----Generated at Wed Apr 16 17:11:34 2025 by rpki-client