$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/28ce9b56-aa46-34b3-b7dd-ecd6e0379266.roa File: 28ce9b56-aa46-34b3-b7dd-ecd6e0379266.roa (raw, json) Hash identifier: NYBOW7s+63BsDOHwz05xoAvRSX4zutSgZ/VCWXiRl8k= Subject key identifier: A1:A5:F7:00:79:ED:1F:A8:3D:30:56:3A:44:3B:40:85:A4:50:21:A4 Certificate issuer: /CN=64c213c7-4c1a-4187-a879-90c9062e05d4 Certificate serial: 010D0C9F43285848D6410BC9BE64A5A901F21B3C Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/28ce9b56-aa46-34b3-b7dd-ecd6e0379266.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 1798 IP address blocks: 198.232.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0b:c9:be:64:a5:a9:01:f2:1b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=e80a28cc-4381-41e0-82a5-d7dce0de6517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:aa:8f:f4:7e:36:c9:0c:5f:ed:7e:79:9c: bb:c2:c3:ad:7c:32:9d:0b:fa:4c:48:c1:72:42:48: ac:f1:fa:5c:04:1b:3a:63:bb:a4:93:5d:a1:a4:f0: 20:21:19:f7:a9:1b:4a:ad:a1:fc:be:ff:3a:94:1f: de:bf:d3:99:db:07:c1:a3:b4:f4:cd:57:22:ee:ee: d7:3a:ad:12:53:27:7c:de:ea:10:41:34:de:23:2b: 17:74:d0:59:04:79:4f:c0:ce:5c:d7:2a:f9:5e:81: 0c:9d:37:ab:80:35:b0:96:cf:89:c3:46:aa:30:2d: b8:55:a5:72:7e:d7:1f:5c:e5:f4:61:df:24:7c:3b: ed:bb:79:71:d6:40:ec:5f:c7:f5:97:be:e1:91:84: bb:dc:f8:1c:fb:25:03:21:f6:ab:c6:89:41:2a:5e: 31:00:3c:5d:fb:99:89:2f:33:14:5a:a7:73:48:01: ab:1a:93:35:7f:ad:a8:73:e4:12:20:77:e1:6e:03: e6:21:3a:91:b5:f9:1a:e6:b6:9c:04:a0:e5:1a:ef: 9e:fb:00:98:76:ef:4c:87:4c:ae:0b:3b:06:27:7c: 90:c2:59:10:8d:0f:3e:39:71:ea:24:92:af:bd:53: fa:35:de:8e:3a:23:f2:39:9b:04:b9:25:7c:14:d8: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A5:F7:00:79:ED:1F:A8:3D:30:56:3A:44:3B:40:85:A4:50:21:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/28ce9b56-aa46-34b3-b7dd-ecd6e0379266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl X509v3 Authority Key Identifier: keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer sbgp-ipAddrBlock: critical IPv4: 198.232.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1a:52:26:1d:d1:d0:b7:d6:2e:1f:90:5e:9d:33:64:6b:47: 0c:98:24:31:f6:98:69:a9:9a:00:14:2e:8c:76:b6:a4:f6:6b: ea:10:d0:db:5c:1f:1f:0b:cc:65:ea:55:1a:f3:0a:e7:09:c3: d4:10:60:5c:bb:c6:0b:ef:19:97:27:a9:25:e1:1e:51:18:e0: 0b:67:11:10:3e:ff:82:55:88:7f:bf:36:05:0f:1e:2b:4e:63: 69:fd:9a:c2:2f:94:f0:c5:ca:f8:8a:d4:62:d6:a9:13:08:aa: e2:1b:4b:39:e1:8e:2f:cb:84:c5:bd:08:6b:2d:18:d8:93:d0: b0:fd:f3:88:46:16:01:fd:35:e9:e0:78:85:9e:6e:68:80:9d: 52:22:2b:86:40:f5:59:fc:2b:a0:31:02:c4:f7:d4:b4:57:43: 24:c3:bb:70:4a:b3:31:fb:30:9b:4c:5a:b1:0b:7d:38:34:8e: b9:95:a7:3f:81:2c:b4:cf:ce:53:1a:5d:e3:b3:fd:33:a7:02: 64:2c:48:c1:f5:17:7a:54:9b:d0:4b:cb:76:a6:14:5a:69:08: 0f:39:3f:87:79:dc:a8:56:53:01:57:cb:53:55:75:76:15:76: 06:aa:f9:77:5d:7e:6e:90:5f:eb:4e:c4:95:90:86:41:10:3c: f7:31:48:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQvJvmSlqQHyGzwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRjMjEzYzctNGMxYS00MTg3LWE4NzktOTBjOTA2MmUw NWQ0MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTgwYTI4Y2MtNDM4MS00MWUwLTgyYTUtZDdkY2UwZGU2NTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwWqj/R+NskMX+1+eZy7wsOtfDKdC/pMSMFy Qkis8fpcBBs6Y7ukk12hpPAgIRn3qRtKraH8vv86lB/ev9OZ2wfBo7T0zVci7u7X Oq0SUyd83uoQQTTeIysXdNBZBHlPwM5c1yr5XoEMnTergDWwls+Jw0aqMC24VaVy ftcfXOX0Yd8kfDvtu3lx1kDsX8f1l77hkYS73Pgc+yUDIfarxolBKl4xADxd+5mJ LzMUWqdzSAGrGpM1f62oc+QSIHfhbgPmITqRtfka5racBKDlGu+e+wCYdu9Mh0yu CzsGJ3yQwlkQjQ8+OXHqJJKvvVP6Nd6OOiPyOZsEuSV8FNi0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGl9wB57R+oPTBWOkQ7QIWkUCGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NGMy MTNjNy00YzFhLTQxODctYTg3OS05MGM5MDYyZTA1ZDQvMjhjZTliNTYtYWE0Ni0z NGIzLWI3ZGQtZWNkNmUwMzc5MjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjRjMjEzYzctNGMxYS00MTg3LWE4 NzktOTBjOTA2MmUwNWQ0LzY0YzIxM2M3LTRjMWEtNDE4Ny1hODc5LTkwYzkwNjJl MDVkNC5jcmwwHwYDVR0jBBgwFoAUs4VaPWhc4iyCJSk88gjviQPAip0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NGMyMTNjNy00YzFhLTQxODctYTg3OS05MGM5 MDYyZTA1ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxujIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsaUiYd0dC31i4fkF6dM2RrRwyYJDH2mGmpmgAULox2tqT2a+oQ0Ntc Hx8LzGXqVRrzCucJw9QQYFy7xgvvGZcnqSXhHlEY4AtnERA+/4JViH+/NgUPHitO Y2n9msIvlPDFyviK1GLWqRMIquIbSznhji/LhMW9CGstGNiT0LD984hGFgH9Neng eIWebmiAnVIiK4ZA9Vn8K6AxAsT31LRXQyTDu3BKszH7MJtMWrELfTg0jrmVpz+B LLTPzlMaXeOz/TOnAmQsSMH1F3pUm9BLy3amFFppCA85P4d53KhWUwFXy1NVdXYV dgaq+Xddfm6QX+tOxJWQhkEQPPcxSAM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:40 2025 by rpki-client