$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa File: 04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa (raw, json) Hash identifier: t90OZG0Dw3XjvdVEnp3WOt7C8mV2Ooskhsk5qvcFk2Y= Subject key identifier: D4:A5:7B:D6:15:53:F8:5B:66:E0:BB:93:F0:B9:14:9F:FA:C5:BE:66 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921342C0ED235965807BA0700 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa Signing time: Sun 09 Mar 2025 10:20:37 +0000 ROA not before: Sun 09 Mar 2025 10:20:37 +0000 ROA not after: Sat 07 Jun 2025 10:20:37 +0000 asID: 3848 IP address blocks: 70.28.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:2c:0e:d2:35:96:58:07:ba:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:37 2025 GMT Not After : Jun 7 10:20:37 2025 GMT Subject: CN=8db32cd1-5af8-480b-ae20-1f35d5f76dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:63:b0:7e:d1:87:97:d6:f2:49:e2:91:7f: 05:fd:ec:93:33:36:2c:2f:62:6b:f6:12:c3:29:7f: 06:f8:82:8c:e3:91:1d:71:0d:49:82:ed:c7:07:96: b7:77:a4:64:d9:2a:be:a8:bd:3d:a5:89:78:4d:9c: 36:88:24:34:27:11:85:ca:a5:8f:4b:c7:45:67:01: 19:77:5b:8f:ea:79:a2:aa:ca:9c:12:2f:4a:d5:fe: 57:26:fc:78:49:73:00:b7:cd:a3:19:64:82:d2:5c: 47:3f:8f:01:9c:e3:93:2c:89:2d:f8:f1:a1:d2:72: 7f:82:5a:59:57:6e:4d:74:71:3e:14:9e:de:52:3a: 1f:37:58:ec:24:ea:07:64:9b:a4:d4:80:4c:fa:73: b7:57:8d:bc:9f:2f:d4:ea:ef:6d:c5:48:b4:d0:c6: 6a:15:c2:8b:ee:92:47:8b:a4:e8:45:4d:06:68:0c: 2f:c0:5f:cd:70:4f:ca:de:28:d1:c0:45:a6:8f:6e: a4:b1:17:aa:df:5e:f8:5f:3c:b2:1f:90:df:90:8f: b5:43:70:9f:ba:7d:70:ba:f1:33:41:c3:45:2b:2b: 5e:9d:b5:cd:63:76:92:c0:a7:c8:a6:be:64:ca:63: 41:32:c5:4b:54:82:db:f0:68:e1:44:31:c3:bf:79: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A5:7B:D6:15:53:F8:5B:66:E0:BB:93:F0:B9:14:9F:FA:C5:BE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 70.28.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f6:b4:bb:82:64:f2:2c:6e:91:f6:fb:54:2b:5a:f5:33:87: 2f:94:60:71:56:cc:d7:a9:31:9c:72:b0:8a:2d:bd:9b:11:71: 4d:3e:5c:f5:30:20:f6:3a:59:c6:c8:b7:c8:af:57:06:80:d3: d3:c3:c5:79:38:26:fa:98:e9:4f:8b:71:40:34:f5:f8:86:62: 0d:30:d6:01:34:c0:82:bf:c0:eb:78:88:a2:d9:09:6c:bc:68: 14:7c:2d:cd:ae:95:8a:46:84:08:1d:28:90:7c:cd:2f:9e:4d: 12:19:1a:62:74:94:5a:36:0e:49:1e:36:35:d8:ca:1c:20:d2: e4:69:a7:9a:cc:82:27:55:cf:aa:af:88:9c:d8:16:0c:6a:f1: ec:07:ef:05:94:a8:21:23:ed:de:14:09:cf:fd:ce:30:ee:21: e6:57:5c:8e:5b:ab:da:ea:d7:dd:54:65:e4:f0:75:53:30:06: c7:7a:87:8e:e9:06:f7:ec:cc:7c:4b:ac:4c:33:44:40:3c:e5: 81:a3:85:28:64:75:27:6c:ed:c3:ca:b1:f6:96:e3:51:c1:98: d3:52:76:30:29:93:49:49:23:05:12:01:fb:48:e3:b5:8a:a2: 01:ba:df:9c:0e:38:af:e3:6c:35:ea:c8:1e:6d:1c:e8:71:42: 40:e3:5c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNCwO0jWWWAe6BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjAzN1oXDTI1MDYwNzEwMjAzN1owLzEtMCsGA1UEAxMk OGRiMzJjZDEtNWFmOC00ODBiLWFlMjAtMWYzNWQ1Zjc2ZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHFjsH7Rh5fW8knikX8F/eyTMzYsL2Jr9hLD KX8G+IKM45EdcQ1Jgu3HB5a3d6Rk2Sq+qL09pYl4TZw2iCQ0JxGFyqWPS8dFZwEZ d1uP6nmiqsqcEi9K1f5XJvx4SXMAt82jGWSC0lxHP48BnOOTLIkt+PGh0nJ/glpZ V25NdHE+FJ7eUjofN1jsJOoHZJuk1IBM+nO3V428ny/U6u9txUi00MZqFcKL7pJH i6ToRU0GaAwvwF/NcE/K3ijRwEWmj26ksReq3174XzyyH5DfkI+1Q3Cfun1wuvEz QcNFKytenbXNY3aSwKfIpr5kymNBMsVLVILb8GjhRDHDv3lfMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSle9YVU/hbZuC7k/C5FJ/6xb5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDRlZWU2N2EtMmVjNy0z YjZhLWE1YWQtYmU2NGU3ZjQ1ZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhx7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz2tLuCZPIsbpH2+1QrWvUzhy+UYHFWzNepMZxysIotvZsRcU0+XPUw IPY6WcbIt8ivVwaA09PDxXk4JvqY6U+LcUA09fiGYg0w1gE0wIK/wOt4iKLZCWy8 aBR8Lc2ulYpGhAgdKJB8zS+eTRIZGmJ0lFo2DkkeNjXYyhwg0uRpp5rMgidVz6qv iJzYFgxq8ewH7wWUqCEj7d4UCc/9zjDuIeZXXI5bq9rq191UZeTwdVMwBsd6h47p BvfszHxLrEwzREA85YGjhShkdSds7cPKsfaW41HBmNNSdjApk0lJIwUSAftI47WK ogG635wOOK/jbDXqyB5tHOhxQkDjXOI= -----END CERTIFICATE-----Generated at Mon Apr 7 16:45:04 2025 by rpki-client