$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa File: 423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json) Hash identifier: rkFFQuyOLf/Y0rQ2OivWIMXAMV3QRY/tnYnAU403KUE= Subject key identifier: B8:31:1B:54:4E:64:79:A6:3E:F3:DE:2B:C0:14:1B:EC:34:C1:34:81 Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F432858495ABEB5B445E0CB90DECEB6C0 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 7057 IP address blocks: 216.8.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b5:b4:45:e0:cb:90:de:ce:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7c69d16c-a49f-4048-84ed-adaff2698763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:b0:ed:b4:9b:7b:39:f8:47:68:57:00:7e: 0e:49:19:9b:9b:fc:96:98:29:4c:73:4e:6a:a3:d7: 59:7c:9b:4f:bc:64:4a:ff:41:8e:61:19:f0:dd:05: ab:0c:63:2d:c3:c5:f7:6e:37:79:8c:5e:a3:e3:e7: de:38:2a:7f:f6:00:68:bf:66:6f:b6:59:e2:1c:43: 4b:cb:96:09:c7:30:fe:c5:97:cd:e7:7c:28:21:2e: 88:3a:c3:cf:3e:16:8f:2b:d0:8b:6c:f2:44:e7:d5: d8:88:53:b5:3b:5a:af:64:a2:30:2f:53:6b:c0:bc: 85:75:ae:ed:26:87:a7:7c:d3:7c:c3:1d:bd:08:70: 05:f2:55:68:f1:75:4c:99:6f:68:81:07:2c:e2:01: 32:9d:1b:80:36:c3:d0:1e:7f:cd:fc:9c:07:71:18: 27:a0:52:8d:28:55:ea:25:ff:5a:71:fa:1c:1f:15: e9:4e:d8:3f:fd:8f:07:2e:d2:d4:de:46:92:84:41: 19:8d:db:c0:a2:13:ab:b3:28:74:73:c8:0f:2f:00: ae:86:74:a6:20:d4:2f:33:44:8e:5d:bb:9d:c3:76: ff:d3:2c:c9:af:46:b3:5f:b4:e1:33:8d:c8:73:c7: c4:88:6c:bd:91:8b:ac:fa:70:f6:f2:32:af:af:87: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:1B:54:4E:64:79:A6:3E:F3:DE:2B:C0:14:1B:EC:34:C1:34:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 216.8.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1c:c4:c9:03:48:7d:29:a2:19:34:fb:85:2f:9d:5e:b8:7f: 93:f1:1e:c0:7a:84:1f:64:92:98:57:99:3c:c1:68:b7:3e:af: 6c:9d:8f:ea:9c:01:ec:16:f4:62:04:3a:cf:08:24:36:a1:82: bc:63:f1:17:59:33:6a:2b:70:03:cc:41:31:f7:67:ff:b0:3b: 9c:94:06:df:b6:41:f2:5b:44:89:5e:f1:b9:04:2e:0e:78:39: 2c:11:da:fb:35:a0:82:64:6e:09:08:aa:43:6e:af:e8:30:64: af:01:da:04:db:6c:74:ab:f9:ba:53:28:5b:bc:6f:fb:f1:14: b3:37:0f:69:e1:94:10:7e:d4:86:42:77:17:af:49:e1:4c:45: d3:6e:fd:4a:5e:e2:65:65:58:1c:f3:ef:cd:25:42:e5:93:2b: a1:e7:77:90:b6:3a:a9:4c:06:aa:f0:19:35:3f:f6:45:51:62: 5e:b3:a1:a1:4f:03:51:c4:d4:58:e4:2d:08:f5:f1:50:90:b7: 52:5a:b0:ce:ac:2e:07:7b:b9:d3:84:2a:4d:ab:48:a6:06:84: ba:7d:09:2c:de:19:d4:36:46:2e:d8:c6:4b:41:31:5c:b9:13: 4e:9c:3f:4e:20:62:0c:0d:9f:17:bd:cc:40:5f:b9:06:3b:9e: 49:ce:5a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrW0ReDLkN7OtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2M2OWQxNmMtYTQ5Zi00MDQ4LTg0ZWQtYWRhZmYyNjk4NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrOw7bSbezn4R2hXAH4OSRmbm/yWmClMc05q o9dZfJtPvGRK/0GOYRnw3QWrDGMtw8X3bjd5jF6j4+feOCp/9gBov2ZvtlniHENL y5YJxzD+xZfN53woIS6IOsPPPhaPK9CLbPJE59XYiFO1O1qvZKIwL1NrwLyFda7t JoenfNN8wx29CHAF8lVo8XVMmW9ogQcs4gEynRuANsPQHn/N/JwHcRgnoFKNKFXq Jf9acfocHxXpTtg//Y8HLtLU3kaShEEZjdvAohOrsyh0c8gPLwCuhnSmINQvM0SO Xbudw3b/0yzJr0azX7ThM43Ic8fEiGy9kYus+nD28jKvr4daxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgxG1ROZHmmPvPeK8AUG+w0wTSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvNDIzYzIzYTMtZmQ2My0z MDQwLTlmOGItMjg2ZmM4ODQzY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2AiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYcxMkDSH0pohk0+4UvnV64f5PxHsB6hB9kkphXmTzBaLc+r2ydj+qc AewW9GIEOs8IJDahgrxj8RdZM2orcAPMQTH3Z/+wO5yUBt+2QfJbRIle8bkELg54 OSwR2vs1oIJkbgkIqkNur+gwZK8B2gTbbHSr+bpTKFu8b/vxFLM3D2nhlBB+1IZC dxevSeFMRdNu/Upe4mVlWBzz780lQuWTK6Hnd5C2OqlMBqrwGTU/9kVRYl6zoaFP A1HE1FjkLQj18VCQt1JasM6sLgd7udOEKk2rSKYGhLp9CSzeGdQ2Ri7YxktBMVy5 E06cP04gYgwNnxe9zEBfuQY7nknOWiM= -----END CERTIFICATE-----Generated at Sun Apr 13 18:20:24 2025 by rpki-client