$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa File: 8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json) Hash identifier: T6FKgR9Ou+o2xvaY2wACanYyoRDAIk3wHvgEk6aeQZc= Subject key identifier: 4A:92:D6:77:7A:61:E8:BF:E7:E4:30:F2:31:0A:FC:D4:E7:25:E0:C5 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584919418DA8F429E60EEB490880 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 30158 IP address blocks: 199.189.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8d:a8:f4:29:e6:0e:eb:49:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=7df05be5-c6ca-4f8a-a9bd-f5e139062493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:a4:2f:45:be:a7:5a:0d:57:0b:b6:26:a1: e5:1a:19:19:9e:ae:18:12:a4:02:a9:7e:96:1c:e1: ac:a5:69:d4:91:f8:1b:5b:a2:e3:33:b1:66:81:cb: 0b:d3:69:62:5a:18:72:01:85:b2:55:98:8b:db:09: 2d:72:ca:36:6f:ee:87:44:81:e8:44:52:ad:0e:a7: 56:c7:a8:f4:eb:8d:e8:e5:9e:6c:94:a2:1a:07:c6: 29:b4:0f:6e:1a:e6:a4:e6:e1:a6:fb:92:c9:f8:45: c1:b8:3f:8b:8a:da:0b:42:e6:9a:6a:9a:5c:ca:d6: 3e:3e:32:9c:3a:a7:97:ea:50:e0:ba:b5:f3:73:38: 86:ab:34:fe:f8:a7:d3:ba:65:02:41:da:7c:27:c7: ea:c8:45:24:6f:df:f6:b5:0f:4f:43:2a:0a:3f:05: b8:18:88:a9:fc:33:b6:85:d9:d2:5c:06:f6:1a:3c: 31:b6:54:20:70:2a:19:21:18:a5:34:be:ea:21:ac: 0e:2b:f2:72:48:30:79:49:32:57:b1:fd:70:d3:48: 69:e5:0f:7d:a2:24:f9:5e:8a:38:11:c0:da:e8:76: 43:39:a3:2d:3b:87:3b:51:86:b3:02:f1:e2:5c:00: 13:a7:bf:1c:8d:cf:80:28:7c:70:2c:e6:88:bc:28: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:92:D6:77:7A:61:E8:BF:E7:E4:30:F2:31:0A:FC:D4:E7:25:E0:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e7:d9:4c:55:3d:11:d3:42:b7:0c:d9:b1:c4:b1:ff:e2:6e: c5:65:0d:2c:9e:7b:11:84:00:d7:13:e0:a2:c5:1b:50:09:9d: a4:a2:66:4e:21:f7:df:48:7b:c7:b3:1e:a4:5d:a5:db:ee:6c: b0:ee:e9:c5:e8:e2:cc:70:ce:d6:58:d5:3e:92:da:08:bc:47: 6c:99:d7:46:5a:c8:68:81:8a:98:42:8d:16:73:ee:5c:49:b2: c0:49:d7:e4:07:88:7f:90:8c:d3:f8:e0:7a:a4:58:85:ed:5d: f2:e8:6f:35:5a:a9:c2:bc:22:31:24:22:b6:12:f8:87:b1:fc: 09:3a:7e:11:03:b5:98:06:89:73:73:c7:69:2b:a6:18:62:69: 2c:0d:33:d7:a2:27:36:4e:4e:bc:ee:91:8c:36:09:d6:f6:a8: 35:19:89:d6:78:7e:70:0a:e2:65:8f:a7:07:dc:7e:f5:2a:0e: 87:75:15:53:e0:d1:dd:bb:22:1a:d2:76:c1:9b:8c:69:a1:12: d8:fc:4e:59:87:f7:44:07:e8:21:f1:9b:82:d5:4f:21:d8:ad: c4:b7:e0:1c:cb:c3:f4:33:12:ce:ea:f3:32:c8:84:ab:0e:fc: be:8d:fa:ed:1a:11:2d:20:b3:99:82:b8:6d:05:71:87:ea:1c: a5:e9:07:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQY2o9CnmDutJCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk N2RmMDViZTUtYzZjYS00ZjhhLWE5YmQtZjVlMTM5MDYyNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYukL0W+p1oNVwu2JqHlGhkZnq4YEqQCqX6W HOGspWnUkfgbW6LjM7FmgcsL02liWhhyAYWyVZiL2wktcso2b+6HRIHoRFKtDqdW x6j0643o5Z5slKIaB8YptA9uGuak5uGm+5LJ+EXBuD+LitoLQuaaappcytY+PjKc OqeX6lDgurXzcziGqzT++KfTumUCQdp8J8fqyEUkb9/2tQ9PQyoKPwW4GIip/DO2 hdnSXAb2GjwxtlQgcCoZIRilNL7qIawOK/JySDB5STJXsf1w00hp5Q99oiT5Xoo4 EcDa6HZDOaMtO4c7UYazAvHiXAATp78cjc+AKHxwLOaIvChJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqS1nd6Yei/5+Qw8jEK/NTnJeDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvOGI4YTg1YjAtZTE1Mi0z NDBkLTk1NTItZDU3MWI2MThhMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDn2UxVPRHTQrcM2bHEsf/ibsVlDSyeexGEANcT4KLFG1AJnaSiZk4h 999Ie8ezHqRdpdvubLDu6cXo4sxwztZY1T6S2gi8R2yZ10ZayGiBiphCjRZz7lxJ ssBJ1+QHiH+QjNP44HqkWIXtXfLobzVaqcK8IjEkIrYS+Iex/Ak6fhEDtZgGiXNz x2krphhiaSwNM9eiJzZOTrzukYw2Cdb2qDUZidZ4fnAK4mWPpwfcfvUqDod1FVPg 0d27IhrSdsGbjGmhEtj8TlmH90QH6CHxm4LVTyHYrcS34BzLw/QzEs7q8zLIhKsO /L6N+u0aES0gs5mCuG0FcYfqHKXpB5E= -----END CERTIFICATE-----Generated at Sat Apr 5 02:39:14 2025 by rpki-client