$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: DjUiDIkwzp7Ugsq8Gd3XDU3SJstQcd83q/z3Q0htnoE= Subject key identifier: D7:59:49:60:3D:1E:22:84:CC:DF:B3:8D:62:28:1A:4D:B2:7C:98:3E Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F43285848D64107F03B879DD447843540 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:07:f0:3b:87:9d:d4:47:84:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=bc168d7e-47bf-47f8-ad19-2428f8ab3708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:fc:77:2f:4f:ef:6c:07:31:48:47:e0:89: 6a:fb:fd:e5:36:99:d4:57:47:40:0c:27:73:51:89: 50:05:4b:35:00:9a:25:6e:50:11:5a:48:00:65:11: 01:ff:af:f7:d5:1a:9f:da:9f:9f:d3:27:f3:47:6b: f0:f0:6e:d4:0a:f8:55:af:02:cd:25:38:d1:26:aa: ca:fe:03:af:bf:16:b2:e7:76:6b:dc:20:84:93:67: 0a:5e:33:4b:81:c8:ea:08:f5:e5:ee:9a:fc:c9:77: d8:f4:c4:19:81:3b:2d:1d:d1:c3:6c:a1:67:06:3b: 12:29:9c:ca:66:bb:b0:1e:bb:a1:6c:74:22:bf:55: 4a:8f:b5:cf:2c:65:0b:4e:f2:12:59:1e:a3:41:00: 77:29:3e:64:bb:3c:fc:01:84:0a:f1:0f:02:ad:94: 0c:5f:ce:66:ec:17:f4:9f:01:ca:b3:b8:5f:bc:4d: a6:b2:d4:e0:45:d1:df:0b:53:4a:2c:d5:61:9d:01: 13:8e:86:aa:dc:db:4b:42:6c:fd:ab:ec:f5:f1:43: ad:33:4a:cf:2a:8d:34:35:83:6d:08:8c:85:48:c3: 25:7e:01:6a:db:b1:c4:0f:53:2f:4b:57:34:dd:d6: 84:49:d0:d6:94:18:e3:3f:51:04:9c:28:85:08:38: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:59:49:60:3D:1E:22:84:CC:DF:B3:8D:62:28:1A:4D:B2:7C:98:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f8:3d:37:1b:c7:39:15:00:3d:1f:7c:3b:80:c2:df:e0:8b: 22:49:37:5f:9a:16:0f:b3:09:b0:0e:6b:d6:c1:8a:07:01:2c: 62:80:29:4e:ff:85:b2:75:12:39:c0:d2:b7:24:fe:5f:fe:47: df:03:d5:2d:cf:d2:7b:9d:f7:6a:ac:e5:4e:06:89:c9:b7:10: df:a1:ac:c1:78:09:53:78:38:39:c9:1f:aa:7e:2f:a8:d2:63: b5:33:5b:83:2a:d6:26:6d:07:dd:5a:eb:64:6d:37:61:2b:e4: 28:53:ce:69:41:50:99:6b:75:fe:06:d3:60:f2:2e:06:49:6f: a2:f4:4d:93:af:c6:0c:ce:70:eb:9d:5b:6d:39:16:93:45:1c: 63:5e:38:8b:f4:0d:88:9e:2b:05:ec:06:8e:ad:33:bf:c1:f7: e5:5f:9a:25:3a:45:b3:3b:4e:35:0d:13:a7:7b:0e:75:9a:3f: af:de:32:75:63:b0:aa:be:ae:38:e6:cd:03:35:64:2d:12:d4: f0:ca:64:a5:1f:9d:b7:58:c0:03:d2:09:cb:d6:3e:2c:17:c6: 10:1e:70:b6:4b:45:0b:63:5f:5f:22:56:ba:19:a2:d8:8e:53: c8:4b:29:8c:9b:5c:09:4e:7b:65:04:af:8c:18:1f:01:b0:31: 20:5d:63:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQfwO4ed1EeENUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmMxNjhkN2UtNDdiZi00N2Y4LWFkMTktMjQyOGY4YWIzNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYb8dy9P72wHMUhH4Ilq+/3lNpnUV0dADCdz UYlQBUs1AJolblARWkgAZREB/6/31Rqf2p+f0yfzR2vw8G7UCvhVrwLNJTjRJqrK /gOvvxay53Zr3CCEk2cKXjNLgcjqCPXl7pr8yXfY9MQZgTstHdHDbKFnBjsSKZzK ZruwHruhbHQiv1VKj7XPLGULTvISWR6jQQB3KT5kuzz8AYQK8Q8CrZQMX85m7Bf0 nwHKs7hfvE2mstTgRdHfC1NKLNVhnQETjoaq3NtLQmz9q+z18UOtM0rPKo00NYNt CIyFSMMlfgFq27HED1MvS1c03daESdDWlBjjP1EEnCiFCDgujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdZSWA9HiKEzN+zjWIoGk2yfJg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX4PTcbxzkVAD0ffDuAwt/giyJJN1+aFg+zCbAOa9bBigcBLGKAKU7/ hbJ1EjnA0rck/l/+R98D1S3P0nud92qs5U4Gicm3EN+hrMF4CVN4ODnJH6p+L6jS Y7UzW4Mq1iZtB91a62RtN2Er5ChTzmlBUJlrdf4G02DyLgZJb6L0TZOvxgzOcOud W205FpNFHGNeOIv0DYieKwXsBo6tM7/B9+VfmiU6RbM7TjUNE6d7DnWaP6/eMnVj sKq+rjjmzQM1ZC0S1PDKZKUfnbdYwAPSCcvWPiwXxhAecLZLRQtjX18iVroZotiO U8hLKYybXAlOe2UEr4wYHwGwMSBdYwI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:42:50 2025 by rpki-client