$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0088fec7-86d6-31d5-8708-34c9dfa0e86d.roa File: 0088fec7-86d6-31d5-8708-34c9dfa0e86d.roa (raw, json) Hash identifier: aD82cPAFnyuiK3Jvwt2hKurz5k4VOr3zbwQ76mC1M6o= Subject key identifier: 66:13:96:89:53:AA:6D:5A:37:52:35:9F:9A:0D:4B:32:B2:AD:7B:04 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849244E6BE71800760E29F51840 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0088fec7-86d6-31d5-8708-34c9dfa0e86d.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 7018 IP address blocks: 172.81.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:6b:e7:18:00:76:0e:29:f5:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=532afa84-f552-408b-8a32-4cc84033d52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:a6:50:27:c7:4f:d0:67:36:41:b3:71:d4: ae:88:43:82:69:16:d0:86:51:38:47:e5:c4:9c:ec: 72:c2:e5:8d:1b:f4:08:f1:63:c0:1d:85:1f:e9:db: 4b:f4:7e:81:02:2e:65:f5:aa:97:ce:32:ca:ca:a2: df:d9:fb:c4:20:11:9d:46:50:0f:a7:f0:12:fe:fe: 5b:14:91:e5:22:f1:4b:df:33:9d:b8:00:72:73:8b: eb:5b:38:47:14:17:7d:91:3b:d2:d9:12:52:02:e7: f0:38:ea:6c:92:0a:4a:c7:73:95:e6:ca:51:ce:1c: 4c:3d:10:df:e4:d1:30:b0:30:44:74:34:93:71:92: 1d:33:35:1e:c8:1e:0b:7b:41:15:7a:dd:a2:ca:7d: ad:42:44:65:8b:e8:a1:7c:b4:e4:70:b7:65:65:ce: 08:74:b2:7e:88:63:23:d6:74:59:6b:cd:a3:cf:54: 79:8d:84:ef:d8:5d:54:2b:44:56:c2:88:bb:a5:e8: 42:5d:4e:c2:bd:cb:d1:b6:07:ec:33:9e:0c:5e:a2: 87:83:19:ec:a1:48:96:7e:d5:00:3a:54:56:b1:99: 6c:5b:10:55:51:42:04:54:26:27:66:b0:4e:31:6d: be:dc:68:88:2f:e7:a5:69:b8:44:fa:61:28:22:b5: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:96:89:53:AA:6D:5A:37:52:35:9F:9A:0D:4B:32:B2:AD:7B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0088fec7-86d6-31d5-8708-34c9dfa0e86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.81.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:19:2a:19:b3:b4:ec:f4:48:de:03:b0:61:28:22:df:27:6e: 06:d3:28:f7:31:33:9b:e6:1d:4e:b1:17:6e:0f:3a:52:b7:0c: 17:4c:0f:eb:0d:e0:6a:a5:06:23:98:d3:22:5e:68:bf:ab:5f: 20:06:70:84:27:49:41:b0:5b:8b:0e:69:c5:b3:00:82:e6:2f: ab:8e:cf:4a:9d:05:12:3f:aa:9c:ae:da:43:1d:d7:ab:ae:63: 55:8a:4a:19:5f:70:96:6f:fd:65:bf:53:ca:bc:61:8a:33:80: 66:b0:b0:1b:a4:42:4c:ea:c9:a2:b9:46:d5:4b:c5:4f:13:ee: c4:7d:9c:fe:9f:da:eb:19:2c:68:a5:bf:28:76:83:a4:67:42: 3e:f2:76:0e:12:33:93:28:2c:a1:76:21:13:06:86:84:ed:4a: c1:21:22:be:30:11:92:de:d5:a4:2e:bb:09:3b:f1:1c:f1:98: 03:74:68:e7:33:3c:5e:69:5d:48:2d:cc:c6:25:6d:f9:33:8e: a7:e8:21:e1:0d:57:21:f1:4b:4c:98:9a:f6:80:07:05:69:43: 06:23:6e:db:67:6f:1c:ec:dc:b0:a9:75:07:3b:15:78:fd:c4: a4:25:52:e0:df:0c:f4:b5:46:b8:fe:0a:5e:7a:d0:a3:4f:cc: 62:99:dd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTmvnGAB2Din1GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NTMyYWZhODQtZjU1Mi00MDhiLThhMzItNGNjODQwMzNkNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8OmUCfHT9BnNkGzcdSuiEOCaRbQhlE4R+XE nOxywuWNG/QI8WPAHYUf6dtL9H6BAi5l9aqXzjLKyqLf2fvEIBGdRlAPp/AS/v5b FJHlIvFL3zOduAByc4vrWzhHFBd9kTvS2RJSAufwOOpskgpKx3OV5spRzhxMPRDf 5NEwsDBEdDSTcZIdMzUeyB4Le0EVet2iyn2tQkRli+ihfLTkcLdlZc4IdLJ+iGMj 1nRZa82jz1R5jYTv2F1UK0RWwoi7pehCXU7CvcvRtgfsM54MXqKHgxnsoUiWftUA OlRWsZlsWxBVUUIEVCYnZrBOMW2+3GiIL+elabhE+mEoIrV6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYTlolTqm1aN1I1n5oNSzKyrXsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDA4OGZlYzctODZkNi0z MWQ1LTg3MDgtMzRjOWRmYTBlODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIZKhmztOz0SN4DsGEoIt8nbgbTKPcxM5vmHU6xF24POlK3DBdMD+sN 4GqlBiOY0yJeaL+rXyAGcIQnSUGwW4sOacWzAILmL6uOz0qdBRI/qpyu2kMd16uu Y1WKShlfcJZv/WW/U8q8YYozgGawsBukQkzqyaK5RtVLxU8T7sR9nP6f2usZLGil vyh2g6RnQj7ydg4SM5MoLKF2IRMGhoTtSsEhIr4wEZLe1aQuuwk78RzxmAN0aOcz PF5pXUgtzMYlbfkzjqfoIeENVyHxS0yYmvaABwVpQwYjbttnbxzs3LCpdQc7FXj9 xKQlUuDfDPS1Rrj+Cl560KNPzGKZ3SE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:33:52 2025 by rpki-client