$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa File: 33faf54e-b2b5-3d79-910d-958696a77f7b.roa (raw, json) Hash identifier: fvhbfDoMF6RsqFiQgtLBPW3a7q2S0v7SCZERJLDU9xw= Subject key identifier: 77:CE:D6:69:12:AC:10:A5:A8:8D:0E:91:4A:A7:26:2E:B7:A5:2F:39 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848E16BECEF71B87BC2F4493FC0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 64267 IP address blocks: 141.164.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ec:ef:71:b8:7b:c2:f4:49:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=bf359bc8-17f5-447d-b9a5-b47b86768a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:0c:e0:54:24:a8:fe:77:28:c9:9a:5d:4c: 86:29:0a:fd:c5:76:6b:1c:99:d6:e9:71:e5:c0:4b: b6:6c:eb:df:2f:8a:85:85:9f:28:5a:b8:3f:b2:0c: 45:13:39:e9:d6:5d:76:21:9d:23:f1:41:4e:78:97: 87:bc:e6:77:6c:55:79:a7:d5:a7:bf:a3:d2:cb:ee: 69:3d:69:b3:13:88:07:33:7b:c3:92:ce:9d:e6:67: 98:4f:a6:19:8a:fc:82:42:40:ab:5d:af:99:ae:3a: cf:7a:1a:fe:bd:a5:c7:3a:21:a6:89:e3:f6:c2:48: ec:e4:8d:f7:9a:f1:ab:2e:be:2a:f4:fa:e0:f5:e5: 10:d5:f5:15:9d:48:3a:b8:c4:bf:c9:1c:2d:75:16: 8d:07:03:87:68:24:37:62:5c:8a:f4:19:96:c0:bd: 98:df:64:9e:80:d8:9a:3f:05:36:02:da:ea:d4:f1: 1e:7e:ba:40:b8:50:32:ec:6b:15:f8:1f:08:e0:b2: a0:bd:62:80:22:6a:4d:ed:78:5c:91:99:0f:4c:38: 4c:7a:9b:c1:93:1d:65:04:e2:1e:b4:19:d0:d8:1a: 74:f3:9c:72:c6:6b:e0:d0:dc:c4:15:58:95:fa:ed: 85:b0:1b:65:ad:34:a7:f3:c4:63:3e:4b:09:c2:1e: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CE:D6:69:12:AC:10:A5:A8:8D:0E:91:4A:A7:26:2E:B7:A5:2F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 141.164.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d3:4f:91:e8:a5:8a:8e:03:fe:48:0d:82:d7:57:64:a9:14: 77:16:2b:f2:86:d1:c2:a7:fb:d8:41:c3:2c:e3:8d:a6:e5:1c: b1:32:19:8f:ed:6f:41:fa:d6:ab:d1:f4:d9:6a:9f:da:f8:6c: 89:69:e2:9b:06:1d:22:50:d3:69:72:80:8a:b6:49:b5:51:70: 18:67:98:67:33:3c:3e:cb:aa:3d:fd:3a:9a:c9:58:c3:c9:c5: 9c:d3:2b:5d:1a:77:8d:7d:14:82:f3:6b:80:77:d2:b7:f0:88: c9:60:b8:a0:3e:a1:a6:4e:b2:01:c6:fd:c1:9c:92:96:94:09: 2b:7b:6f:f4:9a:7b:9a:bc:bf:bc:a4:e0:10:53:21:04:4a:81: 1e:96:69:9b:73:31:23:21:c2:43:86:4e:a8:2b:72:72:6f:1b: 9b:d8:66:35:1a:5e:a7:6a:66:6f:ae:53:40:dc:0e:43:e2:7e: 8e:3a:3d:32:24:6c:3f:ce:9f:6a:fc:ff:7c:a2:dc:22:10:13: fc:25:de:f1:d6:e8:29:ad:a9:1e:9d:44:6e:7b:6a:d4:f0:9a: 11:af:9f:8a:2f:0b:a8:b7:91:44:59:6f:30:c4:31:44:28:84: a5:75:5e:61:e9:23:02:19:cb:ef:50:8a:e1:5e:8b:be:6f:cc: be:26:12:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+zvcbh7wvRJP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YmYzNTliYzgtMTdmNS00NDdkLWI5YTUtYjQ3Yjg2NzY4YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJkM4FQkqP53KMmaXUyGKQr9xXZrHJnW6XHl wEu2bOvfL4qFhZ8oWrg/sgxFEznp1l12IZ0j8UFOeJeHvOZ3bFV5p9Wnv6PSy+5p PWmzE4gHM3vDks6d5meYT6YZivyCQkCrXa+ZrjrPehr+vaXHOiGmieP2wkjs5I33 mvGrLr4q9Prg9eUQ1fUVnUg6uMS/yRwtdRaNBwOHaCQ3YlyK9BmWwL2Y32SegNia PwU2Atrq1PEefrpAuFAy7GsV+B8I4LKgvWKAImpN7XhckZkPTDhMepvBkx1lBOIe tBnQ2Bp085xyxmvg0NzEFViV+u2FsBtlrTSn88RjPksJwh5oVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfO1mkSrBClqI0OkUqnJi63pS85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzNmYWY1NGUtYjJiNS0z ZDc5LTkxMGQtOTU4Njk2YTc3ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjaRfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPTT5HopYqOA/5IDYLXV2SpFHcWK/KG0cKn+9hBwyzjjablHLEyGY/t b0H61qvR9Nlqn9r4bIlp4psGHSJQ02lygIq2SbVRcBhnmGczPD7Lqj39OprJWMPJ xZzTK10ad419FILza4B30rfwiMlguKA+oaZOsgHG/cGckpaUCSt7b/Sae5q8v7yk 4BBTIQRKgR6WaZtzMSMhwkOGTqgrcnJvG5vYZjUaXqdqZm+uU0DcDkPifo46PTIk bD/On2r8/3yi3CIQE/wl3vHW6CmtqR6dRG57atTwmhGvn4ovC6i3kURZbzDEMUQo hKV1XmHpIwIZy+9QiuFei75vzL4mEqA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:11 2025 by rpki-client