$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa File: 399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa (raw, json) Hash identifier: x5x9knjdOr9cVrkCCgKowOcWErOoFVF0hTfZM1+wbwI= Subject key identifier: 8F:EF:BA:A8:07:A2:90:A9:6C:2E:AF:FC:A1:77:0C:2D:3A:72:C1:84 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584944694229B1A320849F7D1180 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 64267 IP address blocks: 208.89.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:42:29:b1:a3:20:84:9f:7d:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=7680aacb-9b5b-450d-b379-4ff89e30f289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:2a:d6:67:25:1d:98:c5:e6:27:9d:71:54: d8:8c:21:bc:ea:a5:78:7c:46:02:08:f5:61:7b:96: c0:0a:af:b9:15:92:f0:6f:60:2c:08:d8:b1:e7:2b: 98:d2:8e:9d:99:03:fa:79:9c:e4:ce:92:a8:de:f1: 6e:44:9c:0e:3b:0d:a1:fa:04:fb:db:ee:65:46:d8: 4e:22:98:fb:72:50:5c:eb:2e:72:b7:c3:0a:76:54: 55:38:b0:2c:9b:69:5d:11:08:8b:50:f9:4b:f0:9a: 30:58:06:98:fa:49:54:fb:f3:fc:b8:2f:74:70:91: 02:9e:37:51:e1:e0:54:3e:6e:47:ce:b5:f1:bc:04: a2:e3:38:e1:38:df:6f:63:5c:e0:49:bc:5d:4b:31: 8b:22:30:9a:2c:35:2b:67:e7:4a:d7:f3:3e:47:da: 8d:53:4a:d7:84:a4:b9:cd:43:1f:b5:d6:10:b0:31: 30:a0:b3:e7:2b:c3:aa:fc:c0:11:b7:80:34:73:6f: da:28:04:c6:00:43:44:01:d1:67:45:3b:8e:85:ab: 36:2d:ad:fc:4a:dd:43:5a:d4:c3:ed:13:98:34:c8: 31:f9:f6:0f:af:47:09:1d:0a:4b:cd:0b:4e:96:94: 1c:f9:b8:1a:ab:64:23:f3:28:a0:54:29:d5:b0:b8: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EF:BA:A8:07:A2:90:A9:6C:2E:AF:FC:A1:77:0C:2D:3A:72:C1:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:f0:39:d0:75:94:87:de:61:89:6c:e7:da:e8:73:91:3d:79: d8:18:0d:af:8a:fc:be:94:3c:8c:82:51:77:76:23:46:b3:69: 54:4d:2a:c5:10:fd:12:31:52:57:c6:60:9b:13:ff:fd:74:c2: ed:15:57:a6:f2:c6:f5:84:57:07:03:57:19:f0:41:6a:1a:a8: bf:5b:83:71:3d:1f:61:21:c4:0a:7c:95:b3:2b:ee:6d:77:72: a0:e2:d2:c0:5d:6b:75:a1:50:89:06:4a:f3:e0:72:68:f3:9f: 52:88:31:9c:9f:c7:ab:90:c3:c1:fc:04:d8:d3:bc:f6:5f:5f: aa:f7:38:fa:8a:dd:fe:96:0b:a5:83:4a:65:11:22:40:f6:d7: 0d:b2:57:53:27:51:91:d3:9b:39:2c:68:d1:a8:1d:68:c1:62: fa:51:29:88:da:a0:69:a3:63:b4:89:c9:50:03:a0:17:03:e5: 43:ae:96:a2:08:0b:66:db:1e:44:52:c6:ed:7b:c1:ce:88:ff: 1e:2d:81:16:07:61:d4:51:1e:1e:37:b1:87:3f:9d:46:7b:91: da:c2:c0:2f:1f:d7:f8:e0:f3:4f:1c:10:25:09:c1:86:55:e3: e7:c5:ee:aa:89:4d:cd:4a:6b:30:7f:50:b8:64:50:28:eb:9d: 7b:1c:3a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUIpsaMghJ99EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NzY4MGFhY2ItOWI1Yi00NTBkLWIzNzktNGZmODllMzBmMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhMq1mclHZjF5iedcVTYjCG86qV4fEYCCPVh e5bACq+5FZLwb2AsCNix5yuY0o6dmQP6eZzkzpKo3vFuRJwOOw2h+gT72+5lRthO Ipj7clBc6y5yt8MKdlRVOLAsm2ldEQiLUPlL8JowWAaY+klU+/P8uC90cJECnjdR 4eBUPm5HzrXxvASi4zjhON9vY1zgSbxdSzGLIjCaLDUrZ+dK1/M+R9qNU0rXhKS5 zUMftdYQsDEwoLPnK8Oq/MARt4A0c2/aKATGAENEAdFnRTuOhas2La38St1DWtTD 7ROYNMgx+fYPr0cJHQpLzQtOlpQc+bgaq2Qj8yigVCnVsLhyFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/vuqgHopCpbC6v/KF3DC06csGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzk5YThiM2QtYWMyNi0z ZTYwLTkwZTQtMDU3MmZkMzIyOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLwOdB1lIfeYYls59roc5E9edgYDa+K/L6UPIyCUXd2I0azaVRNKsUQ /RIxUlfGYJsT//10wu0VV6byxvWEVwcDVxnwQWoaqL9bg3E9H2EhxAp8lbMr7m13 cqDi0sBda3WhUIkGSvPgcmjzn1KIMZyfx6uQw8H8BNjTvPZfX6r3OPqK3f6WC6WD SmURIkD21w2yV1MnUZHTmzksaNGoHWjBYvpRKYjaoGmjY7SJyVADoBcD5UOulqII C2bbHkRSxu17wc6I/x4tgRYHYdRRHh43sYc/nUZ7kdrCwC8f1/jg808cECUJwYZV 4+fF7qqJTc1KazB/ULhkUCjrnXscOlU= -----END CERTIFICATE-----Generated at Sat Apr 5 05:04:30 2025 by rpki-client