$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa File: 3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa (raw, json) Hash identifier: 4Luh1026o/z1CBfeZpEu5mZU+wgdZFAZr0JoYFZpNfU= Subject key identifier: 67:21:D1:30:32:96:96:B6:36:64:98:2A:48:FC:56:84:C7:82:6C:99 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848DD3BAB42A22E94C97B1BF800 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 33659 IP address blocks: 158.62.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:ab:42:a2:2e:94:c9:7b:1b:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=023a34a9-1055-45f0-ac2a-6835111f2879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:63:c3:04:f1:1d:98:9c:dd:80:f7:bd:65: d4:68:fa:4f:c1:5f:62:8a:6e:f9:88:0e:67:85:3c: e4:1e:56:96:cf:4e:16:16:24:7a:96:09:fb:d6:c4: 8c:1f:ee:fb:42:7d:01:c0:fd:ee:1a:38:dc:e2:21: 4c:e1:c3:54:86:eb:2d:91:7e:6e:2d:3b:b9:9f:30: bb:82:fb:e3:be:c0:c6:9e:ef:8c:4a:11:fa:c2:df: d5:16:e2:42:50:d0:8a:40:c8:0f:eb:55:ea:a3:b9: f3:54:20:09:b6:e8:94:2b:13:e7:30:f4:25:cd:8b: 3d:76:11:4c:c2:51:b0:65:e3:d5:f9:4a:74:d1:71: 11:37:20:79:6e:a7:90:8a:9d:9a:ca:3c:59:a3:41: 6f:a8:08:91:f9:fc:fd:1f:98:2d:a4:d0:40:e2:b3: 21:0f:2f:fb:d8:11:28:2d:84:a1:11:de:46:cd:9a: 32:b5:9f:67:cc:a7:e3:bf:15:3e:4e:54:b3:d0:54: 82:6c:28:1d:de:61:0a:be:5f:09:63:53:7d:dd:d5: bd:c7:b4:45:cc:76:85:67:d3:62:1d:cf:4a:68:aa: f1:1d:1c:82:eb:20:27:a8:27:01:09:cf:ab:3f:ab: 66:59:47:a7:81:9b:fb:15:c6:8b:fe:5a:4a:7b:df: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:D1:30:32:96:96:B6:36:64:98:2A:48:FC:56:84:C7:82:6C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:85:1d:49:da:38:43:5d:ff:24:0c:7f:b1:97:58:52:bf:7e: db:77:d6:66:44:63:fc:fd:cb:f4:6c:87:b6:f0:11:a2:5f:94: 24:3f:a6:f2:02:ef:3f:01:a0:d3:84:e4:71:a9:e5:49:2e:f5: a5:d6:b1:23:91:8f:20:58:66:d4:91:4a:ee:2b:8e:61:9b:5d: d1:22:86:30:73:d7:01:15:41:2b:55:b9:a7:74:35:10:eb:f1: 4e:64:11:b6:0f:9b:76:f8:52:d5:e0:bb:08:93:c6:83:31:c2: 0d:11:a2:56:fd:b6:26:60:aa:7e:41:fd:7c:91:96:d2:6b:db: 8a:f4:e3:60:42:7d:cd:83:f0:ec:84:d7:0d:85:cf:0f:8b:ca: f1:18:53:6a:1a:0c:25:e0:c0:ab:ad:0c:61:4f:87:fc:54:87: 7a:9b:78:d6:6c:db:ea:c0:23:81:7c:72:d0:0f:dc:1b:d8:a4: a2:53:87:58:af:08:fa:76:bc:a1:c4:1c:99:85:af:b1:9b:40: 5f:66:dd:b8:0e:3c:dd:b3:e5:3f:4b:13:10:de:08:92:c1:d2: 80:48:6c:fe:40:f1:42:0d:8c:e0:0f:b0:3a:6a:34:56:2d:83: 85:86:5b:e8:8a:46:f2:62:29:4b:39:5c:1a:3a:e6:0a:83:7b: 21:0f:86:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6tCoi6UyXsb+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk MDIzYTM0YTktMTA1NS00NWYwLWFjMmEtNjgzNTExMWYyODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJRjwwTxHZic3YD3vWXUaPpPwV9iim75iA5n hTzkHlaWz04WFiR6lgn71sSMH+77Qn0BwP3uGjjc4iFM4cNUhustkX5uLTu5nzC7 gvvjvsDGnu+MShH6wt/VFuJCUNCKQMgP61Xqo7nzVCAJtuiUKxPnMPQlzYs9dhFM wlGwZePV+Up00XERNyB5bqeQip2ayjxZo0FvqAiR+fz9H5gtpNBA4rMhDy/72BEo LYShEd5GzZoytZ9nzKfjvxU+TlSz0FSCbCgd3mEKvl8JY1N93dW9x7RFzHaFZ9Ni Hc9KaKrxHRyC6yAnqCcBCc+rP6tmWUengZv7FcaL/lpKe9/MbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGch0TAylpa2NmSYKkj8VoTHgmyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2M5YmVjMzctZDNhNC0z ZjBiLThjODUtNGZjZWM0YzJlNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWFHUnaOENd/yQMf7GXWFK/ftt31mZEY/z9y/Rsh7bwEaJflCQ/pvIC 7z8BoNOE5HGp5Uku9aXWsSORjyBYZtSRSu4rjmGbXdEihjBz1wEVQStVuad0NRDr 8U5kEbYPm3b4UtXguwiTxoMxwg0Rolb9tiZgqn5B/XyRltJr24r042BCfc2D8OyE 1w2Fzw+LyvEYU2oaDCXgwKutDGFPh/xUh3qbeNZs2+rAI4F8ctAP3BvYpKJTh1iv CPp2vKHEHJmFr7GbQF9m3bgOPN2z5T9LExDeCJLB0oBIbP5A8UINjOAPsDpqNFYt g4WGW+iKRvJiKUs5XBo65gqDeyEPhkM= -----END CERTIFICATE-----Generated at Sat Apr 5 08:02:12 2025 by rpki-client