$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa File: 3fa4a444-d4ce-3503-b060-20450537e4a1.roa (raw, json) Hash identifier: u47uj5dWyQ2LsNr6nAqOEPH0kUH+ilqO93RWj1RGxPk= Subject key identifier: A6:21:3C:35:A2:03:26:E6:5D:03:63:CF:80:A0:66:48:A1:4B:E7:0C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848D7A6545A1A47B16B0A32AC00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 397630 IP address blocks: 192.171.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:54:5a:1a:47:b1:6b:0a:32:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=7e3033fb-6a15-41a8-a0ff-862f5fd32afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:9a:94:07:aa:b5:c3:a7:3d:e7:ad:bb:f2: 5f:71:82:cd:18:ee:13:4b:d9:b3:dd:77:0b:28:d4: 7a:33:51:c8:2a:f6:5d:21:ff:9d:e2:38:bb:48:2d: 45:06:c7:7a:36:49:0f:17:bc:9d:42:87:ef:8f:16: ef:ba:01:cc:58:e7:5a:e6:99:26:8b:a2:0b:70:a1: 96:ca:f9:2b:6b:a2:87:ea:b9:16:04:4b:f4:9e:da: 26:3b:0d:cd:30:ba:39:a1:8c:ed:c8:30:48:35:c3: 60:b4:56:e5:34:b2:ff:8f:ed:e7:7e:98:43:c3:78: 53:e8:e2:d7:89:3f:f8:fc:c3:e6:af:7a:68:b4:93: b3:d2:da:49:a1:69:76:b0:ba:81:99:37:d7:d3:52: 57:a5:25:ee:cd:17:c3:ee:d3:2a:af:22:d1:52:d5: ad:0e:b8:c4:da:de:91:3e:1f:ad:dc:fe:be:6b:33: c1:44:f2:c5:85:29:ac:c9:2f:6f:c9:d0:3e:1a:06: c3:a2:f2:a3:dc:8b:5e:21:b3:8d:e1:20:2e:3d:c9: 94:53:ca:a3:e8:e8:e8:ab:9c:35:72:78:9e:87:91: 96:ba:0b:34:bb:e4:27:d7:c6:4b:5c:15:59:40:9c: e0:72:94:85:ac:bd:ac:30:f8:9b:7b:82:05:8a:c1: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:3C:35:A2:03:26:E6:5D:03:63:CF:80:A0:66:48:A1:4B:E7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:3c:ea:fd:91:27:38:46:70:52:94:81:4b:8e:26:19:93:bc: 78:bd:b8:c6:6a:51:eb:9d:cd:e6:a7:cc:5f:97:88:5b:df:8f: 47:99:07:8d:8e:d1:fd:4e:32:71:79:24:61:a2:d0:ca:c5:b4: fb:85:ff:bd:75:dd:3c:15:35:dd:07:05:32:e4:a3:70:bc:dd: 1b:55:c7:38:ec:53:02:53:24:42:a1:89:84:7c:8a:3a:ef:8e: 82:aa:3e:05:fe:60:b6:f1:c3:61:35:e4:0a:21:09:9a:df:5a: 25:18:37:a1:73:b6:fd:14:22:d3:dc:08:54:e3:2f:07:3f:f5: c6:b0:b5:7f:6a:e1:c7:b9:ed:be:92:dd:f4:c4:13:d2:0e:66: 66:62:b7:8a:80:2d:84:c0:12:a5:4a:7c:cb:18:ca:be:97:93: 0d:e6:7f:cf:ed:b0:31:81:26:15:02:2c:f7:09:ec:2f:4d:bb: 70:13:91:91:66:1e:ab:6c:9c:da:fc:0b:8c:3e:90:03:b8:88: ec:72:e9:95:66:1f:b5:6d:e5:d4:2e:36:3f:1d:5e:db:a3:1a: 32:5d:14:f9:56:77:c0:dd:13:32:7b:a4:86:d8:af:80:c0:9b: 42:6a:dc:5f:78:da:39:4a:cc:8a:83:b9:f1:67:79:cd:79:b9: 92:d8:41:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplRaGkexawoyrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk N2UzMDMzZmItNmExNS00MWE4LWEwZmYtODYyZjVmZDMyYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqalAeqtcOnPeetu/JfcYLNGO4TS9mz3XcL KNR6M1HIKvZdIf+d4ji7SC1FBsd6NkkPF7ydQofvjxbvugHMWOda5pkmi6ILcKGW yvkra6KH6rkWBEv0ntomOw3NMLo5oYztyDBINcNgtFblNLL/j+3nfphDw3hT6OLX iT/4/MPmr3potJOz0tpJoWl2sLqBmTfX01JXpSXuzRfD7tMqryLRUtWtDrjE2t6R Ph+t3P6+azPBRPLFhSmsyS9vydA+GgbDovKj3IteIbON4SAuPcmUU8qj6Ojoq5w1 cnieh5GWugs0u+Qn18ZLXBVZQJzgcpSFrL2sMPibe4IFisE0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYhPDWiAybmXQNjz4CgZkihS+cMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2ZhNGE0NDQtZDRjZS0z NTAzLWIwNjAtMjA0NTA1MzdlNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI486v2RJzhGcFKUgUuOJhmTvHi9uMZqUeudzeanzF+XiFvfj0eZB42O 0f1OMnF5JGGi0MrFtPuF/7113TwVNd0HBTLko3C83RtVxzjsUwJTJEKhiYR8ijrv joKqPgX+YLbxw2E15AohCZrfWiUYN6Fztv0UItPcCFTjLwc/9cawtX9q4ce57b6S 3fTEE9IOZmZit4qALYTAEqVKfMsYyr6Xkw3mf8/tsDGBJhUCLPcJ7C9Nu3ATkZFm HqtsnNr8C4w+kAO4iOxy6ZVmH7Vt5dQuNj8dXtujGjJdFPlWd8DdEzJ7pIbYr4DA m0Jq3F942jlKzIqDufFnec15uZLYQRo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:22 2025 by rpki-client