$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa File: 4364db7a-1be5-345a-9e0a-201915c52972.roa (raw, json) Hash identifier: t3YektG/6fD3xiQ9kA6UJIkOPQpqUs+RkzBSVJo84ww= Subject key identifier: 0F:24:27:1E:E6:ED:C0:F4:83:93:A1:70:30:6A:91:B6:50:43:BC:75 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849446941C812810043C4DE5CE0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 64267 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:41:c8:12:81:00:43:c4:de:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=b448b073-6d07-48cf-b19c-69f8c1caf29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:50:20:4c:75:ef:60:d7:06:c7:b6:1c:c5: f3:f9:3e:73:09:d8:fa:dc:98:60:97:4c:4a:27:d8: e0:b0:79:93:a8:fa:9b:cd:63:56:9b:86:83:60:ea: 0a:ee:d9:79:82:0c:11:57:25:41:88:e1:73:ff:7a: 9d:7b:b7:28:83:95:53:70:65:a7:e8:f2:68:23:2a: 81:38:b7:63:2f:ab:d0:8b:3a:1a:0b:7e:78:2f:b8: 5f:96:33:34:65:8a:6b:8c:2c:44:a5:ff:81:ec:81: 9a:a8:97:a6:59:1a:60:c0:6b:6f:f0:cc:59:79:15: 86:1f:26:fe:7e:85:9d:92:5c:62:f5:6b:11:f3:87: e3:06:b0:60:40:96:66:bf:25:db:90:39:f8:65:df: c4:58:b2:b3:7b:93:23:2f:26:48:fd:98:29:47:12: 46:67:6f:6f:ce:8c:35:93:2a:b0:48:14:66:a6:84: 78:a3:b4:b3:2b:55:fd:b5:08:b3:ab:61:39:82:94: bc:33:a0:c9:b0:cc:12:42:ad:65:7d:4a:bb:b2:e4: 1f:a1:b2:5e:6c:2c:2b:70:ec:ac:a4:f2:96:57:10: 0e:45:de:39:d0:78:1b:bc:46:db:60:27:eb:3a:90: 9c:92:9a:ee:65:51:ec:41:fe:45:e4:5e:1a:6e:52: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:27:1E:E6:ED:C0:F4:83:93:A1:70:30:6A:91:B6:50:43:BC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:61:dd:de:ab:3c:3a:53:7b:b5:28:d7:b6:ad:ad:3b:e0:e9: 7f:d7:5e:72:82:fb:90:a0:18:f9:a8:28:b8:af:e0:4a:4f:55: 44:49:3e:cc:25:47:87:23:df:49:46:da:c7:66:0d:b3:ea:2d: c6:cd:38:a8:9d:e9:e7:da:81:68:48:95:17:a8:e4:96:ea:cd: f1:a6:6b:ef:9a:14:bc:59:60:00:b6:1c:69:06:c3:a4:b3:d5: 8b:3b:51:3e:e2:63:77:3b:9c:97:32:6e:0b:2a:01:ec:c9:2b: 69:b7:5c:c4:d9:7f:46:c7:1b:97:e9:89:6f:25:3c:19:a3:f7: f8:ea:d9:bd:a5:d0:cc:4b:20:ca:5f:e5:03:96:ec:f4:82:26: 38:26:ac:81:7e:bc:6b:8c:8b:7d:95:a8:dc:74:55:fa:46:fd: bb:ee:64:e8:86:1e:5c:fe:ad:46:c8:af:6b:1c:25:50:da:ed: 46:36:5a:a4:83:53:2c:fd:fc:53:64:81:13:eb:e6:77:e6:3e: 49:06:28:7d:c7:9f:f0:8b:eb:00:00:15:ed:bb:03:5a:df:0a: c5:b0:63:e2:01:a3:70:96:7d:cd:68:dd:99:89:0c:57:fc:27: 2b:24:73:0b:f6:4c:66:9e:b0:83:bd:98:58:31:27:f4:c5:4b: c4:df:1d:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUHIEoEAQ8TeXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YjQ0OGIwNzMtNmQwNy00OGNmLWIxOWMtNjlmOGMxY2FmMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjpQIEx172DXBse2HMXz+T5zCdj63Jhgl0xK J9jgsHmTqPqbzWNWm4aDYOoK7tl5ggwRVyVBiOFz/3qde7cog5VTcGWn6PJoIyqB OLdjL6vQizoaC354L7hfljM0ZYprjCxEpf+B7IGaqJemWRpgwGtv8MxZeRWGHyb+ foWdklxi9WsR84fjBrBgQJZmvyXbkDn4Zd/EWLKze5MjLyZI/ZgpRxJGZ29vzow1 kyqwSBRmpoR4o7SzK1X9tQizq2E5gpS8M6DJsMwSQq1lfUq7suQfobJebCwrcOys pPKWVxAORd450HgbvEbbYCfrOpCckpruZVHsQf5F5F4ablKRKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8kJx7m7cD0g5OhcDBqkbZQQ7x1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDM2NGRiN2EtMWJlNS0z NDVhLTllMGEtMjAxOTE1YzUyOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACph3d6rPDpTe7Uo17atrTvg6X/XXnKC+5CgGPmoKLiv4EpPVURJPswl R4cj30lG2sdmDbPqLcbNOKid6efagWhIlReo5JbqzfGma++aFLxZYAC2HGkGw6Sz 1Ys7UT7iY3c7nJcybgsqAezJK2m3XMTZf0bHG5fpiW8lPBmj9/jq2b2l0MxLIMpf 5QOW7PSCJjgmrIF+vGuMi32VqNx0VfpG/bvuZOiGHlz+rUbIr2scJVDa7UY2WqSD Uyz9/FNkgRPr5nfmPkkGKH3Hn/CL6wAAFe27A1rfCsWwY+IBo3CWfc1o3ZmJDFf8 Jyskcwv2TGaesIO9mFgxJ/TFS8TfHaI= -----END CERTIFICATE-----Generated at Thu Apr 17 20:19:12 2025 by rpki-client