$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa File: 5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json) Hash identifier: thu2YiL+krQPAOplCq+L67tgoe6tHJZbUdnTUult5kw= Subject key identifier: 2C:D0:C3:D8:BC:2F:6A:B8:17:4C:27:A1:A4:E3:1E:D3:D6:2B:64:47 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848BBBB83BBC1D08B73687AFA00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 199.250.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:83:bb:c1:d0:8b:73:68:7a:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=59dcc0f8-227f-44d3-b43b-31f1c704986d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:ab:cd:44:a6:08:aa:90:0e:1a:12:15:f4: 78:af:53:75:39:24:b2:76:bb:b7:8d:45:e9:93:5c: 18:12:91:81:f2:b6:38:35:02:46:b1:76:a6:fe:75: 15:79:39:39:39:09:ab:a5:31:51:e9:47:a5:c2:4a: 68:7e:f8:30:04:4c:ac:6a:6c:9e:fe:3e:6f:6b:4a: c0:c8:88:ce:ae:11:02:53:1c:44:ff:a3:80:37:9e: e2:77:ee:ae:8b:0f:4a:68:0b:4a:7e:a5:bb:7e:89: 5a:05:a6:ec:47:28:58:bb:62:65:dc:48:c9:a3:ed: 90:ac:00:94:c9:d5:10:53:53:b8:61:a6:60:77:7d: ac:91:2f:56:74:f0:4f:98:91:13:9c:bd:2e:66:6d: b3:ad:18:cf:e1:04:f7:c6:09:57:a8:70:35:65:1e: 54:55:d8:1f:bb:78:2d:1c:ae:af:9c:fd:26:45:9e: ce:1d:df:ce:e7:7c:13:ec:e6:9e:28:bb:49:3a:21: f4:76:a9:3d:41:b8:7a:e0:a4:ba:dc:3a:e5:53:56: c3:6a:5c:cb:10:a2:cd:ee:4a:67:e9:1c:57:83:cb: e4:9b:91:f5:e5:ed:06:89:79:ab:fe:f3:70:b9:44: a2:69:85:80:b7:7c:4f:64:ba:47:22:63:1a:80:79: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D0:C3:D8:BC:2F:6A:B8:17:4C:27:A1:A4:E3:1E:D3:D6:2B:64:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6a:20:ad:37:92:71:e1:6e:16:9b:3c:4b:fc:a2:d2:f4:44: 85:40:0d:f3:be:19:2e:a2:36:49:1d:1a:9a:eb:4e:df:df:8f: cb:13:3a:e0:c5:91:2a:9b:1a:ee:b1:5f:c5:25:aa:8d:70:40: a4:59:9a:51:10:8a:9f:d9:1d:3e:de:1d:41:ad:64:3c:b0:44: 49:a8:73:82:6e:05:d3:d4:cd:e9:f4:82:9f:89:b5:5e:96:31: c1:5e:b1:72:72:45:0e:24:7b:e6:4e:e5:8b:70:cd:85:47:13: 38:64:71:bf:b9:6d:cd:79:50:03:a1:cf:8b:49:b5:50:c4:3d: 94:5e:e5:9f:54:79:be:b3:05:4c:65:c5:a9:d2:22:54:f4:96: 14:41:ff:c5:6f:ac:b5:26:f4:ef:f2:2a:fb:0f:06:6e:8d:7a: d0:6b:68:f7:aa:17:b2:bc:1d:1b:85:b6:da:3d:b7:01:9c:80: 2f:4c:01:a1:91:37:4f:61:45:f0:3a:1f:bb:58:b6:dd:03:5e: 8e:20:d4:04:34:7e:51:d6:2e:21:43:c0:ca:97:db:8a:38:35: d4:a4:f4:df:dd:e5:4c:ae:09:03:8a:82:91:22:e0:54:7b:b8: ca:e8:f7:2f:68:32:fc:1f:3a:cd:51:93:87:f8:2d:75:92:6d: 62:be:63:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4O7wdCLc2h6+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NTlkY2MwZjgtMjI3Zi00NGQzLWI0M2ItMzFmMWM3MDQ5ODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4KrzUSmCKqQDhoSFfR4r1N1OSSydru3jUXp k1wYEpGB8rY4NQJGsXam/nUVeTk5OQmrpTFR6UelwkpofvgwBEysamye/j5va0rA yIjOrhECUxxE/6OAN57id+6uiw9KaAtKfqW7folaBabsRyhYu2Jl3EjJo+2QrACU ydUQU1O4YaZgd32skS9WdPBPmJETnL0uZm2zrRjP4QT3xglXqHA1ZR5UVdgfu3gt HK6vnP0mRZ7OHd/O53wT7OaeKLtJOiH0dqk9Qbh64KS63DrlU1bDalzLEKLN7kpn 6RxXg8vkm5H15e0GiXmr/vNwuUSiaYWAt3xPZLpHImMagHksuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzQw9i8L2q4F0wnoaTjHtPWK2RHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWRkNjcxMmUtNjE3OC0z OTkzLTg4NzMtYWI5Y2Y1ZGUwZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdqIK03knHhbhabPEv8otL0RIVADfO+GS6iNkkdGprrTt/fj8sTOuDF kSqbGu6xX8Ulqo1wQKRZmlEQip/ZHT7eHUGtZDywREmoc4JuBdPUzen0gp+JtV6W McFesXJyRQ4ke+ZO5YtwzYVHEzhkcb+5bc15UAOhz4tJtVDEPZRe5Z9Ueb6zBUxl xanSIlT0lhRB/8VvrLUm9O/yKvsPBm6NetBraPeqF7K8HRuFtto9twGcgC9MAaGR N09hRfA6H7tYtt0DXo4g1AQ0flHWLiFDwMqX24o4NdSk9N/d5UyuCQOKgpEi4FR7 uMro9y9oMvwfOs1Rk4f4LXWSbWK+Y1A= -----END CERTIFICATE-----Generated at Sat Apr 5 08:09:21 2025 by rpki-client