$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6253032c-ea62-3976-b4c4-df1f90e5e677.roa File: 6253032c-ea62-3976-b4c4-df1f90e5e677.roa (raw, json) Hash identifier: DSUxQxFLaffdDL0SEXeO92yr0kox7foCPF0AQMS/0nY= Subject key identifier: EE:4C:A9:CE:98:59:46:BA:ED:17:70:8F:F9:CB:23:7C:97:C9:5E:E3 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858488815EBC3EFF97006965ADD00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6253032c-ea62-3976-b4c4-df1f90e5e677.roa Signing time: Mon 13 Jan 2025 14:00:52 +0000 ROA not before: Mon 13 Jan 2025 14:00:52 +0000 ROA not after: Sun 13 Apr 2025 13:00:52 +0000 asID: 7018 IP address blocks: 172.96.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:15:eb:c3:ef:f9:70:06:96:5a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jan 13 14:00:52 2025 GMT Not After : Apr 13 13:00:52 2025 GMT Subject: CN=3d793890-e177-4a0a-841f-6aca285b7e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:4e:a9:fc:60:a5:3d:44:51:e1:c7:58:65: cb:dc:b9:07:98:ac:82:31:d3:d6:8f:13:bc:f5:4e: aa:98:99:8e:55:22:46:dc:02:ef:8a:e9:b2:90:39: e3:d3:8c:25:c0:11:2b:28:8a:2a:9e:09:ec:50:77: 10:04:b3:b2:2c:04:56:48:2b:05:42:8c:e4:a1:b7: d0:f5:ae:bb:99:f2:66:b3:4a:4e:6a:a1:43:a7:ee: 3e:a2:e2:e3:2b:6e:4e:9f:23:b3:e9:77:00:0a:23: 53:53:7a:03:7c:7a:d2:5d:17:42:6d:23:19:4a:c2: fb:22:45:8e:80:f4:1d:ba:29:65:92:3f:b6:ac:56: 49:46:29:be:d2:eb:fe:93:29:41:62:be:6a:d8:8b: 4c:85:6d:c9:5d:99:37:06:ea:9f:3f:3a:2d:36:81: 7a:53:c2:82:33:c0:31:69:42:a0:9d:71:2f:b1:07: d5:56:53:94:52:9b:ee:c1:dc:6a:3d:d5:a7:44:c1: a6:9f:a7:d5:a8:6f:cc:1b:3f:5f:e2:a9:5b:99:7b: 33:e3:e2:5c:a7:c8:80:33:1d:9e:35:74:d1:7f:6a: 65:c9:22:a8:98:83:1c:05:80:bd:58:5b:93:f6:62: e5:b6:2e:2c:39:52:11:90:72:c9:e5:a9:58:cc:b4: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:A9:CE:98:59:46:BA:ED:17:70:8F:F9:CB:23:7C:97:C9:5E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6253032c-ea62-3976-b4c4-df1f90e5e677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ae:b7:60:b8:18:e8:6e:32:0c:51:09:e0:eb:be:0c:6b:6e: bd:11:7a:df:f0:d6:f2:3f:86:e0:b0:12:03:da:8b:de:67:11: e1:c1:68:a3:38:03:40:80:3f:2f:37:83:b7:22:db:33:0d:11: aa:20:5e:98:ba:20:97:8c:30:50:e7:83:7d:30:bd:b1:dc:bc: 23:20:38:f7:c8:9c:67:02:8d:6a:a0:15:7d:ed:ac:b2:3b:a9: f9:9b:ab:a0:07:f4:45:56:5c:45:4a:f3:4e:07:57:d3:cd:ed: 40:56:3f:7b:d3:7a:d4:4d:93:42:e9:5c:ee:e4:72:5a:a9:02: c0:dc:16:c7:58:30:47:fa:1d:a4:16:c8:05:64:ab:18:8d:e6: 1a:57:a5:ba:f3:3f:6a:bd:2c:81:09:18:31:5a:a0:45:bf:eb: 03:f4:a4:52:a3:ef:cd:29:f6:ba:3c:89:b3:09:41:a9:85:03: 68:32:2a:33:cc:d2:4d:d5:a7:94:64:4c:d8:41:84:6a:0e:9b: ab:53:9b:f0:1c:78:28:8e:86:ba:2a:3a:fb:99:4f:ab:7b:55: 25:25:b5:93:09:ab:df:fd:b3:24:88:c9:2e:ee:8c:ff:6f:d0: c9:e6:70:f6:54:66:bf:cf:d3:55:85:29:44:1b:1f:07:41:9a: d5:50:9d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIFevD7/lwBpZa3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk M2Q3OTM4OTAtZTE3Ny00YTBhLTg0MWYtNmFjYTI4NWI3ZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG9OqfxgpT1EUeHHWGXL3LkHmKyCMdPWjxO8 9U6qmJmOVSJG3ALviumykDnj04wlwBErKIoqngnsUHcQBLOyLARWSCsFQozkobfQ 9a67mfJms0pOaqFDp+4+ouLjK25OnyOz6XcACiNTU3oDfHrSXRdCbSMZSsL7IkWO gPQduillkj+2rFZJRim+0uv+kylBYr5q2ItMhW3JXZk3BuqfPzotNoF6U8KCM8Ax aUKgnXEvsQfVVlOUUpvuwdxqPdWnRMGmn6fVqG/MGz9f4qlbmXsz4+Jcp8iAMx2e NXTRf2plySKomIMcBYC9WFuT9mLlti4sOVIRkHLJ5alYzLR1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5Mqc6YWUa67Rdwj/nLI3yXyV7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjI1MzAzMmMtZWE2Mi0z OTc2LWI0YzQtZGYxZjkwZTVlNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSut2C4GOhuMgxRCeDrvgxrbr0Ret/w1vI/huCwEgPai95nEeHBaKM4 A0CAPy83g7ci2zMNEaogXpi6IJeMMFDng30wvbHcvCMgOPfInGcCjWqgFX3trLI7 qfmbq6AH9EVWXEVK804HV9PN7UBWP3vTetRNk0LpXO7kclqpAsDcFsdYMEf6HaQW yAVkqxiN5hpXpbrzP2q9LIEJGDFaoEW/6wP0pFKj780p9ro8ibMJQamFA2gyKjPM 0k3Vp5RkTNhBhGoOm6tTm/AceCiOhroqOvuZT6t7VSUltZMJq9/9sySIyS7ujP9v 0MnmcPZUZr/P01WFKUQbHwdBmtVQnec= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:49 2025 by rpki-client