$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa File: 64c7f1aa-e841-3477-a99e-7a146becbbc2.roa (raw, json) Hash identifier: iGjxE7Aykws5nal0LFf2bdTBg5ryyO6tgfFz4udYJgQ= Subject key identifier: 72:29:80:D2:52:D4:FD:C0:A4:94:6B:3F:4A:C1:16:C6:0C:2C:F8:82 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848A996347CD25651A19521CB80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397630 IP address blocks: 170.199.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:34:7c:d2:56:51:a1:95:21:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=06d0bba1-0933-403f-b5ed-cfca5e99c778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:c6:7e:c0:46:a4:45:e8:28:49:d7:7d:9e: b0:d0:70:64:8a:04:3d:dc:7b:76:56:e0:81:41:8f: 1d:e6:f7:0b:ff:60:4b:e0:ba:b7:58:c9:85:52:7d: 44:f8:44:ce:c3:03:12:35:e9:32:6d:4e:34:1f:c9: 5c:7d:1d:4b:6a:95:5d:b1:e6:e2:7b:be:a2:47:56: 14:7b:14:d8:6a:1b:eb:0b:a0:b1:6a:23:61:a3:68: f9:fa:56:2e:f1:07:9d:07:eb:f8:8e:42:e2:54:01: cc:af:7c:db:1a:2a:6d:6b:ba:4c:ec:ca:15:0a:01: 98:65:a9:fa:05:38:50:79:96:a2:5e:51:e7:1c:89: a1:5b:79:75:e0:05:64:87:2b:41:e3:32:8f:f1:06: 42:90:64:d4:5a:f0:3e:b1:e9:9d:d9:84:ac:56:21: 0d:01:d7:6a:4f:14:cc:60:c8:e9:3e:89:ca:78:4a: 77:bb:0c:16:cf:d9:d4:5c:5b:2f:d0:42:a0:ef:1a: 23:bb:cf:be:71:fd:4f:48:96:1e:55:fb:fa:39:c2: f3:c5:92:2f:b0:82:1d:f1:d1:5f:b6:f7:78:08:d8: 4b:ab:0d:ee:ae:6f:f4:9b:2c:3b:f2:8f:69:82:2e: 7e:5b:41:33:6d:40:e3:63:e5:be:de:4c:d7:82:73: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:80:D2:52:D4:FD:C0:A4:94:6B:3F:4A:C1:16:C6:0C:2C:F8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:55:59:67:51:ce:15:9a:7d:6c:36:bc:91:5c:01:e7:74:50: 48:6c:09:ff:37:fe:7c:c7:09:e1:3c:e7:4e:8e:26:63:12:d3: 45:14:e8:ae:93:2c:ee:e4:6d:47:f0:ad:29:91:a7:9a:31:39: dd:21:d4:7c:08:81:22:ee:1b:d6:61:db:8c:15:d4:59:76:5a: 0c:2d:89:e8:7c:27:48:2f:cf:35:26:ff:c0:de:0b:06:ac:34: fb:d4:4c:13:c4:1b:57:ed:f6:87:5c:9b:2e:7d:56:a9:28:79: e2:1e:42:76:49:b5:64:21:52:71:21:a3:eb:73:ae:eb:bc:86: d5:7d:a9:f9:6f:85:3c:75:dd:7d:85:44:26:c7:67:00:4b:a3: 34:f4:2e:b0:0d:b1:3f:92:55:1c:61:d6:55:1a:fd:bf:7e:3f: d8:3c:eb:b0:06:0c:35:10:ab:bd:f6:b5:74:13:8e:cb:84:a6: 06:33:21:a5:ed:82:2f:48:58:8a:cf:8b:85:71:e9:23:44:b5: df:1c:16:7e:23:26:f6:da:60:5f:8b:d1:b4:17:40:b2:cf:1b: f7:2f:0b:20:3d:a3:97:3a:15:95:11:33:ca:e2:a6:6b:e1:94: 61:16:d2:da:ae:ac:4e:37:df:13:be:06:a9:82:4a:f0:c4:5a: ca:c9:1b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljR80lZRoZUhy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDZkMGJiYTEtMDkzMy00MDNmLWI1ZWQtY2ZjYTVlOTljNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTfGfsBGpEXoKEnXfZ6w0HBkigQ93Ht2VuCB QY8d5vcL/2BL4Lq3WMmFUn1E+ETOwwMSNekybU40H8lcfR1LapVdsebie76iR1YU exTYahvrC6CxaiNho2j5+lYu8QedB+v4jkLiVAHMr3zbGipta7pM7MoVCgGYZan6 BThQeZaiXlHnHImhW3l14AVkhytB4zKP8QZCkGTUWvA+semd2YSsViENAddqTxTM YMjpPonKeEp3uwwWz9nUXFsv0EKg7xoju8++cf1PSJYeVfv6OcLzxZIvsIId8dFf tvd4CNhLqw3urm/0myw78o9pgi5+W0EzbUDjY+W+3kzXgnO+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIpgNJS1P3ApJRrP0rBFsYMLPiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjRjN2YxYWEtZTg0MS0z NDc3LWE5OWUtN2ExNDZiZWNiYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9VWWdRzhWafWw2vJFcAed0UEhsCf83/nzHCeE8506OJmMS00UU6K6T LO7kbUfwrSmRp5oxOd0h1HwIgSLuG9Zh24wV1Fl2Wgwtieh8J0gvzzUm/8DeCwas NPvUTBPEG1ft9odcmy59VqkoeeIeQnZJtWQhUnEho+tzruu8htV9qflvhTx13X2F RCbHZwBLozT0LrANsT+SVRxh1lUa/b9+P9g867AGDDUQq732tXQTjsuEpgYzIaXt gi9IWIrPi4Vx6SNEtd8cFn4jJvbaYF+L0bQXQLLPG/cvCyA9o5c6FZURM8ripmvh lGEW0tqurE433xO+BqmCSvDEWsrJG04= -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:34 2025 by rpki-client