$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c88f3e5-88a7-3096-b53a-d44961772ea8.roa File: 6c88f3e5-88a7-3096-b53a-d44961772ea8.roa (raw, json) Hash identifier: YBgbSCz8crPB8H6cClyiIgq/DkDOvZXqU0x9MqKCeLg= Subject key identifier: 8E:4B:33:9D:86:D5:F8:0A:C2:6C:B3:51:E6:E7:E3:2E:E4:44:21:FF Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848BBBB8319218566015DC48600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c88f3e5-88a7-3096-b53a-d44961772ea8.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 52.128.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:83:19:21:85:66:01:5d:c4:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=186e74af-b86f-4d1e-bbbd-2894fa7e4fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:f5:2a:19:51:14:53:93:26:f0:a5:e6:9d: 89:8d:02:a5:fe:6e:79:20:06:4d:ad:fd:9c:ac:62: 95:62:ef:53:5a:6a:94:78:66:9b:a4:04:f1:57:18: 64:9c:48:02:10:97:3c:66:0c:4a:8f:07:7e:ce:e2: 26:73:ce:41:e4:a4:ec:b3:25:7d:32:f0:e6:64:7e: 52:05:7f:79:77:d5:bf:77:a9:92:9f:0c:7b:ee:60: 50:4c:3e:19:97:63:b2:a5:c2:99:a7:54:17:27:1f: b5:e6:f4:85:39:13:dd:d8:0b:07:32:ae:00:96:df: 9f:f0:14:c0:8d:17:6a:6a:ac:39:f6:03:97:39:50: 43:78:66:2f:94:fc:eb:05:51:8a:a4:34:15:b9:c4: 5e:51:1e:a5:54:69:4d:41:59:64:fa:73:ac:ba:b5: 17:6f:32:2e:ee:c4:2f:42:48:cf:6b:92:17:04:6a: ab:09:13:ab:76:f5:d2:4e:f0:24:21:50:00:bd:e4: ae:61:ce:f7:f1:d4:47:c5:ea:b4:7c:f0:a1:1e:f3: 1a:53:5c:9c:2f:13:a4:10:ce:b2:d1:70:13:ee:de: df:11:89:d0:4d:2c:71:11:cd:d1:9d:cd:79:ac:a8: c9:68:b8:55:44:47:60:0c:a0:73:12:14:30:f8:54: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4B:33:9D:86:D5:F8:0A:C2:6C:B3:51:E6:E7:E3:2E:E4:44:21:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c88f3e5-88a7-3096-b53a-d44961772ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 52.128.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4a:7a:a0:93:c4:1e:42:12:d1:ff:fd:f8:f1:0c:66:1f:84: a2:d2:15:34:98:10:17:06:ad:53:e0:bb:46:e4:20:11:9d:af: 57:7c:a9:e2:4f:8c:a4:9a:2c:0b:98:80:f1:d4:fb:e1:65:90: 34:a9:0f:a7:91:79:c9:ea:69:8d:c7:85:2c:ba:98:88:01:d6: 81:a0:18:26:f9:5b:71:48:09:6a:5f:ad:82:3f:26:1f:4e:c6: 3f:36:2a:14:81:84:4e:aa:80:b9:c8:62:52:53:09:3c:85:d4: 01:cf:6c:4a:ba:ad:db:e5:8d:f1:07:ba:0b:34:8e:44:46:2e: d7:27:24:27:c9:f1:11:4a:ca:8b:5d:cc:b7:54:db:da:14:83: aa:2a:ac:95:46:02:15:30:34:52:99:de:2e:3e:aa:5f:aa:e8: 76:e4:c4:95:47:dd:e3:a2:50:72:18:19:bb:cf:ad:9c:a6:20: d0:6a:80:4e:82:c5:6e:5b:07:f0:84:b6:db:5f:22:e3:6d:05: 82:2c:c0:1e:80:6c:6b:d0:cb:37:9e:c5:82:8a:02:e7:f2:68: 32:20:60:b1:04:e4:bf:0c:1d:d7:f4:ea:c0:08:17:be:91:df: 40:23:ca:c5:85:cb:98:82:89:3b:4f:7c:92:5d:d5:43:59:8e: 4f:1a:3f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4MZIYVmAV3EhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MTg2ZTc0YWYtYjg2Zi00ZDFlLWJiYmQtMjg5NGZhN2U0ZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lz1KhlRFFOTJvCl5p2JjQKl/m55IAZNrf2c rGKVYu9TWmqUeGabpATxVxhknEgCEJc8ZgxKjwd+zuImc85B5KTssyV9MvDmZH5S BX95d9W/d6mSnwx77mBQTD4Zl2OypcKZp1QXJx+15vSFORPd2AsHMq4Alt+f8BTA jRdqaqw59gOXOVBDeGYvlPzrBVGKpDQVucReUR6lVGlNQVlk+nOsurUXbzIu7sQv QkjPa5IXBGqrCROrdvXSTvAkIVAAveSuYc738dRHxeq0fPChHvMaU1ycLxOkEM6y 0XAT7t7fEYnQTSxxEc3Rnc15rKjJaLhVREdgDKBzEhQw+FRXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5LM52G1fgKwmyzUebn4y7kRCH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNmM4OGYzZTUtODhhNy0z MDk2LWI1M2EtZDQ0OTYxNzcyZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFKeqCTxB5CEtH//fjxDGYfhKLSFTSYEBcGrVPgu0bkIBGdr1d8qeJP jKSaLAuYgPHU++FlkDSpD6eRecnqaY3HhSy6mIgB1oGgGCb5W3FICWpfrYI/Jh9O xj82KhSBhE6qgLnIYlJTCTyF1AHPbEq6rdvljfEHugs0jkRGLtcnJCfJ8RFKyotd zLdU29oUg6oqrJVGAhUwNFKZ3i4+ql+q6HbkxJVH3eOiUHIYGbvPrZymINBqgE6C xW5bB/CEtttfIuNtBYIswB6AbGvQyzeexYKKAufyaDIgYLEE5L8MHdf06sAIF76R 30AjysWFy5iCiTtPfJJd1UNZjk8aPy8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:32 2025 by rpki-client