$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa File: 7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa (raw, json) Hash identifier: VCwlW37DBt7nQ4HumS/GYavXIF3I7dZTFfzGMeZzOu8= Subject key identifier: DE:7C:35:98:8D:EC:18:9F:B0:43:40:51:C3:1D:B2:DC:5F:2F:33:C9 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848BBBB835E7D75EFC300D81180 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 397630 IP address blocks: 67.216.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:83:5e:7d:75:ef:c3:00:d8:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=2bbcb360-4007-46e7-b1ed-fa98802e1dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:85:9f:21:eb:a7:44:9f:99:ba:35:64:d5: 3c:42:f3:2e:4e:d7:1e:c9:d1:c4:34:f4:66:b0:ea: eb:b0:f2:d7:72:74:51:0d:72:af:3b:62:c2:08:fb: f5:32:e9:18:21:7e:ef:f1:8a:f2:2c:fd:a8:bd:b4: a6:d3:21:94:86:a6:7c:57:a1:ea:00:88:f3:4a:ac: 8c:6a:0d:71:6b:8b:2f:80:29:f3:ec:6c:5f:2b:4a: b3:2d:2c:67:20:fb:14:b5:14:74:d4:5f:16:ac:db: ca:4c:ac:af:c3:e8:95:e6:25:db:b0:e0:f5:90:44: 42:69:48:ec:9a:b0:10:34:2f:40:7d:f8:01:b7:76: 13:f8:b3:0d:0a:6e:e0:1d:fd:3a:ac:21:ba:ef:f5: f3:8a:90:ae:6f:c1:a9:cf:71:84:a6:92:86:89:99: 7d:44:9e:3d:d0:ee:c1:2d:b1:4b:c7:d1:8b:65:74: c1:a7:dc:19:11:93:08:28:9e:c0:67:5f:af:a5:22: 35:32:67:09:77:fe:02:14:1b:b5:bf:cd:8c:a7:c4: 80:79:69:ac:e5:b3:ad:46:2f:fe:4c:dd:b0:7d:41: 24:d2:1e:63:97:cd:7a:bf:77:1d:59:55:9b:be:5d: 56:b7:45:53:bc:dd:67:c3:76:9c:56:23:0a:fd:0f: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:35:98:8D:EC:18:9F:B0:43:40:51:C3:1D:B2:DC:5F:2F:33:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 67.216.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:68:1e:7d:0f:3a:6d:43:96:aa:86:4e:4c:e6:72:2f:c3:66: aa:38:14:cd:31:21:15:6e:8a:90:dd:29:95:ae:03:6e:7c:1f: fc:6c:7a:33:27:55:7e:2a:6f:99:6c:7c:46:c7:67:88:8a:0f: 1c:50:0d:e4:00:15:b9:c6:d6:83:55:05:2c:1d:50:08:19:fd: 6d:5c:df:4f:77:9c:89:91:1e:e6:f7:64:c4:02:10:88:35:dc: 6c:fd:04:d8:89:22:fe:29:8e:9a:f3:4f:46:0c:80:e6:db:78: 24:c0:9a:3c:bb:c1:1c:53:76:de:49:2d:c4:a1:8d:67:97:13: cf:8d:d9:bb:ba:98:d1:43:cb:36:a7:04:c0:90:ff:5c:c4:8d: 83:f4:6b:02:68:11:ae:04:46:bf:d5:41:fb:43:78:2f:08:01: 64:c7:88:f4:49:63:e8:72:01:6a:ce:4d:15:22:5b:db:88:9a: ca:38:b3:99:c3:98:c4:44:f0:f8:2e:71:0b:36:69:62:3e:7a: 92:81:4e:4c:5a:1a:b2:d3:42:8f:59:ff:ef:5a:63:d4:c0:1c: 21:ca:9a:01:f1:22:65:92:53:ec:a8:11:bc:96:30:8b:8e:e6: 02:0d:c1:63:0f:db:9f:49:71:fd:c1:d8:16:2e:a8:0f:07:13: c6:f9:9f:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4NefXXvwwDYEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MmJiY2IzNjAtNDAwNy00NmU3LWIxZWQtZmE5ODgwMmUxZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji6FnyHrp0Sfmbo1ZNU8QvMuTtceydHENPRm sOrrsPLXcnRRDXKvO2LCCPv1MukYIX7v8YryLP2ovbSm0yGUhqZ8V6HqAIjzSqyM ag1xa4svgCnz7GxfK0qzLSxnIPsUtRR01F8WrNvKTKyvw+iV5iXbsOD1kERCaUjs mrAQNC9AffgBt3YT+LMNCm7gHf06rCG67/XzipCub8Gpz3GEppKGiZl9RJ490O7B LbFLx9GLZXTBp9wZEZMIKJ7AZ1+vpSI1MmcJd/4CFBu1v82Mp8SAeWms5bOtRi/+ TN2wfUEk0h5jl816v3cdWVWbvl1Wt0VTvN1nw3acViMK/Q/EOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN58NZiN7BifsENAUcMdstxfLzPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvN2ExZmUxY2EtMzNmNS0z MzVlLTgyZjEtOGRjYzdiMWQ5N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9jsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpoHn0POm1DlqqGTkzmci/DZqo4FM0xIRVuipDdKZWuA258H/xsejMn VX4qb5lsfEbHZ4iKDxxQDeQAFbnG1oNVBSwdUAgZ/W1c3093nImRHub3ZMQCEIg1 3Gz9BNiJIv4pjprzT0YMgObbeCTAmjy7wRxTdt5JLcShjWeXE8+N2bu6mNFDyzan BMCQ/1zEjYP0awJoEa4ERr/VQftDeC8IAWTHiPRJY+hyAWrOTRUiW9uImso4s5nD mMRE8PgucQs2aWI+epKBTkxaGrLTQo9Z/+9aY9TAHCHKmgHxImWSU+yoEbyWMIuO 5gINwWMP259Jcf3B2BYuqA8HE8b5nwM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:58 2025 by rpki-client