$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9cedfa24-283b-371a-b17b-5296323f76c0.roa File: 9cedfa24-283b-371a-b17b-5296323f76c0.roa (raw, json) Hash identifier: L8EPZ/2eYEd2+pvXdU794RsPftFAUAhGsBSkBHH7hFk= Subject key identifier: BB:77:E0:31:9C:4D:D2:A3:7E:95:A9:DC:45:3E:B6:F3:FE:83:9A:8F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848D7A655E4C09E638BF13E0D80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9cedfa24-283b-371a-b17b-5296323f76c0.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 199.34.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:55:e4:c0:9e:63:8b:f1:3e:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=ad32cc4c-f1fd-41ce-a8fe-a1530e9b9e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:4e:90:d4:7f:c5:1f:31:69:e8:50:9b:06: 59:c6:cd:a6:ea:fb:3b:70:fb:e0:14:63:07:4c:77: 05:1b:79:97:09:db:5a:92:6c:90:be:e3:65:6c:58: e4:48:fb:1b:b0:68:d7:19:57:52:9c:6f:4a:05:fd: 91:24:fc:88:c3:d8:44:bc:71:86:58:34:6a:de:94: 3a:27:51:71:1d:a0:ac:92:0c:2f:c4:69:0b:39:d8: 9e:38:71:1b:01:4a:5a:7c:e1:bf:37:be:c0:ef:0d: 05:40:db:39:5d:86:83:d8:80:2b:e2:51:47:e4:39: db:54:86:9a:b9:20:5f:98:a0:5c:b0:27:7c:58:f5: 59:02:70:63:d3:be:51:3d:07:ed:3b:09:46:e0:18: b6:6b:4e:cb:67:e0:22:b2:71:d6:0c:06:d0:51:79: 04:dd:9e:bf:a6:85:89:ed:6b:8a:66:7f:45:5c:4e: 4d:4d:8c:bf:99:f2:1a:89:cb:50:35:b1:16:2e:07: be:70:fe:6d:30:d9:1b:ff:cb:c7:07:13:58:d9:cf: 98:df:13:17:38:fc:70:63:18:bf:07:9d:f3:8f:8f: a7:cf:cd:c8:11:d9:67:88:7e:e7:2b:4a:08:fc:5b: 4d:c0:76:c9:03:9c:b4:7a:f2:9a:f8:8a:2e:b6:2b: cf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:77:E0:31:9C:4D:D2:A3:7E:95:A9:DC:45:3E:B6:F3:FE:83:9A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9cedfa24-283b-371a-b17b-5296323f76c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.34.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d4:01:41:7c:42:e3:b9:9b:4e:7a:42:d4:61:96:2a:50:e6: 34:8d:f6:d0:88:ac:a1:a4:e7:39:02:4b:68:69:78:21:45:46: 23:83:ee:ea:59:50:73:39:79:8f:38:52:1c:0d:79:8d:a7:2c: 75:d6:58:f6:8c:eb:d3:63:f1:31:10:a9:9d:b6:a6:96:87:af: a5:29:e6:7f:e9:9b:36:b9:99:6e:38:8b:50:10:21:0e:ff:23: da:79:45:49:d7:24:53:e1:11:0c:7c:5c:65:b9:93:93:af:23: 05:4c:fa:c1:96:66:b4:ee:34:bd:5f:40:33:f9:5b:70:1d:c7: d2:0f:9b:dc:36:51:68:2e:c3:79:65:61:66:14:73:f1:6c:39: 21:02:d3:ab:cd:49:35:d2:e0:fe:bd:7b:d2:5b:77:69:9d:08: 9c:41:f9:ff:a1:c6:0a:ac:94:a6:72:34:5b:b4:da:01:89:b7: 6e:33:ee:35:d5:dd:02:e0:ac:41:88:8c:68:c3:20:85:5a:5a: 5c:a8:bb:43:5b:5a:ba:bd:43:d5:54:5f:32:5f:26:61:b2:f0: 87:20:10:6a:dd:59:f5:cb:c1:38:c3:24:5c:b1:e1:74:a8:29: bd:49:c8:b0:31:31:ce:d9:93:47:8e:31:05:e7:65:be:1b:ba: 15:10:ad:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplXkwJ5ji/E+DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk YWQzMmNjNGMtZjFmZC00MWNlLWE4ZmUtYTE1MzBlOWI5ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7tOkNR/xR8xaehQmwZZxs2m6vs7cPvgFGMH THcFG3mXCdtakmyQvuNlbFjkSPsbsGjXGVdSnG9KBf2RJPyIw9hEvHGGWDRq3pQ6 J1FxHaCskgwvxGkLOdieOHEbAUpafOG/N77A7w0FQNs5XYaD2IAr4lFH5DnbVIaa uSBfmKBcsCd8WPVZAnBj075RPQftOwlG4Bi2a07LZ+AisnHWDAbQUXkE3Z6/poWJ 7WuKZn9FXE5NTYy/mfIaictQNbEWLge+cP5tMNkb/8vHBxNY2c+Y3xMXOPxwYxi/ B53zj4+nz83IEdlniH7nK0oI/FtNwHbJA5y0evKa+IoutivPBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt34DGcTdKjfpWp3EU+tvP+g5qPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWNlZGZhMjQtMjgzYi0z NzFhLWIxN2ItNTI5NjMyM2Y3NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3UAUF8QuO5m056QtRhlipQ5jSN9tCIrKGk5zkCS2hpeCFFRiOD7upZ UHM5eY84UhwNeY2nLHXWWPaM69Nj8TEQqZ22ppaHr6Up5n/pmza5mW44i1AQIQ7/ I9p5RUnXJFPhEQx8XGW5k5OvIwVM+sGWZrTuNL1fQDP5W3Adx9IPm9w2UWguw3ll YWYUc/FsOSEC06vNSTXS4P69e9Jbd2mdCJxB+f+hxgqslKZyNFu02gGJt24z7jXV 3QLgrEGIjGjDIIVaWlyou0NbWrq9Q9VUXzJfJmGy8IcgEGrdWfXLwTjDJFyx4XSo Kb1JyLAxMc7Zk0eOMQXnZb4buhUQrZM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:25:42 2025 by rpki-client