$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c2e54a85-b5c0-3e48-9547-9b61303ddd61.roa File: c2e54a85-b5c0-3e48-9547-9b61303ddd61.roa (raw, json) Hash identifier: XTvIGXpEx1xJpOmJt802nSX4eI0A1XASgg8bJbC0KdA= Subject key identifier: FC:01:C4:76:30:5F:E7:0E:D7:22:E6:CB:D3:EB:8E:D8:96:3E:29:62 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848D7A65448BECF93B8EF676500 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c2e54a85-b5c0-3e48-9547-9b61303ddd61.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 192.171.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:54:48:be:cf:93:b8:ef:67:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=cdb5e149-6134-4aa3-a095-d803bed0aa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:5c:24:bd:30:24:25:0b:42:59:41:f1:e4: 2b:16:dd:25:68:93:91:a3:08:78:30:b5:f3:e6:b8: 0e:16:d6:3d:81:f9:e3:d2:b7:bc:21:49:6a:92:06: 74:b5:59:82:7d:1f:d6:72:68:b3:77:c3:ce:cc:86: e7:82:a1:5f:92:7b:58:9e:23:7f:bf:d8:5b:21:c3: 76:50:b5:e8:01:70:c2:2f:35:50:75:aa:c0:26:00: e7:ba:90:6d:a5:e1:a7:e9:71:8e:f4:51:7d:8c:79: aa:bf:e2:46:bc:9a:60:cc:fe:e3:27:c6:ab:af:23: 1e:4f:29:ad:22:2c:48:df:0d:1e:0b:82:87:ac:09: 10:72:06:2a:dc:cb:5c:c5:45:ce:ae:4d:2d:49:33: 1e:c9:ef:32:1d:03:c1:6e:11:eb:1e:b4:74:01:a2: 2d:6b:38:27:c7:db:73:ac:5c:24:ff:93:40:11:59: a0:13:44:99:9e:af:50:1b:e8:5a:7a:4e:0f:4e:b8: 2d:1f:19:87:1f:9a:34:1d:44:ca:f0:ad:ad:4e:b9: 59:f8:32:d3:10:63:23:3b:16:ce:b3:63:dd:0d:be: 99:ea:36:fd:74:6a:20:99:1d:7d:07:4f:cc:29:7d: e2:76:72:95:3e:d9:32:52:ba:f5:95:57:10:e9:ad: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:01:C4:76:30:5F:E7:0E:D7:22:E6:CB:D3:EB:8E:D8:96:3E:29:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c2e54a85-b5c0-3e48-9547-9b61303ddd61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:67:80:49:29:95:ac:8f:ba:c9:9e:ab:3f:20:98:36:bb:97: 67:d7:7d:d5:57:3b:14:b6:6f:00:5b:b7:06:64:3a:03:70:92: 6c:99:64:34:e8:9b:29:30:43:40:35:e7:a8:61:e1:fc:76:83: 57:f8:50:6a:74:5f:4b:60:4a:35:13:8e:8f:89:e1:b3:dd:9e: fb:2d:4e:a4:21:25:3d:c3:d5:dc:df:f5:fe:48:c4:21:61:25: 93:ce:20:83:03:9e:c1:9f:8c:11:23:6c:ed:b0:55:e4:c5:6e: 36:2a:f5:be:ad:57:26:3e:a0:46:eb:88:04:3a:e5:81:b9:15: 43:83:d6:49:30:20:f3:33:1e:42:9f:e1:83:b9:6a:4e:c2:fe: 15:e2:38:ac:55:03:68:5a:9e:c3:04:58:13:17:8a:ba:dc:47: 6e:1b:12:7c:cb:d5:46:06:6a:ff:f3:a3:c4:ca:0c:12:07:fd: a3:62:7e:ca:aa:9d:29:42:6d:4e:ed:92:9d:f9:19:9a:16:3d: fd:a3:ff:01:ee:c8:52:e0:07:42:22:93:94:f3:5a:ab:55:a8: 56:fd:98:d5:d8:ee:e2:a1:7d:1c:74:ed:af:b2:6c:c9:5f:d3: bf:e9:ee:d7:d6:f2:20:68:3c:89:23:bf:ca:67:18:da:9f:d9: d1:05:b4:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplRIvs+TuO9nZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2RiNWUxNDktNjEzNC00YWEzLWEwOTUtZDgwM2JlZDBhYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssRcJL0wJCULQllB8eQrFt0laJORowh4MLXz 5rgOFtY9gfnj0re8IUlqkgZ0tVmCfR/Wcmizd8POzIbngqFfkntYniN/v9hbIcN2 ULXoAXDCLzVQdarAJgDnupBtpeGn6XGO9FF9jHmqv+JGvJpgzP7jJ8arryMeTymt IixI3w0eC4KHrAkQcgYq3MtcxUXOrk0tSTMeye8yHQPBbhHrHrR0AaItazgnx9tz rFwk/5NAEVmgE0SZnq9QG+haek4PTrgtHxmHH5o0HUTK8K2tTrlZ+DLTEGMjOxbO s2PdDb6Z6jb9dGogmR19B0/MKX3idnKVPtkyUrr1lVcQ6a1/WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwBxHYwX+cO1yLmy9PrjtiWPiliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzJlNTRhODUtYjVjMC0z ZTQ4LTk1NDctOWI2MTMwM2RkZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5ngEkplayPusmeqz8gmDa7l2fXfdVXOxS2bwBbtwZkOgNwkmyZZDTo mykwQ0A156hh4fx2g1f4UGp0X0tgSjUTjo+J4bPdnvstTqQhJT3D1dzf9f5IxCFh JZPOIIMDnsGfjBEjbO2wVeTFbjYq9b6tVyY+oEbriAQ65YG5FUOD1kkwIPMzHkKf 4YO5ak7C/hXiOKxVA2hansMEWBMXirrcR24bEnzL1UYGav/zo8TKDBIH/aNifsqq nSlCbU7tkp35GZoWPf2j/wHuyFLgB0Iik5TzWqtVqFb9mNXY7uKhfRx07a+ybMlf 07/p7tfW8iBoPIkjv8pnGNqf2dEFtGY= -----END CERTIFICATE-----Generated at Fri Mar 14 09:06:50 2025 by rpki-client