$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa File: cf74587b-27aa-32a1-8742-484a2c276e4e.roa (raw, json) Hash identifier: znyqSGwjoQx29E07y1bpt+zaLXr5bO6KyYsRgLi6Rxk= Subject key identifier: D6:FC:33:80:7E:61:F4:F0:B1:99:69:A3:DA:AE:68:30:6B:01:98:69 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848FD56CF76E63E3D4D7EBBAF80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cf:76:e6:3e:3d:4d:7e:bb:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=fb84c948-5e8c-48ee-b717-2ee0b35c5c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:46:92:ad:45:2c:df:92:70:13:0e:c9:df: f4:43:a9:6a:02:36:ff:fd:e4:ea:3c:a3:df:b8:52: 03:06:c2:11:13:97:fb:8f:83:ea:3f:8c:9d:c8:64: dc:7b:5b:f9:1b:b3:a9:26:e9:69:72:13:59:c4:54: f9:17:dd:bd:a8:ad:2c:f0:f9:a9:cd:f5:f1:c1:e2: 2a:20:06:74:e5:19:02:0b:ab:00:53:a2:e9:bc:2c: aa:e4:7f:57:35:70:fc:6c:b5:26:c2:bc:1e:07:c3: 5a:a3:4e:f7:4a:9e:eb:12:f2:90:ae:6a:ef:67:89: 8f:d8:55:dd:2e:a6:c9:89:70:be:a7:89:68:c8:89: 6b:37:2c:d5:29:53:99:66:92:60:01:de:da:8b:c3: 85:40:8d:0b:ba:df:97:53:22:d0:c2:b9:20:0f:d2: 3a:ce:f9:a1:1d:ab:ae:3c:b3:78:e4:2b:1b:e3:be: 8a:a3:93:9b:fb:5e:e3:7c:05:86:4a:e2:a2:0c:c4: 00:2e:4e:0f:74:16:64:02:8d:96:af:b9:65:f0:32: ed:70:23:8a:c7:8a:4e:f5:63:54:fc:c2:dd:90:32: 51:eb:bc:50:b7:10:8b:26:95:0e:40:90:a3:2a:0c: a9:90:5d:64:54:9b:a4:ec:19:cf:83:07:fa:40:f1: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FC:33:80:7E:61:F4:F0:B1:99:69:A3:DA:AE:68:30:6B:01:98:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:27:b8:f4:98:cd:e9:a4:d6:14:6c:3a:54:93:55:3e:41:64: 6c:35:9a:82:08:66:8e:7f:34:bc:a2:89:2a:e9:2e:07:4d:ca: 35:7d:38:9c:4d:1c:0c:ec:ef:a0:b2:ac:39:d1:60:58:c8:ea: ac:b3:4b:b0:34:81:68:c9:27:33:e6:53:a8:86:f6:16:1e:7e: 3c:f3:d5:1c:39:7c:6d:0b:19:6c:c6:85:69:27:43:61:ed:38: 47:8a:38:d7:b0:d4:ba:d2:6e:b1:48:27:67:fc:73:90:39:a9: 3e:a8:2e:dd:62:a7:35:2e:38:5a:6b:94:19:25:4f:b1:3b:3b: cf:a5:76:c0:77:2d:00:ea:0e:37:14:30:b1:6f:8e:0c:9d:27: 16:0d:6e:ed:d7:64:ef:43:4f:7c:fa:56:89:46:7f:96:ed:29: 83:3e:c3:79:43:62:a2:b1:ac:b5:28:e8:a2:33:df:d9:4f:1a: ec:5b:0d:94:61:f8:41:bc:94:7b:4e:3a:4f:88:ae:e7:5e:cb: 8e:32:12:95:3e:ad:9a:12:c0:8f:c7:19:a1:67:7e:11:8a:2b: c7:47:b6:28:00:2d:14:9c:2a:65:64:d6:73:19:5f:a9:53:1c: 69:43:ba:d4:af:6b:74:07:30:41:d2:2c:7a:53:36:98:ee:d2: ad:b0:3a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs925j49TX67r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmI4NGM5NDgtNWU4Yy00OGVlLWI3MTctMmVlMGIzNWM1YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbtGkq1FLN+ScBMOyd/0Q6lqAjb//eTqPKPf uFIDBsIRE5f7j4PqP4ydyGTce1v5G7OpJulpchNZxFT5F929qK0s8PmpzfXxweIq IAZ05RkCC6sAU6LpvCyq5H9XNXD8bLUmwrweB8Nao073Sp7rEvKQrmrvZ4mP2FXd LqbJiXC+p4loyIlrNyzVKVOZZpJgAd7ai8OFQI0Lut+XUyLQwrkgD9I6zvmhHauu PLN45Csb476Ko5Ob+17jfAWGSuKiDMQALk4PdBZkAo2Wr7ll8DLtcCOKx4pO9WNU /MLdkDJR67xQtxCLJpUOQJCjKgypkF1kVJuk7BnPgwf6QPFy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb8M4B+YfTwsZlpo9quaDBrAZhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2Y3NDU4N2ItMjdhYS0z MmExLTg3NDItNDg0YTJjMjc2ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQnuPSYzemk1hRsOlSTVT5BZGw1moIIZo5/NLyiiSrpLgdNyjV9OJxN HAzs76CyrDnRYFjI6qyzS7A0gWjJJzPmU6iG9hYefjzz1Rw5fG0LGWzGhWknQ2Ht OEeKONew1LrSbrFIJ2f8c5A5qT6oLt1ipzUuOFprlBklT7E7O8+ldsB3LQDqDjcU MLFvjgydJxYNbu3XZO9DT3z6VolGf5btKYM+w3lDYqKxrLUo6KIz39lPGuxbDZRh +EG8lHtOOk+Irudey44yEpU+rZoSwI/HGaFnfhGKK8dHtigALRScKmVk1nMZX6lT HGlDutSva3QHMEHSLHpTNpju0q2wOhU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:15:16 2025 by rpki-client