$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa File: ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa (raw, json) Hash identifier: Uy5HdVSylRqLlusQ2lQ4ng3KVywaO1p56bd85LmFgBQ= Subject key identifier: 8B:C5:19:C4:91:42:04:A0:AC:5A:3E:CD:10:B1:5A:C0:0B:95:C2:30 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848D7A65437F072EF6B3A734880 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 192.171.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:54:37:f0:72:ef:6b:3a:73:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=1bb0cd1c-b3ef-4075-a354-75f5a17a5c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:41:35:a9:68:e5:48:37:f8:02:eb:db:4c:16: ec:f2:39:08:63:e0:6d:c5:df:08:e2:59:eb:fe:cb: 6a:1d:9d:02:4a:41:c7:4e:0f:c4:4b:2f:66:22:73: 73:c6:bc:f3:c2:ce:23:01:29:21:c5:63:b9:5f:18: b9:14:88:33:72:c7:e6:36:40:90:0b:e8:bb:cd:a1: 53:d2:2c:da:e0:db:ba:c6:ca:e2:41:b1:71:a4:eb: f8:b4:62:08:11:f5:f1:6f:f4:41:ac:03:a5:b3:31: d4:f8:a0:4c:25:b0:cb:6a:4a:43:17:32:e2:ed:e5: 97:54:dd:64:28:12:77:1a:f0:35:bb:30:9f:05:e8: b3:5d:31:dc:e9:0d:38:1b:ee:5c:09:12:d5:af:f8: b7:69:ee:c1:3a:da:e9:b7:9d:e4:30:2e:b9:6f:06: d6:a2:26:c8:6a:1c:5c:33:b5:40:1d:9a:41:20:6a: 7b:58:86:24:c4:05:f1:ee:39:e8:71:48:53:f1:d0: e0:4e:80:7c:53:75:78:38:f5:11:0e:a6:ab:c2:b4: 0b:ff:16:fd:8e:ec:96:a5:ee:d8:0e:00:00:e7:dd: 11:1f:14:f4:f2:65:22:c7:0e:50:46:1e:b5:01:56: 2a:0a:9b:c4:88:77:f1:b4:ac:98:32:fc:66:f7:bf: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:19:C4:91:42:04:A0:AC:5A:3E:CD:10:B1:5A:C0:0B:95:C2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:20:1c:e5:c2:a6:9f:9e:51:ee:fa:40:64:70:62:33:a5:ec: 00:4b:2d:83:85:ec:c1:aa:47:c3:3f:a6:81:02:f1:b6:b2:80: ac:28:14:d4:aa:7c:04:12:3e:a1:e9:94:4b:91:e7:12:b8:05: 1b:e1:4d:4b:e1:e4:c8:e0:e5:84:04:e9:7b:5f:bd:91:f7:c1: e1:02:be:d1:90:ce:93:4e:6e:59:ff:d7:e9:6c:02:df:80:52: 0d:48:40:36:c6:f6:7c:70:62:a4:c2:48:c2:a6:09:59:73:0e: c2:b6:c4:4c:d1:e3:3e:82:68:bd:8f:7c:5f:a7:78:b2:30:e3: 14:2a:27:fd:04:fb:2c:55:22:98:9d:46:83:88:62:39:dd:fb: e9:3e:77:7b:95:cb:6b:58:0b:4c:fc:99:ae:13:e3:42:f0:6a: 85:4b:20:1b:2d:a7:57:1b:ad:1f:78:bd:f7:c9:52:2f:8e:6f: bf:97:19:63:b7:cd:00:1b:62:d4:a4:e0:1b:99:f5:e0:39:fd: 15:78:e2:35:5a:8b:19:86:27:7e:be:69:b9:6a:1a:bf:87:ca: d0:7b:ec:5c:b7:53:1e:1a:0b:da:ae:e7:e1:37:9d:3e:47:d1: 04:fd:68:aa:a8:ee:23:d8:ba:44:2c:e4:8c:93:22:ef:64:1c: fa:8e:c4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplQ38HLvazpzSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MWJiMGNkMWMtYjNlZi00MDc1LWEzNTQtNzVmNWExN2E1YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikE1qWjlSDf4AuvbTBbs8jkIY+Btxd8I4lnr /stqHZ0CSkHHTg/ESy9mInNzxrzzws4jASkhxWO5Xxi5FIgzcsfmNkCQC+i7zaFT 0iza4Nu6xsriQbFxpOv4tGIIEfXxb/RBrAOlszHU+KBMJbDLakpDFzLi7eWXVN1k KBJ3GvA1uzCfBeizXTHc6Q04G+5cCRLVr/i3ae7BOtrpt53kMC65bwbWoibIahxc M7VAHZpBIGp7WIYkxAXx7jnocUhT8dDgToB8U3V4OPURDqarwrQL/xb9juyWpe7Y DgAA590RHxT08mUixw5QRh61AVYqCpvEiHfxtKyYMvxm97+ikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvFGcSRQgSgrFo+zRCxWsALlcIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWY4ZjExZmUtMGNmNi0z NmQzLTgzYzItZTJlYWUxMGQ2MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4gHOXCpp+eUe76QGRwYjOl7ABLLYOF7MGqR8M/poEC8baygKwoFNSq fAQSPqHplEuR5xK4BRvhTUvh5Mjg5YQE6XtfvZH3weECvtGQzpNObln/1+lsAt+A Ug1IQDbG9nxwYqTCSMKmCVlzDsK2xEzR4z6CaL2PfF+neLIw4xQqJ/0E+yxVIpid RoOIYjnd++k+d3uVy2tYC0z8ma4T40LwaoVLIBstp1cbrR94vffJUi+Ob7+XGWO3 zQAbYtSk4BuZ9eA5/RV44jVaixmGJ36+ablqGr+HytB77Fy3Ux4aC9qu5+E3nT5H 0QT9aKqo7iPYukQs5IyTIu9kHPqOxME= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:38 2025 by rpki-client