$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f68f0c41-4a17-3568-b2a0-87f3c9210575.roa File: f68f0c41-4a17-3568-b2a0-87f3c9210575.roa (raw, json) Hash identifier: viy0rOVnxYO13Vm3IIgrU8shg1P3vT0ugabTrSS2rBQ= Subject key identifier: D3:A2:FB:FA:7D:FF:C8:13:9C:BF:FA:27:71:B5:29:D6:67:95:39:99 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849B414938686124393A54F6E40 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f68f0c41-4a17-3568-b2a0-87f3c9210575.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 7018 IP address blocks: 168.91.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:93:86:86:12:43:93:a5:4f:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=8df64bd0-9c10-4f6b-ac1a-a4f49d5e94ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:1b:53:69:71:0b:57:62:67:98:45:9c:b7: 0e:a6:d9:f7:5c:51:d1:24:2a:fd:43:47:84:40:d4: 23:71:f4:fc:70:bf:72:7a:f8:aa:0e:ce:7b:a2:22: 46:99:6d:60:d3:a3:af:47:78:66:11:bb:ba:36:ad: 67:78:0f:98:7b:2f:ee:e5:4b:e3:a6:cd:d9:60:2b: f1:a4:2c:e9:7e:cb:64:36:f5:f5:6d:67:d5:70:86: 2a:b3:60:db:2f:ab:14:04:72:52:10:ab:bb:66:c9: e4:55:ef:f5:fc:85:a6:ac:53:2f:bc:f9:b9:58:06: ca:2a:f6:7b:46:44:2c:95:c5:1f:80:fe:05:9e:92: c3:4a:0e:2c:09:93:51:c6:57:80:8a:33:5d:72:0d: e8:e2:ab:a9:e5:3c:eb:1e:c6:8b:be:e9:bc:3a:60: 4e:83:ec:e0:24:95:ab:35:08:da:ae:c8:af:4e:01: b7:47:c6:3f:60:c6:da:07:1a:1e:9d:a6:24:17:c9: 36:c1:88:d3:10:e7:16:44:16:de:6d:61:ed:3d:4b: 62:6d:c9:40:83:80:1e:aa:53:3c:6d:ed:fd:b7:56: cb:1e:ac:68:8d:cc:a7:f9:07:3e:f9:99:d6:b2:c1: 33:13:75:13:38:a6:fd:87:84:d5:48:09:b4:a6:cb: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A2:FB:FA:7D:FF:C8:13:9C:BF:FA:27:71:B5:29:D6:67:95:39:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f68f0c41-4a17-3568-b2a0-87f3c9210575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:71:d8:2a:1c:25:ef:bb:32:57:1a:a8:28:20:3f:50:b4:ed: 45:2f:04:a9:0d:eb:d2:ed:95:c7:8f:d3:b4:a5:8d:94:ac:e6: a2:dd:e7:9e:46:7a:13:db:7f:04:01:a6:b6:8a:d4:bc:00:d8: ec:33:c2:5d:f8:26:4c:81:58:35:58:2b:13:c5:e5:01:98:98: 2c:1d:b2:82:4b:75:74:af:27:4a:de:dd:2a:3d:d4:14:43:92: ff:26:33:89:95:0e:39:66:cf:bd:3c:75:06:d3:d7:d1:0c:97: 92:61:65:5c:07:47:3f:10:08:cd:0c:ac:8a:8f:1f:81:f7:03: a5:0b:29:41:8c:64:ed:74:a3:76:25:d5:b0:99:b3:f8:e6:87: 7d:a4:37:83:24:8e:58:48:55:0a:60:ea:0f:f0:50:2d:43:2e: 51:bb:16:11:d9:1b:83:55:dc:d5:23:bc:ef:de:04:64:17:a2: 0c:c3:db:6b:76:da:8a:ab:be:1e:54:9a:05:e0:15:91:47:ad: 82:be:97:2c:b0:5c:9f:78:a1:c6:5e:dd:87:bc:78:39:1f:68: 83:8f:a5:78:be:9c:5f:16:7b:80:55:00:ef:d8:eb:ea:a4:0b: 75:d6:42:a8:40:be:98:6d:cd:80:c0:b9:5a:19:74:a9:87:1f: c8:6b:6b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJOGhhJDk6VPbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk OGRmNjRiZDAtOWMxMC00ZjZiLWFjMWEtYTRmNDlkNWU5NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLwbU2lxC1diZ5hFnLcOptn3XFHRJCr9Q0eE QNQjcfT8cL9yeviqDs57oiJGmW1g06OvR3hmEbu6Nq1neA+Yey/u5Uvjps3ZYCvx pCzpfstkNvX1bWfVcIYqs2DbL6sUBHJSEKu7ZsnkVe/1/IWmrFMvvPm5WAbKKvZ7 RkQslcUfgP4FnpLDSg4sCZNRxleAijNdcg3o4qup5TzrHsaLvum8OmBOg+zgJJWr NQjarsivTgG3R8Y/YMbaBxoenaYkF8k2wYjTEOcWRBbebWHtPUtibclAg4AeqlM8 be39t1bLHqxojcyn+Qc++ZnWssEzE3UTOKb9h4TVSAm0psv9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOi+/p9/8gTnL/6J3G1KdZnlTmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjY4ZjBjNDEtNGExNy0z NTY4LWIyYTAtODdmM2M5MjEwNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlx2CocJe+7MlcaqCggP1C07UUvBKkN69LtlceP07SljZSs5qLd555G ehPbfwQBpraK1LwA2Owzwl34JkyBWDVYKxPF5QGYmCwdsoJLdXSvJ0re3So91BRD kv8mM4mVDjlmz708dQbT19EMl5JhZVwHRz8QCM0MrIqPH4H3A6ULKUGMZO10o3Yl 1bCZs/jmh32kN4MkjlhIVQpg6g/wUC1DLlG7FhHZG4NV3NUjvO/eBGQXogzD22t2 2oqrvh5UmgXgFZFHrYK+lyywXJ94ocZe3Ye8eDkfaIOPpXi+nF8We4BVAO/Y6+qk C3XWQqhAvphtzYDAuVoZdKmHH8hra/Y= -----END CERTIFICATE-----Generated at Fri May 9 06:41:29 2025 by rpki-client