$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8cda015-c3c0-35c0-ba74-d3c7f94d1114.roa File: f8cda015-c3c0-35c0-ba74-d3c7f94d1114.roa (raw, json) Hash identifier: uKDl/I0kOIPfduUH5uJ2ezwi3J3zyEg5LjzKz5JWr7M= Subject key identifier: 02:F2:B1:D8:67:A2:4A:F2:A4:E3:FC:EC:C1:C0:8F:91:F0:65:24:61 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848E16BEC6EF70D1D8C9BE7CD00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8cda015-c3c0-35c0-ba74-d3c7f94d1114.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 64267 IP address blocks: 141.164.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ec:6e:f7:0d:1d:8c:9b:e7:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=2607383a-8c70-4376-afd5-4809690094be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:db:b7:59:4b:4d:61:9a:ad:d2:79:7e:52: 41:24:24:33:72:67:d7:67:ba:88:c3:5c:1b:41:a2: db:4b:cd:3b:a4:95:a1:49:a9:4f:0f:99:9f:99:21: 1d:a9:69:9f:6f:c6:63:eb:bd:1e:60:07:55:a9:0f: 15:a8:e6:9d:35:ea:13:75:ba:f6:86:9e:e3:77:f1: e5:89:94:20:b1:e2:1b:a1:f3:c3:21:25:d9:b9:c8: 30:9f:9b:c4:f0:07:1e:fc:28:4c:7a:66:61:19:dc: b4:2b:f8:b2:b9:29:b9:c9:29:8c:3c:61:57:41:e4: bc:6f:6f:a5:e3:94:26:60:05:de:db:7e:e7:c4:f9: 09:82:93:a6:95:71:f4:f1:4f:4c:ae:38:e8:76:c6: dd:34:4f:02:94:e2:3d:6a:69:3b:16:d8:90:c7:23: 34:28:85:d6:e1:cd:d7:b5:10:4c:1d:6f:b8:ae:15: 36:7a:39:b5:b2:4d:18:92:6a:12:e2:f3:25:88:0e: c7:1a:9c:b3:90:65:31:e0:ab:43:89:e3:80:9b:5f: 12:07:b6:8a:e5:10:30:77:c5:8d:a1:19:1b:37:8f: f7:9b:f6:49:00:f4:a8:14:cf:ad:fd:9f:be:ec:e3: 44:5d:de:f1:9c:7f:ce:e3:f7:76:f7:5b:9f:45:d6: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F2:B1:D8:67:A2:4A:F2:A4:E3:FC:EC:C1:C0:8F:91:F0:65:24:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8cda015-c3c0-35c0-ba74-d3c7f94d1114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 141.164.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:7b:94:fa:4d:e7:6a:9e:4a:89:f5:0f:b0:d0:cc:3f:93:b1: 5e:16:5b:5f:09:3a:2f:22:13:29:8c:d8:68:4f:b2:10:52:54: 06:d0:86:fe:67:ea:bd:29:31:2c:aa:08:ee:41:c2:a4:93:e6: b1:19:3a:79:86:19:8c:77:08:0d:a3:b3:8a:d9:b0:5c:10:aa: 96:74:9e:e9:d2:b1:4c:18:02:f2:e7:cf:81:25:68:07:0a:b6: 93:4b:29:a0:7b:15:10:3a:ea:9f:59:ac:dd:c1:4c:31:9b:cf: 9b:23:bb:53:ad:2d:0c:75:85:aa:d2:e5:95:64:bc:d8:b6:94: 84:3b:c8:30:fd:c9:f4:94:d7:0d:bc:d3:1f:07:72:a8:6d:60: 57:d6:70:79:48:db:54:41:01:e9:12:1e:24:52:41:4f:72:06: 16:ec:88:6d:77:82:8f:5c:52:cb:40:67:cc:53:0b:45:78:69: fe:94:8e:0d:17:e5:69:51:15:91:9c:ae:ab:30:13:6b:55:b0: 3a:09:3f:6c:6f:9d:9b:f5:ee:5e:ae:20:f6:bd:5a:34:32:01: 26:9e:63:94:13:81:39:5f:00:4d:54:b2:dc:85:73:32:88:e1: 90:53:03:7a:97:66:df:5b:fe:d7:55:0a:1f:56:74:47:5b:cc: 18:0c:30:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+xu9w0djJvnzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MjYwNzM4M2EtOGM3MC00Mzc2LWFmZDUtNDgwOTY5MDA5NGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqjbt1lLTWGardJ5flJBJCQzcmfXZ7qIw1wb QaLbS807pJWhSalPD5mfmSEdqWmfb8Zj670eYAdVqQ8VqOadNeoTdbr2hp7jd/Hl iZQgseIbofPDISXZucgwn5vE8Ace/ChMemZhGdy0K/iyuSm5ySmMPGFXQeS8b2+l 45QmYAXe237nxPkJgpOmlXH08U9MrjjodsbdNE8ClOI9amk7FtiQxyM0KIXW4c3X tRBMHW+4rhU2ejm1sk0YkmoS4vMliA7HGpyzkGUx4KtDieOAm18SB7aK5RAwd8WN oRkbN4/3m/ZJAPSoFM+t/Z++7ONEXd7xnH/O4/d291ufRdZRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALysdhnokrypOP87MHAj5HwZSRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjhjZGEwMTUtYzNjMC0z NWMwLWJhNzQtZDNjN2Y5NGQxMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjaRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZ7lPpN52qeSon1D7DQzD+TsV4WW18JOi8iEymM2GhPshBSVAbQhv5n 6r0pMSyqCO5BwqST5rEZOnmGGYx3CA2js4rZsFwQqpZ0nunSsUwYAvLnz4ElaAcK tpNLKaB7FRA66p9ZrN3BTDGbz5sju1OtLQx1harS5ZVkvNi2lIQ7yDD9yfSU1w28 0x8HcqhtYFfWcHlI21RBAekSHiRSQU9yBhbsiG13go9cUstAZ8xTC0V4af6Ujg0X 5WlRFZGcrqswE2tVsDoJP2xvnZv17l6uIPa9WjQyASaeY5QTgTlfAE1UstyFczKI 4ZBTA3qXZt9b/tdVCh9WdEdbzBgMMHY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:35 2025 by rpki-client