$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa File: fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa (raw, json) Hash identifier: Wa3zYeXBgG9gRJHy4lOHHoELRPG2jXNFrRPraFCq290= Subject key identifier: 69:0C:A0:8B:43:83:00:0D:65:ED:EC:64:39:00:75:BE:85:05:48:97 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848CC7B99A8F52ECFEBF67CDF80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 173.214.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:99:a8:f5:2e:cf:eb:f6:7c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=939f188f-d44f-43e1-9e98-a55859e9bee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1e:e2:4b:1d:d5:cb:f5:5a:3a:37:38:10:ce: de:d9:50:a8:f4:e4:54:ea:8c:c6:a4:c7:98:f2:dd: b1:65:29:11:74:d5:b2:5c:5a:09:ec:ff:f5:3a:dc: f2:d8:6a:f1:2c:17:77:3b:0c:08:21:e1:e9:54:38: 02:1a:a3:67:92:93:3d:f7:1b:72:46:28:8d:fa:7f: 1f:17:fc:ad:0a:ec:5f:ac:d5:2b:4e:be:21:98:7f: 55:7a:cc:e4:17:8c:0b:40:dc:05:38:26:56:c1:b4: 8c:2e:c4:d3:d4:17:a6:c8:5f:cb:ae:32:c4:07:9b: ea:29:a6:65:46:b6:a2:ad:a2:70:6d:9e:73:f6:e3: 9a:f5:7a:35:5e:7e:69:e6:a2:13:05:e6:7d:eb:37: 1e:17:8d:3c:1b:86:58:15:17:c3:99:c3:5e:db:67: 69:a7:38:4f:eb:70:76:6e:7d:b7:e9:3d:7b:2d:e0: 98:3a:04:a1:c1:ca:14:9b:3e:38:24:53:49:f5:00: fd:00:c7:d4:03:aa:54:4a:c3:f5:c0:3c:b9:b6:2b: 40:2c:6e:1a:b9:d9:0c:28:ad:ac:42:ec:2b:ca:1e: cf:4c:68:b0:73:a6:01:ef:42:ee:e7:a9:7e:cb:51: 8b:31:88:9e:5f:ef:7a:c6:69:3d:dd:65:34:13:7c: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:A0:8B:43:83:00:0D:65:ED:EC:64:39:00:75:BE:85:05:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 173.214.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:27:b8:22:5c:44:f2:66:1a:0d:7a:29:57:3c:f9:a0:4c:cb: 39:a9:10:e5:ae:9a:f2:4c:3e:7e:52:e8:db:ba:dc:c8:39:cc: ab:7d:03:36:da:68:83:8e:73:e2:dd:8d:06:dc:19:f9:2e:4a: 3c:a5:5b:8e:ee:fb:e5:ff:dd:5f:cb:a0:f8:71:c8:8e:28:43: eb:9e:0b:2c:ca:3a:26:92:9d:c0:85:4c:20:e6:6f:03:55:79: a8:74:de:2a:6e:b6:94:64:e9:db:dd:c9:19:a7:79:43:97:a2: 65:72:e1:6d:34:7f:f6:f7:98:49:46:87:dc:3d:7c:a3:db:78: f0:e7:e2:8d:69:2c:70:7c:73:74:a6:37:8d:46:54:01:87:24: 67:02:af:b7:db:da:66:e1:66:b4:fe:15:51:86:b9:96:7b:f3: 88:78:9e:2a:07:2c:57:04:f2:4a:f2:1b:dc:dc:4a:33:f6:97: d0:89:b8:0d:39:d9:d2:51:a8:e6:ca:a4:15:36:02:cb:49:7c: 41:59:33:78:ce:c7:66:55:b3:e7:b1:1d:1f:83:1d:55:9b:31: 14:5a:38:b6:4c:41:2c:65:49:a7:a4:22:62:3b:f4:0c:13:08: 2d:62:cb:ad:1c:ab:bf:36:c2:e7:b5:09:c2:00:59:06:c3:26: 90:10:12:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5mo9S7P6/Z834AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk OTM5ZjE4OGYtZDQ0Zi00M2UxLTllOTgtYTU1ODU5ZTliZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h7iSx3Vy/VaOjc4EM7e2VCo9ORU6ozGpMeY 8t2xZSkRdNWyXFoJ7P/1Otzy2GrxLBd3OwwIIeHpVDgCGqNnkpM99xtyRiiN+n8f F/ytCuxfrNUrTr4hmH9VeszkF4wLQNwFOCZWwbSMLsTT1BemyF/LrjLEB5vqKaZl RrairaJwbZ5z9uOa9Xo1Xn5p5qITBeZ96zceF408G4ZYFRfDmcNe22dppzhP63B2 bn236T17LeCYOgShwcoUmz44JFNJ9QD9AMfUA6pUSsP1wDy5titALG4audkMKK2s Quwryh7PTGiwc6YB70Lu56l+y1GLMYieX+96xmk93WU0E3yAvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkMoItDgwANZe3sZDkAdb6FBUiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmE0ZmQ2YzAtZGU2MS0z Y2IyLTg0OWMtZGM0MzhkZGEzMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEnuCJcRPJmGg16KVc8+aBMyzmpEOWumvJMPn5S6Nu63Mg5zKt9Azba aIOOc+LdjQbcGfkuSjylW47u++X/3V/LoPhxyI4oQ+ueCyzKOiaSncCFTCDmbwNV eah03iputpRk6dvdyRmneUOXomVy4W00f/b3mElGh9w9fKPbePDn4o1pLHB8c3Sm N41GVAGHJGcCr7fb2mbhZrT+FVGGuZZ784h4nioHLFcE8kryG9zcSjP2l9CJuA05 2dJRqObKpBU2AstJfEFZM3jOx2ZVs+exHR+DHVWbMRRaOLZMQSxlSaekImI79AwT CC1iy60cq782wue1CcIAWQbDJpAQEhE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:39 2025 by rpki-client