$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa File: 237e22c1-1d5e-3e56-ab84-1316298cd75c.roa (raw, json) Hash identifier: wLKm2cxzKMaQpufw7vXJ4Oa768IBa/fzZU5GI3eyVH8= Subject key identifier: 81:19:F8:33:7A:EB:76:29:4D:6A:0A:D5:97:64:2B:36:CD:02:8D:7B Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F43285848B8F0CD4CEA865EAA315CBAC0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 11273 IP address blocks: 216.66.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cd:4c:ea:86:5e:aa:31:5c:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=2a7609e0-1eba-4921-aa4e-1e2f64fa85db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:77:35:8a:6d:cc:8e:e6:cc:de:60:ff:01: 67:82:21:31:e8:a3:0a:e0:ce:c7:9d:57:5d:32:5c: f8:a1:1b:99:b0:32:1b:ca:82:4f:a5:df:ad:37:14: d7:23:98:04:a1:f5:ac:48:25:5f:41:58:80:c3:29: b3:6f:05:1e:37:2d:9c:8c:3d:c0:bb:89:13:30:12: e7:3f:ff:18:3c:ff:11:7b:e3:39:89:3d:82:98:d9: be:4d:dd:56:8a:84:bb:38:05:9c:3c:89:c9:85:63: b5:39:d7:9c:3e:27:6b:1d:fb:1b:db:fe:e2:e4:07: 53:90:be:57:6a:e0:2f:77:27:eb:33:0f:6d:2e:de: 4c:10:3c:71:93:df:26:d9:30:8c:d5:e0:fb:b2:82: 0f:cd:29:88:60:f8:17:e2:39:d8:89:3f:8b:8f:08: a9:c8:ac:d2:58:16:a2:a9:2b:e8:f5:d1:2b:91:87: 7d:dc:cc:1c:b2:97:1f:6f:bf:8f:70:a6:eb:6e:6f: de:ef:78:ed:8a:91:83:74:fb:c3:bd:79:0b:af:60: b6:94:fe:37:c1:dd:ba:93:2f:55:4f:9c:bd:b9:53: 61:64:b7:8f:c0:96:61:1c:8a:b5:82:e2:7e:bb:33: c3:bb:34:5c:60:5a:ba:05:b8:c6:fb:96:02:81:63: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:F8:33:7A:EB:76:29:4D:6A:0A:D5:97:64:2B:36:CD:02:8D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2d:58:41:19:49:f2:38:93:bb:ee:6d:ee:dd:cb:65:5c:c8: 72:a2:45:0b:85:49:24:1a:02:a7:71:58:3a:51:b6:de:9d:bd: 47:fe:42:65:51:6e:c8:4a:81:29:59:52:13:4d:b4:0a:39:a5: 70:11:6e:44:8c:b7:a9:c4:9a:05:6f:77:d1:ab:27:32:1a:ed: 0a:56:80:fc:2c:b4:71:e9:48:36:22:c2:08:5a:2f:c9:d2:ed: 55:88:73:fb:b4:6f:ab:e3:0b:91:cd:44:2a:18:7a:89:49:e0: 04:e8:c8:bd:29:64:c9:0e:09:bd:e3:e2:5f:36:64:45:67:eb: 1a:8e:12:e9:09:e9:76:44:02:5c:ed:9f:fd:8a:f1:82:1d:69: 81:af:07:9a:46:9f:67:f6:8c:1d:d0:b2:33:0f:60:e9:ae:71: 9c:6a:97:98:71:73:2c:45:24:25:29:4d:92:c9:2f:bd:a0:d3: 76:6a:bd:a6:50:67:a7:1c:34:93:10:72:68:28:91:b3:a4:8e: 58:22:52:00:4b:06:13:53:c4:40:f1:d4:cd:c4:d5:d1:6e:b6: 79:ca:b8:a2:1c:45:07:ab:46:46:70:56:dc:64:ab:8e:e7:a3: 3b:aa:e7:aa:2e:de:e7:bf:a4:63:83:59:2f:61:7e:c0:70:3c: 95:26:73:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M1M6oZeqjFcusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MmE3NjA5ZTAtMWViYS00OTIxLWFhNGUtMWUyZjY0ZmE4NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY53NYptzI7mzN5g/wFngiEx6KMK4M7HnVdd Mlz4oRuZsDIbyoJPpd+tNxTXI5gEofWsSCVfQViAwymzbwUeNy2cjD3Au4kTMBLn P/8YPP8Re+M5iT2CmNm+Td1WioS7OAWcPInJhWO1OdecPidrHfsb2/7i5AdTkL5X auAvdyfrMw9tLt5MEDxxk98m2TCM1eD7soIPzSmIYPgX4jnYiT+LjwipyKzSWBai qSvo9dErkYd93Mwcspcfb7+PcKbrbm/e73jtipGDdPvDvXkLr2C2lP43wd26ky9V T5y9uVNhZLePwJZhHIq1guJ+uzPDuzRcYFq6BbjG+5YCgWNTwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEZ+DN663YpTWoK1ZdkKzbNAo17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjM3ZTIyYzEtMWQ1ZS0z ZTU2LWFiODQtMTMxNjI5OGNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABstWEEZSfI4k7vube7dy2VcyHKiRQuFSSQaAqdxWDpRtt6dvUf+QmVR bshKgSlZUhNNtAo5pXARbkSMt6nEmgVvd9GrJzIa7QpWgPwstHHpSDYiwghaL8nS 7VWIc/u0b6vjC5HNRCoYeolJ4AToyL0pZMkOCb3j4l82ZEVn6xqOEukJ6XZEAlzt n/2K8YIdaYGvB5pGn2f2jB3QsjMPYOmucZxql5hxcyxFJCUpTZLJL72g03ZqvaZQ Z6ccNJMQcmgokbOkjlgiUgBLBhNTxEDx1M3E1dFutnnKuKIcRQerRkZwVtxkq47n ozuq56ou3ue/pGODWS9hfsBwPJUmc/4= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:12 2025 by rpki-client