$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa File: 542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json) Hash identifier: 6HRdEf/okzgA5SsJ0h1rb8NZxbhhpBMmAqYvVXHaJlU= Subject key identifier: 93:F5:C1:41:0A:88:AC:DD:BC:93:96:25:73:EB:E3:93:80:AB:A8:FA Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F432858496B7ED4F45E9AF324D1AE7480 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 21530 IP address blocks: 170.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d4:f4:5e:9a:f3:24:d1:ae:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=d54bdfff-9bae-461c-9b49-50bd88c47edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:6d:ab:2a:c3:ec:b2:92:8b:eb:23:19:46: d1:e3:1c:2a:9a:7c:1b:33:ed:b0:e5:93:35:16:6c: f7:78:63:ca:9f:92:d6:42:09:6f:fa:03:0e:f6:fb: 1a:3d:68:3b:3e:f5:89:70:f0:50:49:a2:ad:f2:dd: 7e:0a:3f:1a:71:05:3b:9e:47:0d:b0:7b:28:c4:df: e9:7f:f3:a7:28:cb:67:97:13:33:0f:f2:7f:6c:5d: 2e:e1:ff:57:17:ca:63:22:82:cc:30:dc:e9:3d:55: 7a:89:97:c7:67:77:83:d8:6a:ac:30:df:20:24:5e: 55:3c:2c:43:9a:58:d3:35:52:a5:bc:15:4c:34:82: 2c:a1:25:ee:ff:32:37:24:05:8f:0e:00:4f:b8:41: 72:c7:cb:40:5b:95:94:ac:14:d3:05:9f:11:23:75: d2:8c:64:98:88:2d:a9:53:ec:2e:8e:ed:f4:79:a7: f7:6b:6f:45:e3:d9:80:01:63:29:e1:1a:e4:5c:07: 56:35:96:1c:83:6d:79:c5:3a:41:20:57:cd:48:b1: 6e:8a:7f:8a:48:b7:d5:42:55:d6:d0:35:e9:71:e1: 50:cf:ab:81:eb:f3:d8:6f:88:4b:07:43:a9:48:7a: ab:5c:e3:e4:c0:25:02:e2:cd:85:d3:52:10:c4:02: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F5:C1:41:0A:88:AC:DD:BC:93:96:25:73:EB:E3:93:80:AB:A8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:07:50:4a:06:bf:45:07:e7:d1:7e:41:51:80:27:50:c2:87: 25:9b:96:fd:90:cc:49:80:d5:4f:92:7d:bc:97:78:60:49:6b: 56:19:16:e5:b0:10:f0:12:88:bb:2a:50:00:29:92:d2:1b:34: 8e:13:a3:70:a0:d4:cf:ef:81:24:01:3e:fb:00:ab:ba:33:31: 80:7c:a9:d9:b7:75:ca:97:e0:dd:93:94:f5:09:8a:d4:20:e9: 35:7f:66:05:56:68:a3:92:dd:32:55:64:07:c1:8c:df:b7:47: fe:f8:5d:e0:26:24:dc:a9:df:9e:ac:5f:a8:36:a6:bc:b5:54: 12:a5:63:0f:27:72:00:87:73:da:c0:fa:1e:ca:b2:6a:29:be: fb:65:fe:6d:cb:33:6f:df:5f:12:54:52:d1:5c:65:e6:83:55: 6f:c5:0d:1d:4e:b5:77:bc:4b:68:8e:42:61:08:84:ec:7e:4f: 8f:4d:4d:58:16:5d:c4:57:26:c1:b2:2f:03:56:8f:b5:41:cd: 49:d6:fe:bb:ef:54:70:6d:86:95:7a:09:45:ab:e5:79:72:d7: 64:a8:ff:ae:6c:ac:a0:73:9c:81:f6:3b:45:aa:02:37:93:fb: 88:2c:b5:95:01:95:72:1c:9c:86:2a:ae:b3:13:e3:94:a1:f2: 60:99:dd:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftT0XprzJNGudIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDU0YmRmZmYtOWJhZS00NjFjLTliNDktNTBiZDg4YzQ3ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr9tqyrD7LKSi+sjGUbR4xwqmnwbM+2w5ZM1 Fmz3eGPKn5LWQglv+gMO9vsaPWg7PvWJcPBQSaKt8t1+Cj8acQU7nkcNsHsoxN/p f/OnKMtnlxMzD/J/bF0u4f9XF8pjIoLMMNzpPVV6iZfHZ3eD2GqsMN8gJF5VPCxD mljTNVKlvBVMNIIsoSXu/zI3JAWPDgBPuEFyx8tAW5WUrBTTBZ8RI3XSjGSYiC2p U+wuju30eaf3a29F49mAAWMp4RrkXAdWNZYcg215xTpBIFfNSLFuin+KSLfVQlXW 0DXpceFQz6uB6/PYb4hLB0OpSHqrXOPkwCUC4s2F01IQxAK4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP1wUEKiKzdvJOWJXPr45OAq6j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTQyZTg0N2MtMzcxNS0z YjI3LTlmNzQtYWRlNzdhMGZiMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsHUEoGv0UH59F+QVGAJ1DChyWblv2QzEmA1U+SfbyXeGBJa1YZFuWw EPASiLsqUAApktIbNI4To3Cg1M/vgSQBPvsAq7ozMYB8qdm3dcqX4N2TlPUJitQg 6TV/ZgVWaKOS3TJVZAfBjN+3R/74XeAmJNyp356sX6g2pry1VBKlYw8ncgCHc9rA +h7Ksmopvvtl/m3LM2/fXxJUUtFcZeaDVW/FDR1OtXe8S2iOQmEIhOx+T49NTVgW XcRXJsGyLwNWj7VBzUnW/rvvVHBthpV6CUWr5Xly12So/65srKBznIH2O0WqAjeT +4gstZUBlXIcnIYqrrMT45Sh8mCZ3S0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:06 2025 by rpki-client