$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa File: 69ca97ab-3c91-3275-8ade-932e76a09cd9.roa (raw, json) Hash identifier: KSFXaAbGTgIoxwdcNLnxN35EaBe0wpx8v6y4/FnenZc= Subject key identifier: 88:49:35:FF:DE:A0:01:DE:09:94:3D:16:18:9C:76:1B:31:19:CB:95 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F432858496B7ED4D57B6EC1F090DD8080 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 21530 IP address blocks: 170.186.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d4:d5:7b:6e:c1:f0:90:dd:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=82a2b81c-8e64-42ba-8cf6-65960b632c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:de:00:8b:f3:fb:68:53:d1:d6:df:20:a6: 67:38:1e:c8:16:bd:21:31:5f:e8:22:18:9c:42:a5: 23:4a:77:5f:5f:c5:14:b5:fc:d0:f2:d6:89:7f:47: 5a:9e:f5:3b:4c:b1:28:74:3f:d9:cd:e6:b6:b4:d6: d6:0f:66:4a:58:f7:20:e4:1c:6b:37:3a:99:ba:8e: 65:4e:2a:f1:ae:73:4b:82:8b:dd:94:b7:8c:6a:5c: f2:f8:04:3f:38:0b:c3:ef:6a:60:1b:50:98:78:73: 89:13:9e:ce:ad:20:8e:58:09:e5:b5:3e:b3:fe:b7: 79:46:05:a1:e2:de:1e:cb:1b:0c:63:d2:e7:8a:1d: 6b:78:f0:be:96:78:83:71:5a:31:9d:5d:3d:d4:28: d0:54:62:b3:46:af:51:f1:3c:81:b3:9e:16:48:c4: 1c:bd:eb:c1:20:24:87:65:65:fe:95:8c:78:9a:22: 68:dd:bb:a8:e3:85:0b:9f:52:0a:4c:de:3b:30:4a: 56:0e:83:65:36:06:0d:19:57:7c:a9:e0:f6:5e:d1: 13:cf:ec:bc:e5:e4:a4:bd:3e:f1:cc:34:e9:9c:67: 34:21:00:ce:85:0e:3e:f2:6f:5d:d1:6c:7d:a9:21: e8:eb:ed:03:f2:1d:f9:55:d4:aa:45:73:f3:8b:27: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:35:FF:DE:A0:01:DE:09:94:3D:16:18:9C:76:1B:31:19:CB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0e:ae:68:78:21:5c:85:04:4b:c9:47:8e:4c:3b:e8:88:79: b6:07:20:c7:53:fb:bb:b6:84:47:1b:2b:7a:27:7c:d4:88:b7: bd:45:90:29:0d:c2:d4:69:21:50:a2:44:98:6b:7e:72:dd:ea: 8d:90:b5:43:3a:ec:b9:23:4e:81:2e:81:6e:3e:aa:ec:30:ca: 65:8b:4e:63:ca:7c:4b:5a:fe:cf:f7:6e:dc:f9:4a:57:b4:b4: 9b:25:e1:32:91:b3:4c:05:d0:6e:82:af:8f:06:c3:f3:04:74: e5:ef:23:6e:6c:39:d1:99:3b:83:21:f4:8a:bd:a7:b3:21:5e: ac:b2:c4:b0:12:ac:7e:77:2d:45:0e:6d:ae:bb:72:fd:1f:14: 15:f6:f2:49:33:3c:38:05:60:73:9a:9b:c6:4b:49:97:2e:58: cd:97:68:72:e9:b7:95:7e:1a:7a:0a:c4:4f:e2:9b:f9:04:fd: 14:e0:f9:96:d0:3e:09:19:8c:7d:59:a7:3c:88:4e:69:77:41: 1d:83:35:23:69:74:e8:0c:90:4f:1b:d0:17:e3:42:97:cf:78: ef:70:84:90:7d:69:48:6b:d2:5e:a9:a8:4b:da:17:08:0e:bf: 97:9c:39:35:f9:98:5b:ff:11:a9:f8:8b:95:2a:dd:dc:5a:e4: 68:05:e4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftTVe27B8JDdgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ODJhMmI4MWMtOGU2NC00MmJhLThjZjYtNjU5NjBiNjMyYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2PeAIvz+2hT0dbfIKZnOB7IFr0hMV/oIhic QqUjSndfX8UUtfzQ8taJf0danvU7TLEodD/Zzea2tNbWD2ZKWPcg5BxrNzqZuo5l TirxrnNLgovdlLeMalzy+AQ/OAvD72pgG1CYeHOJE57OrSCOWAnltT6z/rd5RgWh 4t4eyxsMY9Lnih1rePC+lniDcVoxnV091CjQVGKzRq9R8TyBs54WSMQcvevBICSH ZWX+lYx4miJo3buo44ULn1IKTN47MEpWDoNlNgYNGVd8qeD2XtETz+y85eSkvT7x zDTpnGc0IQDOhQ4+8m9d0Wx9qSHo6+0D8h35VdSqRXPziyfG9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhJNf/eoAHeCZQ9FhicdhsxGcuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNjljYTk3YWItM2M5MS0z Mjc1LThhZGUtOTMyZTc2YTA5Y2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgOrmh4IVyFBEvJR45MO+iIebYHIMdT+7u2hEcbK3onfNSIt71FkCkN wtRpIVCiRJhrfnLd6o2QtUM67LkjToEugW4+quwwymWLTmPKfEta/s/3btz5Sle0 tJsl4TKRs0wF0G6Cr48Gw/MEdOXvI25sOdGZO4Mh9Iq9p7MhXqyyxLASrH53LUUO ba67cv0fFBX28kkzPDgFYHOam8ZLSZcuWM2XaHLpt5V+GnoKxE/im/kE/RTg+ZbQ PgkZjH1ZpzyITml3QR2DNSNpdOgMkE8b0BfjQpfPeO9whJB9aUhr0l6pqEvaFwgO v5ecOTX5mFv/Ean4i5Uq3dxa5GgF5Is= -----END CERTIFICATE-----Generated at Sun Apr 6 11:51:40 2025 by rpki-client