$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa File: 7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa (raw, json) Hash identifier: kfqcakS/H+r8gty3ZFwBFjRT7YX0sqJugCf/bIhg2Gw= Subject key identifier: D7:88:9A:D4:72:B2:A6:44:55:7F:60:74:59:3A:2F:0F:79:28:DC:FC Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F432858488F107E3EFFF710C318F37A40 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 21530 IP address blocks: 216.66.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:7e:3e:ff:f7:10:c3:18:f3:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=98bc5cbe-1598-489a-9925-54bd17d17447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:24:fb:d3:64:cf:3d:ec:cf:13:72:cc:fc: b7:4e:54:3a:84:e5:33:24:90:7c:b1:c6:d8:77:2d: 8b:3d:24:ad:fe:cc:d2:de:1f:21:6b:4d:7c:ef:db: 33:fc:c5:60:36:f2:30:d4:9c:27:de:0f:6c:77:ac: 72:0e:17:99:e0:53:2b:4c:93:01:82:ec:91:eb:15: 14:58:cc:05:f0:92:93:20:62:1a:60:a1:4d:63:03: bd:1c:74:53:8e:b9:69:58:de:87:76:5d:f7:87:db: 06:55:86:d1:54:f3:82:ff:3f:27:65:ed:2b:4b:18: 9f:78:82:6d:c2:b1:e6:d6:40:15:46:64:73:a4:d2: 9d:dc:fb:e6:26:e6:22:9a:db:6d:00:9c:91:e1:0a: 02:3f:54:69:81:ec:2f:d8:75:00:12:27:53:ba:e3: 8c:9e:d5:db:68:b9:c1:e1:5c:f8:b2:d7:08:50:3f: 08:c3:da:a6:36:ec:d3:0d:b8:30:a7:ea:97:15:99: cc:ed:79:82:5d:9d:18:55:2a:5e:7d:36:fe:90:da: 4d:18:36:39:11:9c:6c:c4:21:0f:1a:39:30:d1:3c: 7a:22:ad:75:05:fd:7e:3d:ff:4a:63:f6:ef:19:d4: bd:50:6a:8d:9e:1d:76:bd:33:e4:8e:b7:64:74:ba: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:88:9A:D4:72:B2:A6:44:55:7F:60:74:59:3A:2F:0F:79:28:DC:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:19:61:f1:ce:8d:50:2d:fb:a9:87:0b:70:dd:5e:75:ff:13: bf:1e:b1:34:04:91:11:4f:43:29:83:e7:88:f5:fd:60:3e:88: 43:3c:a6:fa:b9:ea:b2:a1:76:22:25:c1:3e:08:f2:51:f3:c6: c5:a5:12:32:49:6a:c1:1e:31:1a:79:9b:08:f1:45:0b:16:d7: ea:c8:89:41:b2:79:eb:78:08:88:45:35:99:25:33:fd:8e:0a: 8a:e3:9b:f5:78:64:8d:90:a1:21:7b:ce:ce:29:5e:a5:25:d3: 91:f6:0a:0f:51:76:6a:e7:f5:d5:65:b8:0a:c2:e6:26:98:2c: 2b:0a:83:58:10:9b:6b:97:59:32:e1:26:19:41:a0:70:93:e0: 2a:84:38:7c:13:34:39:83:13:e9:93:fd:9e:70:08:c8:52:cc: cf:bc:3b:dd:41:a6:bb:1e:7f:82:2e:b3:85:e6:fb:b3:02:d8: 13:10:02:31:29:57:eb:6d:93:b0:42:9a:1b:81:c0:eb:4f:4d: 93:93:d2:bb:91:07:7d:de:34:11:85:4b:a3:75:04:6d:a8:9c: 4f:74:64:8f:a2:ac:14:b5:fc:fb:78:73:8f:31:49:bb:70:4d: e5:83:d8:b6:da:89:77:fc:de:28:ab:0d:5e:fa:f8:36:fc:41: 87:06:32:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEH4+//cQwxjzekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk OThiYzVjYmUtMTU5OC00ODlhLTk5MjUtNTRiZDE3ZDE3NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW4k+9Nkzz3szxNyzPy3TlQ6hOUzJJB8scbY dy2LPSSt/szS3h8ha01879sz/MVgNvIw1Jwn3g9sd6xyDheZ4FMrTJMBguyR6xUU WMwF8JKTIGIaYKFNYwO9HHRTjrlpWN6Hdl33h9sGVYbRVPOC/z8nZe0rSxifeIJt wrHm1kAVRmRzpNKd3PvmJuYimtttAJyR4QoCP1Rpgewv2HUAEidTuuOMntXbaLnB 4Vz4stcIUD8Iw9qmNuzTDbgwp+qXFZnM7XmCXZ0YVSpefTb+kNpNGDY5EZxsxCEP Gjkw0Tx6Iq11Bf1+Pf9KY/bvGdS9UGqNnh12vTPkjrdkdLq78wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeImtRysqZEVX9gdFk6Lw95KNz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvN2YxY2RkNGItMGJlYS0z ZjEzLWEyYWQtYjAwNzZhY2E2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ELSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQZYfHOjVAt+6mHC3DdXnX/E78esTQEkRFPQymD54j1/WA+iEM8pvq5 6rKhdiIlwT4I8lHzxsWlEjJJasEeMRp5mwjxRQsW1+rIiUGyeet4CIhFNZklM/2O Corjm/V4ZI2QoSF7zs4pXqUl05H2Cg9Rdmrn9dVluArC5iaYLCsKg1gQm2uXWTLh JhlBoHCT4CqEOHwTNDmDE+mT/Z5wCMhSzM+8O91Bprsef4Ius4Xm+7MC2BMQAjEp V+ttk7BCmhuBwOtPTZOT0ruRB33eNBGFS6N1BG2onE90ZI+irBS1/Pt4c48xSbtw TeWD2LbaiXf83iirDV76+Db8QYcGMt4= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:11 2025 by rpki-client