$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa File: d14d99f6-81f6-3077-9604-b996080b45c9.roa (raw, json) Hash identifier: 5vJLdnciqlJeMdbQ3Tel6u7s6GEsgdstNJo0gAUF49Y= Subject key identifier: D1:FA:35:C3:46:83:6E:68:16:56:88:4E:B0:48:E0:30:10:E1:4B:95 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F43285848B8F0CD5CA54E1838688AD540 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 11273 IP address blocks: 204.194.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cd:5c:a5:4e:18:38:68:8a:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=9c262b1d-e4a1-4d3a-a37e-7592af12ba12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:35:c6:66:e3:6d:a7:30:07:d7:a2:4b:6d: 83:ef:06:5b:8d:ed:cc:50:77:2b:dc:22:15:6d:3f: 82:aa:c8:98:a1:ac:72:c0:f9:d1:04:d2:e0:ed:26: ab:fb:5f:28:3d:d7:12:f6:4f:db:24:71:f4:3e:ab: ea:2f:6d:a9:f7:3c:3e:98:c2:fd:b7:ac:3d:92:12: b6:61:f4:ff:88:ed:05:95:a1:e3:6a:9c:8c:63:e3: 5c:7d:3b:6b:f6:65:69:74:66:4b:62:fb:3a:90:ed: a9:c3:97:dd:4a:e6:e3:c4:70:ac:1e:13:fc:da:1c: 58:54:8a:92:6e:ff:d9:19:0f:86:5f:04:7c:36:ab: 3e:c4:2c:79:1b:26:07:71:72:b2:1d:62:8f:18:2b: 2d:ff:7d:a4:91:d4:af:a6:2f:10:87:93:54:8b:bf: 86:dd:48:37:6f:47:4d:ab:63:d2:69:d0:9a:a0:78: a1:96:20:b1:f7:4d:2d:61:15:ed:84:c2:8a:57:61: 33:01:f8:0a:cd:23:53:06:04:91:53:76:b9:cc:a8: 18:64:40:a2:06:16:00:55:ee:f4:d9:4b:e7:22:cb: 1a:36:f4:82:50:88:95:01:1d:35:25:e4:90:78:6d: 6f:d3:30:fb:97:56:f4:d0:87:99:5e:5b:23:95:4e: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FA:35:C3:46:83:6E:68:16:56:88:4E:B0:48:E0:30:10:E1:4B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 204.194.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e3:8c:a4:4c:a1:19:60:37:a4:40:a5:21:7d:e4:d9:16:4e: ee:78:cd:48:b0:4e:ef:f4:c3:d6:98:76:b2:50:e9:59:3d:a0: 7d:8c:57:a1:2c:f7:de:40:bc:58:3b:8f:01:90:b0:22:d0:85: 87:96:92:e1:6b:99:18:e1:7d:a6:8f:4a:ef:4e:66:8d:b7:9a: 1f:90:24:07:b4:79:36:c2:62:65:44:a1:c8:87:c5:69:1b:bc: a1:1c:e3:ae:e3:99:1b:5d:77:84:95:af:9c:4c:38:50:5f:4e: 7a:6b:70:50:e5:fc:67:23:6d:63:4c:25:62:ac:e5:36:d8:ce: 72:68:a5:34:42:a0:a7:8d:b9:7e:41:c0:b7:77:f6:1d:40:70: b3:36:69:ad:b7:10:86:b8:9b:da:bc:5a:e1:04:f0:62:c9:c4: b0:1b:16:a3:c3:4d:f4:37:97:75:23:7a:a2:c3:dc:0c:92:a3: a9:ed:f7:f8:12:2e:2d:35:5a:00:12:60:96:a3:3a:a1:f8:99: 3a:9d:6b:c6:1c:97:d0:9d:b8:d2:37:55:62:ea:f4:2e:f4:44: 6a:ed:72:54:49:06:38:a7:55:1a:7d:09:ae:d5:34:48:9c:62: 08:49:13:b9:b7:78:d8:39:60:9a:97:ab:09:95:44:7c:4d:1f: 0d:02:e5:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M1cpU4YOGiK1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OWMyNjJiMWQtZTRhMS00ZDNhLWEzN2UtNzU5MmFmMTJiYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQ1xmbjbacwB9eiS22D7wZbje3MUHcr3CIV bT+CqsiYoaxywPnRBNLg7Sar+18oPdcS9k/bJHH0PqvqL22p9zw+mML9t6w9khK2 YfT/iO0FlaHjapyMY+NcfTtr9mVpdGZLYvs6kO2pw5fdSubjxHCsHhP82hxYVIqS bv/ZGQ+GXwR8Nqs+xCx5GyYHcXKyHWKPGCst/32kkdSvpi8Qh5NUi7+G3Ug3b0dN q2PSadCaoHihliCx900tYRXthMKKV2EzAfgKzSNTBgSRU3a5zKgYZECiBhYAVe70 2UvnIssaNvSCUIiVAR01JeSQeG1v0zD7l1b00IeZXlsjlU7j0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH6NcNGg25oFlaITrBI4DAQ4UuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZDE0ZDk5ZjYtODFmNi0z MDc3LTk2MDQtYjk5NjA4MGI0NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXjjKRMoRlgN6RApSF95NkWTu54zUiwTu/0w9aYdrJQ6Vk9oH2MV6Es 995AvFg7jwGQsCLQhYeWkuFrmRjhfaaPSu9OZo23mh+QJAe0eTbCYmVEociHxWkb vKEc467jmRtdd4SVr5xMOFBfTnprcFDl/GcjbWNMJWKs5TbYznJopTRCoKeNuX5B wLd39h1AcLM2aa23EIa4m9q8WuEE8GLJxLAbFqPDTfQ3l3UjeqLD3AySo6nt9/gS Li01WgASYJajOqH4mTqda8Ycl9CduNI3VWLq9C70RGrtclRJBjinVRp9Ca7VNEic YghJE7m3eNg5YJqXqwmVRHxNHw0C5c4= -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:31 2025 by rpki-client