$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa File: 101b421f-56d0-36b5-8bc2-cd9983162b0a.roa (raw, json) Hash identifier: Z/o6OQXlRqj2zHg5Bc/al0Jcqam2LiuCN0JVxuMUNBA= Subject key identifier: 8C:33:4F:6B:E0:16:C4:BE:0A:FE:CA:A0:99:6D:34:17:34:D0:A6:4C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58231878B9A35EFF0599440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 192.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:31:87:8b:9a:35:ef:f0:59:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ef9c831b-ce02-4d68-af14-3c7515164d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:27:f1:d1:0c:7b:c0:8e:ac:f6:6b:21:2d:ea: 10:27:55:ab:e6:75:f9:49:b3:9d:5a:9e:e1:b5:eb: 0c:e8:fc:a3:90:f0:50:ca:ec:01:38:9e:50:19:7c: 0d:2e:53:6c:26:54:73:3a:1f:e6:63:52:eb:04:f2: a0:5c:f0:37:cc:8e:ac:45:2a:63:41:d7:1f:88:85: df:1d:0b:62:02:7e:70:ef:61:6a:68:04:d3:d6:45: 92:e8:f6:58:f4:05:af:19:74:08:85:4e:82:af:f8: 4b:cc:61:eb:5c:64:2c:b9:b1:d4:d2:94:d5:4b:15: 0a:e8:6b:c5:59:fa:f8:8e:50:35:8f:23:3c:3b:ec: 9a:97:4e:1c:96:64:83:cd:ad:d4:28:5b:c1:07:4f: 06:eb:b5:e0:9c:89:ea:1d:41:54:20:85:51:f3:61: aa:ca:c8:a3:f3:76:00:ef:7b:b2:6a:23:19:05:bf: 56:29:98:6a:06:38:05:a1:96:c4:6b:39:1e:8f:09: 5d:ce:cb:8f:e4:4b:37:0a:b8:6a:a8:b0:c1:a9:36: 1a:6d:73:c9:d1:8a:32:ee:3b:38:a0:d0:fb:5b:3f: a1:4b:b1:43:37:34:84:36:2e:26:93:e1:5b:7b:65: 6b:5c:c4:95:6c:a2:49:99:6a:78:06:34:ea:62:d3: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:4F:6B:E0:16:C4:BE:0A:FE:CA:A0:99:6D:34:17:34:D0:A6:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 192.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:81:3b:c1:17:8b:d2:7e:ce:3e:ba:ca:40:35:48:f3:47:5c: c8:51:c3:90:bb:82:1f:f8:1d:b9:66:3d:c4:1f:17:0a:ba:a5: 1c:83:28:52:77:a1:bf:61:8d:91:20:2c:31:db:d1:dc:a5:d4: 88:ee:09:dc:65:c6:0e:54:16:2d:53:e5:5b:cf:ca:cf:c6:48: bf:87:8b:96:86:47:8d:fd:bb:27:89:7a:6e:4d:c1:7e:9e:ac: ab:bb:90:ae:ee:de:81:b6:dc:ed:f0:d3:d0:12:70:ff:73:23: f9:27:26:9a:63:1d:82:10:19:e8:76:f6:66:fa:9e:99:58:f2: 61:21:91:a8:0e:de:cb:3b:0f:68:1d:22:89:d4:c5:0b:9b:f0: 80:9e:00:bd:b2:c1:80:f1:3f:2c:fc:6e:1b:9e:67:0e:75:a7: 69:e8:0c:50:aa:7a:ef:77:b0:ac:0c:12:cc:5c:7d:c1:2f:36: 11:4c:ed:5a:1e:c0:4a:70:50:c4:af:b2:f9:46:43:24:f6:20: 78:d1:f1:0d:a9:bb:d6:ac:10:ab:87:72:5d:e1:ff:d0:c2:49: c5:53:ee:2a:f5:67:33:4e:e4:a3:f2:2e:50:b5:cd:bd:33:a4: 7d:12:21:e6:aa:a3:b6:70:7b:fc:ed:14:b3:c6:4e:2d:53:69: 68:8c:9a:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjGHi5o17/BZlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWY5YzgzMWItY2UwMi00ZDY4LWFmMTQtM2M3NTE1MTY0ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCfx0Qx7wI6s9mshLeoQJ1Wr5nX5SbOdWp7h tesM6PyjkPBQyuwBOJ5QGXwNLlNsJlRzOh/mY1LrBPKgXPA3zI6sRSpjQdcfiIXf HQtiAn5w72FqaATT1kWS6PZY9AWvGXQIhU6Cr/hLzGHrXGQsubHU0pTVSxUK6GvF Wfr4jlA1jyM8O+yal04clmSDza3UKFvBB08G67XgnInqHUFUIIVR82Gqysij83YA 73uyaiMZBb9WKZhqBjgFoZbEazkejwldzsuP5Es3CrhqqLDBqTYabXPJ0Yoy7js4 oND7Wz+hS7FDNzSENi4mk+Fbe2VrXMSVbKJJmWp4BjTqYtOwuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwzT2vgFsS+Cv7KoJltNBc00KZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTAxYjQyMWYtNTZkMC0z NmI1LThiYzItY2Q5OTgzMTYyYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeBO8EXi9J+zj66ykA1SPNHXMhRw5C7gh/4HblmPcQfFwq6pRyDKFJ3 ob9hjZEgLDHb0dyl1IjuCdxlxg5UFi1T5VvPys/GSL+Hi5aGR439uyeJem5NwX6e rKu7kK7u3oG23O3w09AScP9zI/knJppjHYIQGeh29mb6nplY8mEhkagO3ss7D2gd IonUxQub8ICeAL2ywYDxPyz8bhueZw51p2noDFCqeu93sKwMEsxcfcEvNhFM7Voe wEpwUMSvsvlGQyT2IHjR8Q2pu9asEKuHcl3h/9DCScVT7ir1ZzNO5KPyLlC1zb0z pH0SIeaqo7Zwe/ztFLPGTi1TaWiMmik= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:02 2025 by rpki-client