$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa File: 28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa (raw, json) Hash identifier: k8N6+PBcXwR6jJTVnFzmx7v9vkjB3DeucXzCdxhbg1g= Subject key identifier: 4A:BD:E1:F4:33:F8:38:AE:05:D6:ED:C4:FD:A0:7D:47:97:7A:4E:DB Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858491246BA878283875F3AA29000 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 23.227.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ba:87:82:83:87:5f:3a:a2:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=b5e5cce7-3587-4a72-bef1-6e4cb5b580fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:a6:65:73:41:42:8a:c8:52:f1:97:0b:04: fa:07:f8:8f:a8:08:76:a3:67:a1:7c:cc:47:20:92: f9:d3:e9:b9:f1:52:ac:ee:ad:d0:08:c1:b9:ef:d4: bc:b8:21:af:f5:b2:e3:92:3b:3a:cd:cd:48:81:1a: 45:f3:b5:c9:e8:96:b6:ed:3f:87:13:d7:f6:06:f4: 7b:81:21:be:b0:d5:d1:8b:87:72:a6:f6:f0:eb:d0: d0:b4:f3:99:86:2d:4b:74:8a:e3:e5:9f:f8:3b:b7: 4d:35:8d:d9:32:61:32:86:41:d7:9e:7a:73:c9:3b: 9a:01:d1:5f:1b:a5:78:56:d6:7a:63:ae:74:66:64: 0a:b0:07:9d:1b:32:d4:2b:70:03:a3:a1:a6:ad:bd: 40:8e:23:2d:be:5b:6a:66:48:73:dd:6a:96:24:cb: f4:86:c9:5c:4a:fd:8b:d2:30:b8:75:a5:55:9e:f7: a4:37:f1:90:52:b2:c4:fe:aa:7d:fa:4f:f8:f1:48: b4:2b:4d:04:f2:2b:9a:c9:16:9b:dc:2f:06:5a:05: 34:f3:e4:f9:6b:ef:05:e4:f0:c0:0c:eb:43:54:0b: dc:6f:dd:c0:6d:90:ca:de:02:88:8f:a6:5e:6b:a2: 89:b9:c3:9d:5b:60:95:f9:bf:c0:4e:42:ae:b9:f1: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BD:E1:F4:33:F8:38:AE:05:D6:ED:C4:FD:A0:7D:47:97:7A:4E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:67:6a:18:87:8f:04:85:be:c8:57:a9:41:55:27:ed:17:a8: 26:55:0e:eb:87:7c:7e:f1:42:11:07:75:d1:94:20:3b:8b:a7: 86:6d:e4:3a:72:25:55:15:f9:ae:2d:c2:32:fa:fc:1d:3a:51: 0d:45:03:8f:a1:be:56:2a:d0:b6:70:24:42:09:c4:ba:08:ff: 99:42:83:cb:34:46:a3:7d:74:52:17:05:32:3a:bb:71:5f:27: 29:bb:1c:75:06:1f:87:28:ae:d0:b6:52:92:b9:a3:9f:bc:e4: 52:d4:bb:e8:a1:42:6b:11:45:be:80:0d:3d:d2:1d:3d:86:be: 56:8d:65:86:01:31:e1:56:78:75:b0:2d:86:6b:ee:ac:d3:dc: d9:4b:8a:0f:b3:c2:6f:87:a6:f8:9d:50:dc:cd:67:b8:05:b8: e1:cc:87:cd:bb:40:65:2d:6b:40:86:10:bb:09:4c:00:3d:6f: 52:cf:6a:7a:ab:9b:d8:cc:da:89:17:99:83:ca:5a:11:1b:22: 4c:54:fb:fb:87:ba:02:42:a7:b5:bc:00:28:8a:66:3c:2d:32: 63:16:a3:ec:57:0d:89:94:c7:55:22:a5:a6:e0:89:b3:bd:c3: e2:0a:5a:15:e8:9a:7e:64:ce:02:2c:f2:5b:f2:ca:6e:c7:45: 43:f3:8a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrqHgoOHXzqikAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YjVlNWNjZTctMzU4Ny00YTcyLWJlZjEtNmU0Y2I1YjU4MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVemZXNBQorIUvGXCwT6B/iPqAh2o2ehfMxH IJL50+m58VKs7q3QCMG579S8uCGv9bLjkjs6zc1IgRpF87XJ6Ja27T+HE9f2BvR7 gSG+sNXRi4dypvbw69DQtPOZhi1LdIrj5Z/4O7dNNY3ZMmEyhkHXnnpzyTuaAdFf G6V4VtZ6Y650ZmQKsAedGzLUK3ADo6Gmrb1AjiMtvltqZkhz3WqWJMv0hslcSv2L 0jC4daVVnvekN/GQUrLE/qp9+k/48Ui0K00E8iuayRab3C8GWgU08+T5a+8F5PDA DOtDVAvcb93AbZDK3gKIj6Zea6KJucOdW2CV+b/ATkKuufFfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq94fQz+DiuBdbtxP2gfUeXek7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMjhkNWJhOGYtMGY0Yi0z Zjk1LWE5YTUtZWQ4YTQxZDNkMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFnahiHjwSFvshXqUFVJ+0XqCZVDuuHfH7xQhEHddGUIDuLp4Zt5Dpy JVUV+a4twjL6/B06UQ1FA4+hvlYq0LZwJEIJxLoI/5lCg8s0RqN9dFIXBTI6u3Ff Jym7HHUGH4cortC2UpK5o5+85FLUu+ihQmsRRb6ADT3SHT2GvlaNZYYBMeFWeHWw LYZr7qzT3NlLig+zwm+HpvidUNzNZ7gFuOHMh827QGUta0CGELsJTAA9b1LPanqr m9jM2okXmYPKWhEbIkxU+/uHugJCp7W8ACiKZjwtMmMWo+xXDYmUx1UipabgibO9 w+IKWhXomn5kzgIs8lvyym7HRUPzioc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:45 2025 by rpki-client