$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/e28fb726-a836-3867-baf8-1c3b583b3d9a.roa File: e28fb726-a836-3867-baf8-1c3b583b3d9a.roa (raw, json) Hash identifier: QXwJGxBEhnvvVHIm9HjiqvkSiGeDOpcX216409AzjeU= Subject key identifier: 8D:1A:DD:D1:41:DC:E9:7E:B4:9D:D5:76:17:1D:6C:00:EE:4C:43:AF Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Certificate serial: 010D0C9F4328584930DE6EB50B10536B7AE90B38 Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/e28fb726-a836-3867-baf8-1c3b583b3d9a.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 394161 IP address blocks: 192.95.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6e:b5:0b:10:53:6b:7a:e9:0b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=41cb8aa0-a36f-499c-ac6e-063552937906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:b9:e0:7e:cd:88:cc:2a:36:f8:ae:cc:57: 9f:a8:8d:5b:80:e4:b4:13:e7:f3:28:76:25:9a:86: d6:b2:ca:ec:f5:89:b2:7b:98:51:79:7c:a3:5b:8e: 19:5a:84:87:31:b1:ff:18:97:64:4e:d1:94:5b:d6: 38:47:29:03:e6:64:8e:48:46:45:04:cb:88:b6:ce: 21:64:f3:0d:80:28:0a:e0:44:9d:5a:13:30:f5:30: 31:3b:c1:12:b1:3f:d3:18:c5:32:2d:fa:b0:7c:78: 8b:26:c2:97:4b:b0:6b:f5:c4:87:db:6d:be:c7:41: 48:0c:38:2d:7e:6b:c4:c6:64:f4:83:35:c0:d0:9f: 9b:8e:ca:25:3d:32:5c:53:78:3f:32:60:ab:d4:5d: f3:09:86:fd:ee:ca:56:9e:b7:41:fb:f7:de:18:e5: e6:e6:96:65:c5:9f:62:ac:ae:e6:3f:9d:b1:39:a3: 1d:19:8a:1e:2a:62:65:14:cc:b2:f9:e0:3d:24:ab: 98:44:5b:4c:32:64:23:37:af:06:06:eb:f3:28:e1: 7a:d9:c7:9d:10:56:68:4a:5d:fb:61:a7:47:ee:b4: b7:cb:35:d0:31:b2:5b:45:b8:72:59:79:13:1f:dc: 77:64:94:22:db:91:fd:cf:4c:9f:69:b9:36:08:23: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:DD:D1:41:DC:E9:7E:B4:9D:D5:76:17:1D:6C:00:EE:4C:43:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/e28fb726-a836-3867-baf8-1c3b583b3d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl X509v3 Authority Key Identifier: keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer sbgp-ipAddrBlock: critical IPv4: 192.95.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fb:94:48:e4:71:37:50:4d:39:79:d2:72:9a:b1:45:bd:1e: ff:02:47:81:e4:71:21:c8:c8:04:ea:da:98:ab:04:d8:89:26: d1:85:54:fd:48:6f:17:f4:22:30:b5:51:65:4e:18:54:f2:51: 6c:b2:29:55:64:30:ed:a8:37:13:58:b6:7c:ca:bf:4c:fa:74: 16:c9:93:0d:fb:ab:74:cc:67:d8:95:af:1b:17:97:6c:7a:ba: 41:c3:fa:a0:1f:bb:a0:79:60:38:f9:05:f1:a6:5c:9b:ad:6b: 54:f2:c3:1a:dc:49:1d:04:a9:e4:f5:2a:47:1b:ec:d7:33:94: b3:48:da:83:1b:b0:ec:b7:f2:8c:80:12:43:4c:a5:0e:68:2d: 78:d9:21:93:97:70:18:14:4f:20:65:1d:a5:7f:ef:5a:4b:f4: fa:8e:80:e0:d8:92:dc:8f:b7:b8:02:0b:c2:5f:96:3a:85:48: bf:08:4f:31:0f:39:6e:17:30:05:b6:92:7e:77:c9:70:23:46: bb:69:65:67:1e:5f:f3:a0:19:87:ff:0f:b4:8f:6c:9b:e9:68: fd:78:c5:83:b8:56:2e:34:b4:56:8d:5e:7e:78:52:99:cb:a2: 74:84:09:f5:89:af:75:65:71:aa:ad:eb:d5:80:03:30:ea:f3: 5f:b0:35:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m61CxBTa3rpCzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm MmY5MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDFjYjhhYTAtYTM2Zi00OTljLWFjNmUtMDYzNTUyOTM3OTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UC54H7NiMwqNviuzFefqI1bgOS0E+fzKHYl mobWssrs9Ymye5hReXyjW44ZWoSHMbH/GJdkTtGUW9Y4RykD5mSOSEZFBMuIts4h ZPMNgCgK4ESdWhMw9TAxO8ESsT/TGMUyLfqwfHiLJsKXS7Br9cSH222+x0FIDDgt fmvExmT0gzXA0J+bjsolPTJcU3g/MmCr1F3zCYb97spWnrdB+/feGOXm5pZlxZ9i rK7mP52xOaMdGYoeKmJlFMyy+eA9JKuYRFtMMmQjN68GBuvzKOF62cedEFZoSl37 YadH7rS3yzXQMbJbRbhyWXkTH9x3ZJQi25H9z0yfabk2CCNRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0a3dFB3Ol+tJ3VdhcdbADuTEOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3 ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvZTI4ZmI3MjYtYTgzNi0z ODY3LWJhZjgtMWMzYjU4M2IzZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0 ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3 MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr7lEjkcTdQTTl50nKasUW9Hv8CR4HkcSHIyATq2pirBNiJJtGFVP1I bxf0IjC1UWVOGFTyUWyyKVVkMO2oNxNYtnzKv0z6dBbJkw37q3TMZ9iVrxsXl2x6 ukHD+qAfu6B5YDj5BfGmXJuta1TywxrcSR0EqeT1Kkcb7NczlLNI2oMbsOy38oyA EkNMpQ5oLXjZIZOXcBgUTyBlHaV/71pL9PqOgODYktyPt7gCC8JfljqFSL8ITzEP OW4XMAW2kn53yXAjRrtpZWceX/OgGYf/D7SPbJvpaP14xYO4Vi40tFaNXn54UpnL onSECfWJr3Vlcaqt69WAAzDq81+wNUM= -----END CERTIFICATE-----Generated at Wed Apr 9 16:41:05 2025 by rpki-client