$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa File: 28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa (raw, json) Hash identifier: 3e32E/mgfEw1lFlf8L3qxsYA+ZdmFYUpg5HKRGYPNBw= Subject key identifier: 6F:23:53:65:E8:02:70:B8:5D:20:B3:3E:8E:76:AA:93:15:A8:28:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F84E2DBAC8CC46F8F85FA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 174.168.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:4e:2d:ba:c8:cc:46:f8:f8:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fb7dfa62-2911-49a1-bb59-0a88d580feb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:1a:76:72:9c:a3:26:c8:89:2c:4a:8c:7e: af:7f:82:2b:76:b6:f5:c2:ea:82:a2:d2:6c:69:1e: a4:b8:47:91:cd:b3:84:0e:85:80:6d:c3:67:bc:76: ba:81:7f:90:2f:9c:fd:8d:58:a0:02:49:fe:db:d2: c2:c5:99:07:f4:16:05:d2:7f:40:b6:ad:2a:b5:09: ed:dc:66:f8:8e:8b:45:05:60:c3:47:c9:d9:be:94: 94:a5:89:13:3b:44:f4:99:07:bd:25:57:c9:98:6f: de:fc:4b:1b:2d:66:49:bf:1a:76:fb:ec:63:18:3b: 8b:af:a6:1a:aa:e5:57:94:f8:71:a4:92:d4:3b:7f: 63:85:f0:7b:25:8a:27:c1:26:e0:ea:a4:f8:e6:8b: 27:fe:78:7e:fc:22:5e:0a:79:e5:56:da:6c:50:3f: 6f:bb:a5:d7:d8:7e:40:d1:57:e4:6a:7a:86:29:49: af:c1:58:55:be:0d:dd:4d:f5:d3:05:b8:30:9c:eb: df:44:29:bb:96:ee:1b:08:a1:be:21:52:b2:a2:a5: 49:96:fd:26:d7:e9:b8:ac:4e:2a:46:7f:bd:ac:ea: 1b:ae:f9:90:1a:b4:15:98:90:f2:79:72:61:0e:99: 40:bd:1e:38:d7:97:88:da:42:be:c7:ec:0c:5d:43: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:23:53:65:E8:02:70:B8:5D:20:B3:3E:8E:76:AA:93:15:A8:28:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:69:0e:a5:f7:c0:39:76:0c:78:cf:b3:e6:fe:b5:ee:f6:c7: 7d:67:bb:ac:c9:bb:77:ea:a9:e0:0b:eb:be:68:75:18:9e:35: 94:3d:84:a8:db:f2:82:bb:6c:fc:3d:36:ae:0e:1f:f2:41:78: 1e:bc:0a:e7:2e:bc:09:4b:34:f6:cc:a9:7f:e2:aa:50:90:d7: ed:17:92:ee:72:58:8f:6d:ba:7e:a9:ce:bb:fd:bc:ae:fa:94: 67:8a:e7:f4:90:94:59:d7:fc:d8:1d:f0:f0:96:08:a0:68:ad: d8:2d:3c:b8:2e:86:40:b5:f2:54:9c:40:2b:40:ac:84:eb:fe: 0d:d5:9a:42:ab:e5:cb:71:59:d4:4a:e0:34:cc:2d:4d:f2:f2: f5:b6:a2:c6:c7:8e:02:1a:e6:b4:01:9c:ce:85:35:31:e4:31: bc:e1:bb:55:72:59:d3:c1:4c:6d:b0:16:4b:88:26:74:63:80: 5a:fe:60:7a:1e:ae:fd:e5:16:c1:86:c3:44:b8:59:c6:e8:2c: 0f:8a:cc:ce:d0:7e:e1:90:11:9f:49:7b:17:c6:a0:6f:23:4c: 2b:85:e9:41:2d:eb:9f:bc:c8:e6:ca:9c:a1:0f:1c:3c:41:39: 62:f3:7a:dd:28:b8:65:8f:19:6a:30:cd:14:21:e5:32:7a:42: 74:6f:cc:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+E4tusjMRvj4X6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmI3ZGZhNjItMjkxMS00OWExLWJiNTktMGE4OGQ1ODBmZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw4adnKcoybIiSxKjH6vf4Irdrb1wuqCotJs aR6kuEeRzbOEDoWAbcNnvHa6gX+QL5z9jVigAkn+29LCxZkH9BYF0n9Atq0qtQnt 3Gb4jotFBWDDR8nZvpSUpYkTO0T0mQe9JVfJmG/e/EsbLWZJvxp2++xjGDuLr6Ya quVXlPhxpJLUO39jhfB7JYonwSbg6qT45osn/nh+/CJeCnnlVtpsUD9vu6XX2H5A 0VfkanqGKUmvwVhVvg3dTfXTBbgwnOvfRCm7lu4bCKG+IVKyoqVJlv0m1+m4rE4q Rn+9rOobrvmQGrQVmJDyeXJhDplAvR4415eI2kK+x+wMXUP3dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8jU2XoAnC4XSCzPo52qpMVqCjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjgzMTNmMDktYmM4Mi0z ZjNmLWFjODMtZjFkMDMyZWVlN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZpDqX3wDl2DHjPs+b+te72x31nu6zJu3fqqeAL675odRieNZQ9hKjb 8oK7bPw9Nq4OH/JBeB68CucuvAlLNPbMqX/iqlCQ1+0Xku5yWI9tun6pzrv9vK76 lGeK5/SQlFnX/Ngd8PCWCKBordgtPLguhkC18lScQCtArITr/g3VmkKr5ctxWdRK 4DTMLU3y8vW2osbHjgIa5rQBnM6FNTHkMbzhu1VyWdPBTG2wFkuIJnRjgFr+YHoe rv3lFsGGw0S4WcboLA+KzM7QfuGQEZ9JexfGoG8jTCuF6UEt65+8yObKnKEPHDxB OWLzet0ouGWPGWowzRQh5TJ6QnRvzGI= -----END CERTIFICATE-----Generated at Fri May 9 15:15:08 2025 by rpki-client