$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa File: 328a9f9e-f8c1-360f-88b5-5283333c29d7.roa (raw, json) Hash identifier: M0XDJ+OyvLzkcnBOZW9AYKTY9sRmLnKGQRRqE6j0FbU= Subject key identifier: 69:F4:14:D5:18:EE:45:51:86:5B:F6:CA:06:20:0D:26:66:21:A4:82 Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F43285849AD1A0D4B7E98E54F444B8080 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 46694 IP address blocks: 216.229.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0d:4b:7e:98:e5:4f:44:4b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=93d15506-8303-4d67-b17e-b15b2997453d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:37:92:23:33:39:56:84:d5:7b:48:ff:47: 00:e2:15:de:05:3b:be:d8:58:50:94:c8:ce:83:c3: ff:b6:89:36:c0:9c:0f:dc:db:0b:6c:c6:c1:3e:5d: d3:72:4d:93:9b:a8:6a:1f:47:e7:08:e5:16:ba:5c: f6:8f:49:6e:62:13:00:43:db:40:bd:b5:9c:c0:c9: 9d:58:9b:a8:4b:57:e0:41:d4:ce:e5:12:75:29:5d: 1a:7f:66:5e:90:7f:36:c0:15:b2:2c:a3:39:36:ad: 95:3f:4c:b7:f9:6a:2f:5a:bf:bf:be:3c:ab:97:eb: a8:2e:dd:ab:a3:bd:f5:1b:39:63:d8:3a:68:01:8c: 52:60:8c:0c:cd:9e:39:ab:6b:0d:34:17:4e:94:f0: f9:75:1a:af:0f:7a:6e:37:41:f3:b5:01:73:15:b6: aa:ff:59:27:66:a8:5d:6a:09:f0:29:71:bc:18:c2: 1d:30:08:5f:ca:08:24:5a:5c:f6:8d:cd:9f:9e:fa: 27:73:18:d8:6b:4b:7d:3b:ce:88:4c:e2:7d:89:c5: b7:67:12:0c:0c:c2:d8:41:d5:7a:b9:ce:1c:b4:61: e8:fe:06:3c:09:ca:d5:eb:53:74:54:89:9e:c2:1a: fd:c8:23:d3:b5:86:77:fd:f7:ff:ce:d9:6d:41:60: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F4:14:D5:18:EE:45:51:86:5B:F6:CA:06:20:0D:26:66:21:A4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2f:6c:42:38:6f:89:05:fd:ab:4d:9e:ed:25:fa:44:e0:79: 05:33:97:46:a2:01:79:88:d2:c8:99:e4:3b:6e:a6:95:4a:89: 36:a3:62:25:9b:75:57:9d:0c:08:f6:3d:40:5f:26:0e:bb:a3: de:c2:91:e1:3c:ed:b6:77:62:3f:08:8a:ba:95:a9:3b:02:08: ce:7a:fe:0b:71:a1:73:68:a5:31:54:ba:52:94:8c:7d:a9:df: fb:20:91:be:78:96:b1:e7:78:ba:f8:19:37:81:9a:13:bb:01: 12:66:fa:f3:af:ad:92:c6:dc:88:ac:46:18:1e:11:a5:0e:7b: 6f:d6:b7:b7:f3:3d:55:8e:ec:cd:dd:0b:47:8c:97:15:cc:1c: f7:4a:50:05:d2:13:27:0b:eb:94:b8:49:cb:46:d6:fe:bc:55: 56:36:2d:fa:b2:9f:85:43:fd:5a:73:5f:d4:a0:ea:4a:a8:ce: 37:d8:e6:ef:33:c0:e4:f3:1e:7e:d1:97:39:99:da:71:5c:8e: 5f:54:d1:ad:54:87:ae:e8:07:7d:87:9b:af:45:45:56:78:93: 52:ed:8c:7a:44:28:97:68:34:3d:e4:89:ac:3e:17:eb:33:09: 7b:18:dc:f1:01:a9:10:f2:d5:e5:6a:ff:5f:03:29:ec:43:9c: b2:8b:8b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGg1LfpjlT0RLgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTNkMTU1MDYtODMwMy00ZDY3LWIxN2UtYjE1YjI5OTc0NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk83kiMzOVaE1XtI/0cA4hXeBTu+2FhQlMjO g8P/tok2wJwP3NsLbMbBPl3Tck2Tm6hqH0fnCOUWulz2j0luYhMAQ9tAvbWcwMmd WJuoS1fgQdTO5RJ1KV0af2ZekH82wBWyLKM5Nq2VP0y3+WovWr+/vjyrl+uoLt2r o731Gzlj2DpoAYxSYIwMzZ45q2sNNBdOlPD5dRqvD3puN0HztQFzFbaq/1knZqhd agnwKXG8GMIdMAhfyggkWlz2jc2fnvoncxjYa0t9O86ITOJ9icW3ZxIMDMLYQdV6 uc4ctGHo/gY8CcrV61N0VImewhr9yCPTtYZ3/ff/ztltQWAW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn0FNUY7kVRhlv2ygYgDSZmIaSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvMzI4YTlmOWUtZjhjMS0z NjBmLTg4YjUtNTI4MzMzM2MyOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkvbEI4b4kF/atNnu0l+kTgeQUzl0aiAXmI0siZ5DtuppVKiTajYiWb dVedDAj2PUBfJg67o97CkeE87bZ3Yj8IirqVqTsCCM56/gtxoXNopTFUulKUjH2p 3/sgkb54lrHneLr4GTeBmhO7ARJm+vOvrZLG3IisRhgeEaUOe2/Wt7fzPVWO7M3d C0eMlxXMHPdKUAXSEycL65S4SctG1v68VVY2Lfqyn4VD/VpzX9Sg6kqozjfY5u8z wOTzHn7RlzmZ2nFcjl9U0a1Uh67oB32Hm69FRVZ4k1LtjHpEKJdoND3kiaw+F+sz CXsY3PEBqRDy1eVq/18DKexDnLKLi78= -----END CERTIFICATE-----Generated at Mon May 5 19:23:33 2025 by rpki-client