$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/170236aa-4aa5-367c-a414-53089aa4784e.roa File: 170236aa-4aa5-367c-a414-53089aa4784e.roa (raw, json) Hash identifier: P9R9zMQIQHDqokOIUUYQHKtCH1UoMbm60Jt3atbZGaw= Subject key identifier: D5:80:29:A8:18:7B:D6:16:D6:66:92:AC:99:E0:C1:1F:7F:BC:D8:9C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849B6DF59161F1DF366263F3F80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/170236aa-4aa5-367c-a414-53089aa4784e.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 33287 IP address blocks: 158.62.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:59:16:1f:1d:f3:66:26:3f:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=9b35927f-7f00-4a5f-aaca-a9c5bcdd1b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:25:54:59:f6:f3:17:d0:74:f9:9e:7e:c1: d6:43:ec:1c:d1:ae:56:b8:81:39:06:89:7d:e6:51: f5:ea:fa:88:3d:74:c0:b3:65:84:b9:12:1b:c5:8c: 1a:8b:1a:e6:04:b2:38:46:a0:75:66:7f:c1:69:74: fe:09:8a:00:9b:17:7a:f3:84:60:ef:0e:4f:a4:e3: 32:21:56:81:d6:c3:52:66:07:62:87:4f:7c:f8:32: 21:c7:62:a3:9f:da:59:02:c8:59:5a:12:bd:9a:8c: 27:3c:0f:f3:b1:36:3a:88:94:05:62:71:1d:8c:0a: 86:19:a2:68:3a:4c:68:02:1e:93:d7:c6:61:a0:fd: c7:35:54:fb:ae:24:9f:a9:a9:49:0d:f5:3e:37:93: 90:51:86:72:00:90:60:bc:5c:c9:65:99:02:65:ae: a6:de:df:6f:d1:ac:0f:d1:5a:c6:12:11:d1:7b:74: 2e:c8:0c:01:81:51:22:82:62:81:06:aa:f2:6b:72: 80:e4:fd:ab:72:41:5a:92:93:92:1d:dd:3f:67:f6: 75:a9:9f:4f:ac:29:72:c0:0a:7f:98:15:55:27:5e: 65:7f:5c:b1:9f:b7:b8:3c:78:b9:d9:be:d5:95:f4: 49:f4:c2:e8:24:64:25:5b:8c:a0:7a:3f:ac:1d:69: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:80:29:A8:18:7B:D6:16:D6:66:92:AC:99:E0:C1:1F:7F:BC:D8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/170236aa-4aa5-367c-a414-53089aa4784e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:15:f2:74:b1:e4:20:1c:53:af:02:59:e2:e4:bb:4f:2b:19: 60:bd:05:05:3a:d2:7f:53:b5:c6:13:14:ac:1e:30:e3:ac:8e: 20:be:e6:28:2a:79:4a:6e:ff:59:35:28:10:84:e4:fc:7a:27: fe:25:1a:a8:10:5f:90:ed:e4:0e:c6:19:cb:d0:f5:69:9c:d1: 5d:94:6c:3b:70:59:bc:42:c8:91:40:e4:0b:df:5a:f6:a0:27: 65:31:7a:81:d0:2d:0b:1e:fd:ef:58:be:bb:c9:bd:23:df:13: ed:31:43:e1:c0:97:4a:5d:31:20:3e:c6:9f:7b:57:07:64:45: 4d:45:23:60:33:96:42:24:7b:d2:3e:eb:d9:29:42:43:77:fb: 6c:8c:f7:5c:f8:29:99:31:df:3e:de:fd:7b:dd:c4:e7:74:79: a4:5f:97:46:bd:23:62:65:5c:86:10:41:b6:30:13:03:3a:ae: ae:0e:21:d1:0b:6e:d8:c8:bb:f6:ab:db:f9:ce:bc:0b:19:45: cb:27:1a:bd:f7:e0:22:ee:38:c0:1a:1d:ee:c2:31:e1:97:8a: 84:7d:e9:1d:7d:50:e1:5f:ea:16:ad:f4:d5:59:09:37:af:9c: 2b:48:ba:12:0e:65:84:79:71:6c:f0:74:48:85:d8:c8:8f:e9: 7c:34:2f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231kWHx3zZiY/P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk OWIzNTkyN2YtN2YwMC00YTVmLWFhY2EtYTljNWJjZGQxYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4YlVFn28xfQdPmefsHWQ+wc0a5WuIE5Bol9 5lH16vqIPXTAs2WEuRIbxYwaixrmBLI4RqB1Zn/BaXT+CYoAmxd684Rg7w5PpOMy IVaB1sNSZgdih098+DIhx2Kjn9pZAshZWhK9mownPA/zsTY6iJQFYnEdjAqGGaJo OkxoAh6T18ZhoP3HNVT7riSfqalJDfU+N5OQUYZyAJBgvFzJZZkCZa6m3t9v0awP 0VrGEhHRe3QuyAwBgVEigmKBBqrya3KA5P2rckFakpOSHd0/Z/Z1qZ9PrClywAp/ mBVVJ15lf1yxn7e4PHi52b7VlfRJ9MLoJGQlW4ygej+sHWnQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWAKagYe9YW1maSrJngwR9/vNicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTcwMjM2YWEtNGFhNS0z NjdjLWE0MTQtNTMwODlhYTQ3ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMV8nSx5CAcU68CWeLku08rGWC9BQU60n9TtcYTFKweMOOsjiC+5igq eUpu/1k1KBCE5Px6J/4lGqgQX5Dt5A7GGcvQ9Wmc0V2UbDtwWbxCyJFA5AvfWvag J2UxeoHQLQse/e9YvrvJvSPfE+0xQ+HAl0pdMSA+xp97VwdkRU1FI2AzlkIke9I+ 69kpQkN3+2yM91z4KZkx3z7e/XvdxOd0eaRfl0a9I2JlXIYQQbYwEwM6rq4OIdEL btjIu/ar2/nOvAsZRcsnGr334CLuOMAaHe7CMeGXioR96R19UOFf6hat9NVZCTev nCtIuhIOZYR5cWzwdEiF2MiP6Xw0L7w= -----END CERTIFICATE-----Generated at Mon May 12 19:55:43 2025 by rpki-client