$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bea448a-3656-329d-a5eb-f84a494089cb.roa File: 2bea448a-3656-329d-a5eb-f84a494089cb.roa (raw, json) Hash identifier: jA3RMKyxgDoPzZGdbeURkbW139LypAuOxiiFx1ASRZc= Subject key identifier: CA:AF:AA:8E:35:DD:BA:F5:36:D8:E8:6A:91:1D:0B:62:A6:7E:FC:67 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A03A553E71C18C1F92C46C700 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bea448a-3656-329d-a5eb-f84a494089cb.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 7018 IP address blocks: 199.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:53:e7:1c:18:c1:f9:2c:46:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=fd34d087-3399-48c1-9c79-8846dce53af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:9f:f6:ff:8c:83:68:0c:e3:fa:68:38:9d: 4f:ba:6b:74:cf:60:22:95:e1:60:33:2f:c6:bd:90: ee:2b:57:dd:53:66:aa:65:eb:75:09:d8:a1:1d:2b: e3:2d:cc:e9:29:7e:49:2b:97:0f:e0:c3:2b:01:bb: 27:92:98:7e:a3:8f:2b:ac:bc:31:14:88:65:63:70: 10:1f:85:c4:ed:e4:88:c9:bf:aa:63:71:f1:e6:c1: b3:3c:d4:3a:d9:7f:de:b1:0b:e3:14:c8:50:48:90: 12:3b:8e:56:4e:b4:40:21:f9:5a:e5:ae:7c:f7:80: 32:47:dd:14:04:df:fc:84:70:de:1e:b9:8d:ae:48: 4c:bc:2d:28:18:7d:7c:36:1a:ac:34:ff:5e:ad:ea: 3c:63:79:a1:b2:a4:65:cb:9b:78:79:0b:f0:13:1b: 80:4a:55:fb:dc:34:2a:97:ac:33:2e:3b:d3:eb:88: 17:14:7a:c3:94:16:cb:4f:9d:7a:c6:43:c0:93:64: db:8f:cf:96:07:f7:6c:f8:b2:48:02:16:7b:7f:7f: 4d:3f:90:c8:76:8e:c5:e9:ea:0a:d4:5c:6d:12:4a: 0a:4f:fa:37:db:e9:6f:72:ad:8b:6b:94:c1:a7:71: 0b:81:1e:1a:65:f5:68:4c:fa:30:6d:79:cf:16:5e: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AF:AA:8E:35:DD:BA:F5:36:D8:E8:6A:91:1D:0B:62:A6:7E:FC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bea448a-3656-329d-a5eb-f84a494089cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7e:3d:9e:83:e6:18:b2:ce:57:78:87:73:44:2c:1e:b6:59: 01:26:85:d6:dd:bf:b3:6f:fc:d5:3d:1b:e8:7d:b8:13:6c:29: 60:cd:b2:43:22:39:01:7a:23:66:c4:b1:11:7f:c9:df:7c:a9: d8:32:da:78:98:11:85:62:d2:d3:b2:13:90:7a:04:49:d9:69: 97:30:86:d8:fa:d0:1c:04:07:7e:fc:c2:be:99:24:77:f8:da: 32:3f:be:6d:21:39:4d:18:47:9a:3e:df:c3:f7:8b:da:5a:2d: 8f:5b:fc:ed:d7:95:52:c8:e0:63:f4:aa:b1:b3:ef:9a:a9:8e: 5c:b7:76:9e:be:9b:05:55:c1:ff:42:c3:24:e5:8f:04:72:83: 26:c9:98:ed:0f:5b:1a:e4:a6:74:71:ee:fa:5f:7c:59:e9:63: d2:1a:c7:f9:35:7d:71:1a:bc:d9:a7:40:5f:69:54:e3:36:39: 82:a8:45:21:02:77:51:1e:40:21:a1:02:44:4f:db:3b:d4:d2: f3:71:1e:1d:d5:d5:96:5a:ab:5f:bd:7d:76:7f:21:fa:85:ab: c3:a5:53:0e:e0:a1:6b:30:13:d7:41:61:ec:0b:9e:79:db:24: 6b:f4:1b:6a:0d:05:d2:b8:e2:ee:52:ee:43:21:dd:a6:ec:96: 9d:53:8e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVPnHBjB+SxGxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZmQzNGQwODctMzM5OS00OGMxLTljNzktODg0NmRjZTUzYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT2f9v+Mg2gM4/poOJ1Pumt0z2AileFgMy/G vZDuK1fdU2aqZet1CdihHSvjLczpKX5JK5cP4MMrAbsnkph+o48rrLwxFIhlY3AQ H4XE7eSIyb+qY3Hx5sGzPNQ62X/esQvjFMhQSJASO45WTrRAIfla5a5894AyR90U BN/8hHDeHrmNrkhMvC0oGH18NhqsNP9ereo8Y3mhsqRly5t4eQvwExuASlX73DQq l6wzLjvT64gXFHrDlBbLT516xkPAk2Tbj8+WB/ds+LJIAhZ7f39NP5DIdo7F6eoK 1FxtEkoKT/o32+lvcq2La5TBp3ELgR4aZfVoTPowbXnPFl6WVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqvqo413br1NtjoapEdC2KmfvxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmJlYTQ0OGEtMzY1Ni0z MjlkLWE1ZWItZjg0YTQ5NDA4OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9+PZ6D5hiyzld4h3NELB62WQEmhdbdv7Nv/NU9G+h9uBNsKWDNskMi OQF6I2bEsRF/yd98qdgy2niYEYVi0tOyE5B6BEnZaZcwhtj60BwEB378wr6ZJHf4 2jI/vm0hOU0YR5o+38P3i9paLY9b/O3XlVLI4GP0qrGz75qpjly3dp6+mwVVwf9C wyTljwRygybJmO0PWxrkpnRx7vpffFnpY9Iax/k1fXEavNmnQF9pVOM2OYKoRSEC d1EeQCGhAkRP2zvU0vNxHh3V1ZZaq1+9fXZ/IfqFq8OlUw7goWswE9dBYewLnnnb JGv0G2oNBdK44u5S7kMh3abslp1TjuE= -----END CERTIFICATE-----Generated at Wed Jul 2 15:38:16 2025 by rpki-client