$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa File: c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa (raw, json) Hash identifier: uaq8w5V19qUyyMDZQgRnlU1O4b8ZsgZTeLsDRjlg8Iw= Subject key identifier: E5:09:71:8C:D8:7A:06:A9:D0:96:12:0B:3F:2C:98:0F:68:C6:AC:6E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849BC74AE19868649EF8A83F680 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 33659 IP address blocks: 158.62.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ae:19:86:86:49:ef:8a:83:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=39949f19-9b86-4e6b-adb4-50862341fd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:3e:dd:28:d9:4a:95:0a:d3:de:f8:ec:cc: 12:6b:7c:90:bd:97:de:85:ef:d4:c3:79:79:9d:88: a4:ee:8b:05:48:0a:47:66:01:6c:8e:26:49:63:95: 5f:74:28:e9:7c:d8:75:e9:82:f7:05:48:88:e1:ae: 32:81:4c:10:dc:e7:39:bf:4e:e8:d5:36:b9:7d:21: 31:ed:d4:84:13:c0:fc:3c:ae:66:cb:5d:7a:fc:03: 8f:7c:1c:f4:7b:fe:92:f7:f5:eb:aa:19:b7:d4:34: 7a:dd:80:f5:9c:d3:18:c5:82:d6:51:82:84:4f:9c: e6:40:c3:bb:1b:54:f4:b9:fb:a5:0c:ca:83:74:4c: 74:29:c1:d3:6b:6f:4e:05:38:1e:82:a4:ac:dc:e1: cc:0f:57:fe:03:5d:01:3b:98:1e:b3:00:03:32:2f: 58:35:44:a6:22:fe:7e:e9:05:c2:50:4c:76:96:47: 5a:03:fd:ac:78:2d:e6:3d:61:f0:80:f4:6f:90:c0: 7d:96:66:51:f3:49:fc:51:bd:f0:3b:b0:e0:25:79: d3:76:1f:b5:26:2a:72:72:3e:a4:e7:34:8c:06:e9: 55:dc:51:de:5d:55:ac:20:69:c6:f2:be:6c:78:f5: de:23:2b:19:52:1a:79:bb:ac:3c:7f:12:33:1f:21: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:71:8C:D8:7A:06:A9:D0:96:12:0B:3F:2C:98:0F:68:C6:AC:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c6:d8:75:d7:04:0d:be:fb:7f:9f:26:ec:dc:90:05:c9:61: 56:21:9b:ce:95:96:dd:51:34:3c:14:a9:50:57:28:ee:a5:e5: 6b:31:c2:20:29:84:12:a6:93:88:79:b5:fc:af:ec:a2:8f:36: e5:97:89:27:2c:74:5b:f0:aa:74:06:e8:df:d6:36:2e:39:d4: 5a:ee:2a:85:0a:c2:4c:ed:d2:0e:70:09:91:f4:30:cc:28:ac: e8:e9:7c:99:5d:86:0f:54:94:aa:33:99:2a:1f:7a:c5:7e:1c: 1d:d7:bc:30:88:be:56:4f:d5:47:53:16:9f:62:4e:fb:c6:67: 5f:e4:f4:17:33:49:1e:ad:a7:b7:49:85:d0:6a:d4:4c:20:21: 18:10:45:07:a8:b4:24:e5:9f:a7:c8:db:ec:d5:76:a7:9b:fe: 3b:6a:4c:36:91:e7:47:7e:fb:98:70:96:d9:53:06:b0:ee:63: 40:bc:9a:4e:8c:99:d1:d5:6e:bf:3f:ad:2a:a6:d2:6e:55:07: df:cd:87:c7:87:bd:1c:a0:b8:03:78:64:a1:d8:f7:0c:68:8e: ec:29:47:85:fc:7b:85:c6:92:5e:b5:d9:0e:f1:d7:08:eb:8b: a6:a9:32:09:33:d9:12:48:3c:ee:bb:85:8d:b3:00:5b:32:e0: f8:09:36:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dK4ZhoZJ74qD9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk Mzk5NDlmMTktOWI4Ni00ZTZiLWFkYjQtNTA4NjIzNDFmZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio8+3SjZSpUK09747MwSa3yQvZfehe/Uw3l5 nYik7osFSApHZgFsjiZJY5VfdCjpfNh16YL3BUiI4a4ygUwQ3Oc5v07o1Ta5fSEx 7dSEE8D8PK5my116/AOPfBz0e/6S9/Xrqhm31DR63YD1nNMYxYLWUYKET5zmQMO7 G1T0ufulDMqDdEx0KcHTa29OBTgegqSs3OHMD1f+A10BO5geswADMi9YNUSmIv5+ 6QXCUEx2lkdaA/2seC3mPWHwgPRvkMB9lmZR80n8Ub3wO7DgJXnTdh+1Jipycj6k 5zSMBulV3FHeXVWsIGnG8r5sePXeIysZUhp5u6w8fxIzHyH78wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUJcYzYegap0JYSCz8smA9oxqxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzMzYzg1YTAtYmZkYy0z MmUwLTlhYTUtYWJjOTliMzc3YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjG2HXXBA2++3+fJuzckAXJYVYhm86Vlt1RNDwUqVBXKO6l5WsxwiAp hBKmk4h5tfyv7KKPNuWXiScsdFvwqnQG6N/WNi451FruKoUKwkzt0g5wCZH0MMwo rOjpfJldhg9UlKozmSofesV+HB3XvDCIvlZP1UdTFp9iTvvGZ1/k9BczSR6tp7dJ hdBq1EwgIRgQRQeotCTln6fI2+zVdqeb/jtqTDaR50d++5hwltlTBrDuY0C8mk6M mdHVbr8/rSqm0m5VB9/Nh8eHvRyguAN4ZKHY9wxojuwpR4X8e4XGkl612Q7x1wjr i6apMgkz2RJIPO67hY2zAFsy4PgJNjY= -----END CERTIFICATE-----Generated at Sat May 10 18:57:45 2025 by rpki-client