$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa File: cf757231-1b36-3cd8-9100-018cab8b51c4.roa (raw, json) Hash identifier: Zk3xf9AhkIxkLf4ENjPi4dns0qa9COgoygvaegSOTBc= Subject key identifier: 70:36:56:F3:EA:F5:3B:2B:62:BD:F3:21:87:E8:0C:72:E0:D0:D3:3A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849B6DF59C0DEAE51C28916B9C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 64267 IP address blocks: 199.34.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:59:c0:de:ae:51:c2:89:16:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=cc89e63a-3fc3-4f73-a774-55ae2e556c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ec:f1:d9:82:27:ef:1b:76:72:85:27:a2:b2: 4b:71:58:32:09:13:3b:21:22:7c:e5:93:a1:aa:f9: 1d:4d:6e:f7:f4:b7:34:f3:c0:57:c0:4c:04:59:2a: 1a:3d:ba:82:91:b0:e4:2d:cb:ed:bd:98:44:21:74: 90:d6:b8:d0:76:1a:1a:11:b1:b8:2c:68:6f:9c:c9: ac:24:88:ef:f4:ef:57:a4:83:6d:29:e2:a9:71:36: b9:fb:32:03:25:58:6a:bd:c2:0d:e6:d2:b9:6c:74: 76:29:dc:99:4e:f0:22:69:8f:b8:ac:5b:6f:26:19: 79:c1:91:be:07:b1:09:7a:67:81:b5:f8:05:1d:56: 12:e6:82:21:8d:fb:56:b8:d9:0c:5d:54:c5:ee:64: 77:d7:9d:c8:55:93:bb:b7:67:37:52:63:8f:0c:4a: 1c:d8:c8:c3:05:fe:e2:a2:b9:48:f7:0f:47:76:dc: 9e:a5:9c:36:8d:f0:2c:b1:ff:61:9d:44:f5:47:71: 97:89:ad:5d:87:5f:b5:5d:01:a1:66:3f:35:5a:8b: a1:1d:66:f1:aa:02:3d:28:dc:06:0a:16:10:17:96: 35:5f:15:05:38:2f:84:54:f4:00:be:d3:07:43:60: 8a:91:ae:e3:50:60:59:b5:38:fa:cf:d5:4f:ee:1f: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:56:F3:EA:F5:3B:2B:62:BD:F3:21:87:E8:0C:72:E0:D0:D3:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.34.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:37:bf:af:53:d1:5a:df:1a:7c:ca:3d:0d:d5:e9:77:6f:8d: 74:5d:8f:8b:b0:68:2e:ce:a8:e9:df:d3:f2:ed:42:9a:2b:db: 0f:97:88:c4:e6:0f:11:09:67:b2:d3:69:f7:76:0d:de:e1:ff: 5f:a2:3e:39:48:05:d0:2c:90:9d:9c:34:3e:1b:77:ea:46:dc: 84:48:76:ad:df:05:0f:70:61:d4:b1:23:f3:fa:00:d2:0a:4c: 93:ab:02:a5:03:95:3c:01:27:6b:ab:62:20:93:29:2c:cd:eb: 02:7b:81:93:31:6d:b3:bb:a0:61:ae:a1:dd:9c:2d:73:36:e5: ef:25:ed:fc:f6:12:c5:cc:67:b4:d5:ae:0c:80:92:3b:99:ec: c8:1b:b9:d4:68:2d:25:a5:22:c9:34:27:73:a0:4c:ba:2c:8c: fb:a4:57:43:93:3f:a6:ea:dc:9b:a2:63:fc:6a:01:f2:2f:5a: ee:ca:18:c4:24:98:57:c4:99:30:73:98:64:fa:c5:c6:83:13: 36:7c:f2:2c:8a:f4:a2:a9:c4:1a:0d:e8:1d:2f:08:11:5d:67: dd:d0:05:c0:a0:2d:a2:3e:cb:97:cf:15:2f:51:fd:db:6d:9f: 86:a1:ba:bf:5f:c8:6a:a4:69:62:8c:dc:55:7e:0c:f1:41:b9: e2:17:15:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231nA3q5RwokWucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2M4OWU2M2EtM2ZjMy00ZjczLWE3NzQtNTVhZTJlNTU2YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguzx2YIn7xt2coUnorJLcVgyCRM7ISJ85ZOh qvkdTW739Lc088BXwEwEWSoaPbqCkbDkLcvtvZhEIXSQ1rjQdhoaEbG4LGhvnMms JIjv9O9XpINtKeKpcTa5+zIDJVhqvcIN5tK5bHR2KdyZTvAiaY+4rFtvJhl5wZG+ B7EJemeBtfgFHVYS5oIhjftWuNkMXVTF7mR3153IVZO7t2c3UmOPDEoc2MjDBf7i orlI9w9HdtyepZw2jfAssf9hnUT1R3GXia1dh1+1XQGhZj81WouhHWbxqgI9KNwG ChYQF5Y1XxUFOC+EVPQAvtMHQ2CKka7jUGBZtTj6z9VP7h9loQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA2VvPq9TsrYr3zIYfoDHLg0NM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2Y3NTcyMzEtMWIzNi0z Y2Q4LTkxMDAtMDE4Y2FiOGI1MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN83v69T0VrfGnzKPQ3V6XdvjXRdj4uwaC7OqOnf0/LtQpor2w+XiMTm DxEJZ7LTafd2Dd7h/1+iPjlIBdAskJ2cND4bd+pG3IRIdq3fBQ9wYdSxI/P6ANIK TJOrAqUDlTwBJ2urYiCTKSzN6wJ7gZMxbbO7oGGuod2cLXM25e8l7fz2EsXMZ7TV rgyAkjuZ7MgbudRoLSWlIsk0J3OgTLosjPukV0OTP6bq3JuiY/xqAfIvWu7KGMQk mFfEmTBzmGT6xcaDEzZ88iyK9KKpxBoN6B0vCBFdZ93QBcCgLaI+y5fPFS9R/dtt n4ahur9fyGqkaWKM3FV+DPFBueIXFfI= -----END CERTIFICATE-----Generated at Sat May 10 10:16:41 2025 by rpki-client