$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa File: dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa (raw, json) Hash identifier: o+PcwjKv2YyAdP2RePtk/IIO1N3K0ELVM9pDgCntcU8= Subject key identifier: C9:35:E9:A3:7A:CB:F4:EF:8E:E9:8B:04:20:53:1E:56:73:55:D8:86 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849ABB4A2C019CCD03F2805F400 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 64267 IP address blocks: 149.20.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a2:c0:19:cc:d0:3f:28:05:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=d4a22c81-a143-4aea-a1d3-3f89f5e482cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:b9:2c:3f:39:af:52:3a:29:93:b7:65:6b: 29:5f:47:4f:c8:93:7b:d6:72:d8:34:cb:eb:b3:61: 4b:c7:1d:bb:4c:d1:f8:34:f6:b6:ab:c5:4c:5a:34: f4:8c:59:2d:5c:90:0f:ee:cb:59:6e:95:0e:b9:6d: db:51:72:ba:3f:65:04:29:82:89:66:c3:c0:a7:0d: 4e:b8:ac:d7:5f:a2:70:0b:b5:a3:4c:d8:ff:99:fc: e6:cb:bb:f8:53:ae:7e:e5:16:4f:a1:dd:53:39:d2: e4:c3:84:8b:d8:29:88:0c:19:4c:78:47:59:f6:37: be:cb:0d:b6:8a:9d:b4:04:63:57:26:f1:2d:73:02: 1a:3a:76:d0:d6:c2:f3:74:a4:4d:ba:c2:8d:0f:63: f6:56:65:3d:86:a3:20:c8:dd:84:de:37:73:75:e6: 72:bb:4d:ee:66:3d:cb:02:25:a4:27:bb:bc:bf:1e: d2:4b:b9:27:cc:ca:bd:a9:2a:66:e6:40:8e:a8:4e: ae:ce:2a:3f:83:00:d2:7b:15:85:24:be:91:dd:77: 87:df:6a:2f:d4:96:ba:b3:66:52:b5:eb:68:bd:3f: a0:66:bf:dc:c2:d9:8a:c3:f4:20:7a:38:f0:09:4c: bc:06:f6:e5:2f:e8:ca:29:7c:ee:9d:6d:87:cf:2c: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:35:E9:A3:7A:CB:F4:EF:8E:E9:8B:04:20:53:1E:56:73:55:D8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5f:a9:7b:47:ca:62:21:f1:50:68:4e:45:04:fb:a0:0d:31: 5a:dc:38:6f:3f:8a:e6:ca:7c:51:1e:3d:59:25:21:40:1a:a0: c4:8e:bc:00:52:fe:64:4c:be:f3:b8:4d:74:68:2c:53:c4:91: 8a:cb:ab:e1:89:9c:0e:1d:8d:08:47:9d:61:8e:b3:32:68:5f: cb:4d:d7:d7:fb:76:62:72:f2:36:01:5b:ce:25:86:af:43:b9: b1:4e:2c:05:46:60:8c:94:36:b0:15:81:65:32:58:77:0b:d1: d7:72:2b:55:a1:4a:e2:30:cd:12:c2:3f:4e:d6:57:cf:c9:58: e2:ce:a9:96:82:65:37:82:16:b8:d0:df:86:04:57:4a:2a:93: 1c:70:02:d5:fa:86:6c:47:a1:3f:30:34:6b:f2:dd:80:a1:9e: 5a:6e:ca:7e:66:5a:a6:7a:27:fd:eb:45:5c:ee:fc:52:40:ce: c4:ec:bb:3a:07:e6:6a:33:c0:13:21:9a:87:64:a2:fe:4d:7a: 05:e6:d3:3a:ab:9a:26:a7:1c:65:a3:0e:1d:85:1d:ef:c5:7e: 4e:45:2f:ff:6b:9e:1b:85:a8:cc:f5:0e:bf:a2:79:82:ce:6d: 01:1c:b3:3a:c6:8e:91:b5:c3:59:81:cf:72:6b:0f:5c:b0:e2: a9:10:2d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKLAGczQPygF9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZDRhMjJjODEtYTE0My00YWVhLWExZDMtM2Y4OWY1ZTQ4MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN25LD85r1I6KZO3ZWspX0dPyJN71nLYNMvr s2FLxx27TNH4NPa2q8VMWjT0jFktXJAP7stZbpUOuW3bUXK6P2UEKYKJZsPApw1O uKzXX6JwC7WjTNj/mfzmy7v4U65+5RZPod1TOdLkw4SL2CmIDBlMeEdZ9je+yw22 ip20BGNXJvEtcwIaOnbQ1sLzdKRNusKND2P2VmU9hqMgyN2E3jdzdeZyu03uZj3L AiWkJ7u8vx7SS7knzMq9qSpm5kCOqE6uzio/gwDSexWFJL6R3XeH32ov1Ja6s2ZS tetovT+gZr/cwtmKw/QgejjwCUy8BvblL+jKKXzunW2Hzyy/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk16aN6y/TvjumLBCBTHlZzVdiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGQxODhlNGUtYTA4Ny0z YzVkLTk1NGUtZTg4NjljYmZmNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1fqXtHymIh8VBoTkUE+6ANMVrcOG8/iubKfFEePVklIUAaoMSOvABS /mRMvvO4TXRoLFPEkYrLq+GJnA4djQhHnWGOszJoX8tN19f7dmJy8jYBW84lhq9D ubFOLAVGYIyUNrAVgWUyWHcL0ddyK1WhSuIwzRLCP07WV8/JWOLOqZaCZTeCFrjQ 34YEV0oqkxxwAtX6hmxHoT8wNGvy3YChnlpuyn5mWqZ6J/3rRVzu/FJAzsTsuzoH 5mozwBMhmodkov5NegXm0zqrmianHGWjDh2FHe/Ffk5FL/9rnhuFqMz1Dr+ieYLO bQEcszrGjpG1w1mBz3JrD1yw4qkQLQ0= -----END CERTIFICATE-----Generated at Sat May 10 22:03:46 2025 by rpki-client