$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa File: 2a28dd70-b06b-3843-af4d-73a9482b3961.roa (raw, json) Hash identifier: BLhkmaiWZM5cQ+oAM66WBEVaDGlw+YKM0C4GIt8fVlc= Subject key identifier: A4:4D:2F:C3:43:EE:88:E2:31:B8:74:95:86:6C:A3:65:BA:9D:85:B3 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285849AD1A0799C56B3212B924FB40 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7862 IP address blocks: 146.23.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:07:99:c5:6b:32:12:b9:24:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=63f1585d-2ce6-4113-9ffb-08caf700b1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:76:18:79:26:ad:c9:ce:d7:f5:6b:9e:6b: 0a:e6:51:ad:b5:f6:9d:79:2d:ab:12:21:48:1b:25: 6c:95:db:21:2a:9a:61:f5:a2:84:0e:bc:94:3a:70: 47:b7:97:ef:ae:58:e5:db:94:bf:a2:06:a4:63:1d: b0:9d:18:21:70:62:1b:0c:fa:df:0d:6a:7e:f2:83: 8c:5c:af:4f:4a:d4:c6:ae:94:5e:ad:22:c5:62:c7: aa:f5:b2:a6:c5:68:6f:e0:3a:45:c9:80:e5:fe:de: 0c:37:65:0d:cd:ca:c5:cf:1d:64:53:4d:f2:c3:4d: be:4e:9d:89:56:a2:33:b1:57:09:24:b5:09:d7:22: 7c:ca:c5:02:8c:33:e4:73:48:39:c6:7a:cb:5b:fc: f5:da:66:0d:26:de:7e:ce:1a:59:f2:7d:21:2a:0a: f7:f9:bd:ab:8a:cb:54:fe:1c:2e:53:ee:6a:b9:a2: 6e:97:1a:09:ab:55:1f:6c:21:94:b5:c0:f5:dd:c4: 36:c9:9b:8e:6f:06:94:fc:7b:fb:e0:a2:ad:d1:78: 01:58:ee:3a:9e:3f:c8:3b:23:c7:1d:f2:0e:cd:75: 93:fd:62:d7:a9:c6:9c:b3:45:48:2e:4a:71:6a:98: 85:b8:34:e0:09:cd:1f:39:ba:6d:f5:19:65:2e:a8: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4D:2F:C3:43:EE:88:E2:31:B8:74:95:86:6C:A3:65:BA:9D:85:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:aa:3d:a4:b5:56:d0:1e:9f:86:cf:17:f2:1f:ef:7c:da:0f: f6:a0:f0:4f:75:20:c3:87:6a:c7:eb:c2:bc:a9:69:71:5c:de: 66:d7:e7:52:64:c9:96:f5:06:dd:a2:c1:10:0d:78:32:70:20: 53:f5:ea:e4:d5:5f:14:39:c1:f5:f7:ba:a6:58:47:51:c7:b1: 23:71:1c:f9:ba:37:e5:28:b4:ac:34:11:2c:5c:17:22:dc:54: 67:97:63:25:88:d3:2e:11:44:91:82:0a:14:5d:77:d5:d9:50: 65:90:bb:ca:16:98:f2:91:5f:0e:96:39:67:8d:16:5f:f0:f5: 62:90:bf:de:ce:5f:81:a9:ea:23:7f:d0:21:c1:0a:d5:85:17: fb:d1:e2:e0:df:63:48:f7:5d:91:3f:bb:3e:49:14:4c:d6:d5: 5e:5e:52:ef:41:03:03:0c:ba:18:81:2d:c9:81:ff:75:01:1a: 2f:36:4f:4a:b1:6a:48:6d:e0:14:85:66:1b:11:ca:6a:e6:c9: ba:79:97:17:90:26:ab:02:88:00:82:af:ee:af:c8:b6:ed:cf: 40:30:f5:c4:5a:76:58:bd:50:54:e2:e3:7e:f3:ab:ca:f2:87: db:80:e7:05:82:1a:62:e2:30:aa:f6:67:9d:36:b8:3b:c4:90: fd:59:bd:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgeZxWsyErkk+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NjNmMTU4NWQtMmNlNi00MTEzLTlmZmItMDhjYWY3MDBiMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulR2GHkmrcnO1/VrnmsK5lGttfadeS2rEiFI GyVsldshKpph9aKEDryUOnBHt5fvrljl25S/ogakYx2wnRghcGIbDPrfDWp+8oOM XK9PStTGrpRerSLFYseq9bKmxWhv4DpFyYDl/t4MN2UNzcrFzx1kU03yw02+Tp2J VqIzsVcJJLUJ1yJ8ysUCjDPkc0g5xnrLW/z12mYNJt5+zhpZ8n0hKgr3+b2ristU /hwuU+5quaJulxoJq1UfbCGUtcD13cQ2yZuObwaU/Hv74KKt0XgBWO46nj/IOyPH HfIOzXWT/WLXqcacs0VILkpxapiFuDTgCc0fObpt9RllLqjVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRNL8ND7ojiMbh0lYZso2W6nYWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMmEyOGRkNzAtYjA2Yi0z ODQzLWFmNGQtNzNhOTQ4MmIzOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyqPaS1VtAen4bPF/If73zaD/ag8E91IMOHasfrwrypaXFc3mbX51Jk yZb1Bt2iwRANeDJwIFP16uTVXxQ5wfX3uqZYR1HHsSNxHPm6N+UotKw0ESxcFyLc VGeXYyWI0y4RRJGCChRdd9XZUGWQu8oWmPKRXw6WOWeNFl/w9WKQv97OX4Gp6iN/ 0CHBCtWFF/vR4uDfY0j3XZE/uz5JFEzW1V5eUu9BAwMMuhiBLcmB/3UBGi82T0qx akht4BSFZhsRymrmybp5lxeQJqsCiACCr+6vyLbtz0Aw9cRadli9UFTi437zq8ry h9uA5wWCGmLiMKr2Z502uDvEkP1ZvWE= -----END CERTIFICATE-----Generated at Mon May 12 06:40:08 2025 by rpki-client