$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa File: 428ad678-24bc-37e4-b693-03a9901a94b0.roa (raw, json) Hash identifier: EZVmsJ2yBi7PdIA1UaRZcv1S50WLlLp6nAEh0uzbBaI= Subject key identifier: FA:1C:6A:68:F1:97:88:06:2A:9E:CD:F6:01:7F:BC:DB:58:A5:42:81 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285849AD1A08BD69F27CC8B4832B20 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7862 IP address blocks: 146.23.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:08:bd:69:f2:7c:c8:b4:83:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=0bd9d476-76dc-4157-a4bb-a8d3de0ff488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:f4:5a:3b:ca:c1:c0:d7:bd:10:75:9c:d1: df:19:e4:d0:24:01:71:9f:10:70:40:51:da:ac:87: 2a:ea:06:61:e8:f8:ec:0b:1c:6a:90:5c:37:3d:32: 2d:2f:03:38:d9:35:b1:25:aa:ca:7d:0e:a6:6c:35: 2c:e9:b6:e8:77:6f:48:48:e2:a7:11:cf:e0:c1:3c: 36:02:ba:b1:31:cb:0c:6b:a8:42:d2:3e:87:a4:8d: 14:6a:2e:fa:7f:cf:44:1f:6f:67:21:96:5d:ec:b7: 67:62:f2:58:2c:8d:86:73:ff:99:7c:76:ca:a8:5f: 3a:28:ea:51:6e:c5:89:4d:06:cc:a8:50:c0:11:34: 9c:b8:69:28:01:db:91:34:08:8d:52:cd:ec:19:0b: 76:de:54:20:5b:8d:f5:f2:30:13:c0:a8:ca:53:0f: 20:b2:d0:a6:37:87:cf:e1:a2:3d:62:a9:6b:9d:dd: 73:74:78:04:95:5a:99:f4:1d:1c:40:94:ad:04:f9: fe:ee:a8:43:01:47:fc:8a:1d:a7:33:ed:e3:57:94: be:ba:15:6f:14:51:20:c2:93:16:d2:cb:6c:43:ee: ce:d8:d1:97:84:6f:23:87:c9:d0:5b:05:54:b8:2b: d1:9b:b8:c4:a7:1e:ab:a8:8b:fc:8d:60:d1:b8:bf: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:6A:68:F1:97:88:06:2A:9E:CD:F6:01:7F:BC:DB:58:A5:42:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:05:c1:3a:c4:55:e5:a3:53:b7:73:6a:90:40:74:8a:23:cf: e1:b0:df:f0:48:32:e1:53:ad:36:5b:aa:22:85:9c:5f:c9:61: 1c:67:3b:81:35:ad:24:c6:e5:e5:aa:87:6b:47:95:cb:8a:ac: fb:b9:80:d6:f0:d9:96:6a:90:d0:bf:80:da:ee:9d:a7:94:8b: f3:e0:3e:45:54:e7:bf:bc:4a:5a:8e:5f:88:8f:89:32:c6:d4: 3a:fc:58:68:e7:a3:aa:6c:c2:51:55:a7:cd:ba:de:01:36:06: 38:d1:2a:e2:d2:7a:13:de:c7:fa:3a:db:4f:bb:86:12:91:8f: af:9b:54:0f:f8:36:9f:01:aa:9d:cb:7d:a0:90:66:45:d0:c3: 17:8a:61:08:61:d2:91:86:b1:17:eb:ba:48:1e:b2:8e:da:d4: 13:b7:fc:09:e0:30:5f:74:f1:fa:41:ac:c2:ba:bf:72:c1:9d: c0:ef:fe:0d:1f:6b:b3:ba:77:44:3a:13:4f:e8:20:42:db:d3: 71:b9:07:8b:1b:98:bd:3f:c7:89:95:58:7c:77:76:91:7a:4f: 2f:ec:ea:64:fd:05:d2:4c:f8:40:10:d3:ef:8c:53:cc:bc:47: 86:93:e0:1d:0d:f5:d9:76:84:49:53:d6:9f:2f:05:88:dd:7c: 13:6e:5a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgi9afJ8yLSDKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MGJkOWQ0NzYtNzZkYy00MTU3LWE0YmItYThkM2RlMGZmNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos30WjvKwcDXvRB1nNHfGeTQJAFxnxBwQFHa rIcq6gZh6PjsCxxqkFw3PTItLwM42TWxJarKfQ6mbDUs6bbod29ISOKnEc/gwTw2 ArqxMcsMa6hC0j6HpI0Uai76f89EH29nIZZd7LdnYvJYLI2Gc/+ZfHbKqF86KOpR bsWJTQbMqFDAETScuGkoAduRNAiNUs3sGQt23lQgW4318jATwKjKUw8gstCmN4fP 4aI9Yqlrnd1zdHgElVqZ9B0cQJStBPn+7qhDAUf8ih2nM+3jV5S+uhVvFFEgwpMW 0stsQ+7O2NGXhG8jh8nQWwVUuCvRm7jEpx6rqIv8jWDRuL8zQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPocamjxl4gGKp7N9gF/vNtYpUKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvNDI4YWQ2NzgtMjRiYy0z N2U0LWI2OTMtMDNhOTkwMWE5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoFwTrEVeWjU7dzapBAdIojz+Gw3/BIMuFTrTZbqiKFnF/JYRxnO4E1 rSTG5eWqh2tHlcuKrPu5gNbw2ZZqkNC/gNrunaeUi/PgPkVU57+8SlqOX4iPiTLG 1Dr8WGjno6pswlFVp8263gE2BjjRKuLSehPex/o620+7hhKRj6+bVA/4Np8Bqp3L faCQZkXQwxeKYQhh0pGGsRfrukgeso7a1BO3/AngMF908fpBrMK6v3LBncDv/g0f a7O6d0Q6E0/oIELb03G5B4sbmL0/x4mVWHx3dpF6Ty/s6mT9BdJM+EAQ0++MU8y8 R4aT4B0N9dl2hElT1p8vBYjdfBNuWhQ= -----END CERTIFICATE-----Generated at Mon May 12 23:02:25 2025 by rpki-client