$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa File: faf9b85d-3b9c-323c-ae39-48c887f5b988.roa (raw, json) Hash identifier: dfjUFAhB72pXbgHO0qyiznOXSi8wRuV8ENVnnvuj5cw= Subject key identifier: BE:EF:51:9B:9F:28:11:FD:A0:C0:52:D3:84:66:1E:88:A6:62:EF:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17AB80BEF0C5A31505D1300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa Signing time: Wed 30 Apr 2025 02:39:10 +0000 ROA not before: Wed 30 Apr 2025 02:39:10 +0000 ROA not after: Tue 29 Jul 2025 02:39:10 +0000 asID: 396982 IP address blocks: 192.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7a:b8:0b:ef:0c:5a:31:50:5d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:39:10 2025 GMT Not After : Jul 29 02:39:10 2025 GMT Subject: CN=ad4ec583-19ea-4406-b57f-2b655185291e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:95:1e:7e:3e:57:9e:43:b3:eb:dc:14:84: c9:63:6d:8c:bd:e0:42:df:a1:14:bb:6b:f2:77:ba: 1b:73:8d:45:98:d3:a5:d4:71:c4:0f:d6:b4:d8:8c: 20:7e:f0:2c:65:cd:ee:39:bb:76:1e:a6:7f:8e:89: 94:93:b2:15:df:4b:7a:2c:11:3c:c8:94:37:5e:d6: 62:76:4e:96:0b:a4:86:28:1f:a6:68:fa:8b:be:3a: f3:ff:ca:52:0f:85:fe:d1:07:11:e3:2b:5c:f3:f5: bb:e3:44:ef:ab:c8:90:38:e6:03:2a:e5:d4:3c:0a: 7d:8a:df:81:ff:d2:b2:88:ae:af:d8:25:8a:62:e6: 65:d4:8f:2a:e9:46:93:48:08:c3:2e:41:d9:97:a8: b2:3c:7b:4a:5e:f7:ee:b1:e5:f9:27:73:d5:42:da: 54:5f:02:5e:39:f0:78:fb:d0:5a:ff:5f:0d:b7:a8: 15:a8:6d:35:e4:27:47:9d:ee:a0:a3:30:f6:60:d6: b0:e0:c5:c0:c8:ac:28:69:3c:ce:5b:a9:f6:43:56: 3d:98:79:cd:ce:3c:c6:83:28:77:cb:f8:79:08:c5: 0c:76:f5:b7:24:62:f6:c3:86:4b:f4:ec:ca:97:ae: cf:de:3a:5e:03:42:f8:1c:ba:e7:40:5b:ec:7f:9b: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EF:51:9B:9F:28:11:FD:A0:C0:52:D3:84:66:1E:88:A6:62:EF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 192.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b0:cc:df:1b:51:05:fe:08:2c:bc:78:2a:85:57:dd:d1:0b: 35:9d:22:fe:43:80:96:ee:01:09:e2:a3:a9:00:88:fd:f0:29: ac:da:19:06:26:4d:d2:08:04:4a:3a:1f:e2:90:c1:d4:91:ef: dd:1f:64:d8:b6:3d:e7:29:7f:c2:a3:41:94:c0:49:06:ec:65: 50:83:cf:90:f7:19:77:6f:92:3e:f9:f9:84:36:53:a3:4b:c5: 8b:9f:c0:a2:17:d6:03:7b:d7:b6:81:a5:a4:50:81:f0:cf:9d: f6:58:ca:c2:3d:96:78:e5:32:a5:25:cb:03:ce:fd:45:4e:b7: 43:90:46:7b:b8:be:e0:44:d5:d8:c7:a9:71:a1:2e:04:30:85: 6e:7a:dc:01:a9:1e:89:ea:de:08:ec:32:db:60:b1:25:dd:13: f2:35:ac:3a:fe:f4:22:5c:c9:c5:00:9a:1d:c3:9a:0d:90:00: 5f:45:22:e8:17:02:01:0b:43:2b:95:24:45:46:72:d1:44:c2: 39:22:78:c3:84:a3:f9:fc:57:68:16:f8:97:4b:f2:3f:9e:9e: 28:05:2f:45:0c:63:8b:3f:cd:f6:93:78:9e:1b:c3:0a:95:e0: 0a:94:4b:40:f3:2b:68:fc:0d:db:59:71:c1:44:be:63:fd:31: 73:fd:16:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxergL7wxaMVBdEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzkxMFoXDTI1MDcyOTAyMzkxMFowLzEtMCsGA1UEAxMk YWQ0ZWM1ODMtMTllYS00NDA2LWI1N2YtMmI2NTUxODUyOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQeVHn4+V55Ds+vcFITJY22MveBC36EUu2vy d7obc41FmNOl1HHED9a02IwgfvAsZc3uObt2HqZ/jomUk7IV30t6LBE8yJQ3XtZi dk6WC6SGKB+maPqLvjrz/8pSD4X+0QcR4ytc8/W740Tvq8iQOOYDKuXUPAp9it+B /9KyiK6v2CWKYuZl1I8q6UaTSAjDLkHZl6iyPHtKXvfuseX5J3PVQtpUXwJeOfB4 +9Ba/18Nt6gVqG015CdHne6gozD2YNaw4MXAyKwoaTzOW6n2Q1Y9mHnNzjzGgyh3 y/h5CMUMdvW3JGL2w4ZL9OzKl67P3jpeA0L4HLrnQFvsf5sBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7vUZufKBH9oMBS04RmHoimYu92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmFmOWI4NWQtM2I5Yy0z MjNjLWFlMzktNDhjODg3ZjViOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGwzN8bUQX+CCy8eCqFV93RCzWdIv5DgJbuAQnio6kAiP3wKazaGQYm TdIIBEo6H+KQwdSR790fZNi2Pecpf8KjQZTASQbsZVCDz5D3GXdvkj75+YQ2U6NL xYufwKIX1gN717aBpaRQgfDPnfZYysI9lnjlMqUlywPO/UVOt0OQRnu4vuBE1djH qXGhLgQwhW563AGpHonq3gjsMttgsSXdE/I1rDr+9CJcycUAmh3Dmg2QAF9FIugX AgELQyuVJEVGctFEwjkieMOEo/n8V2gW+JdL8j+enigFL0UMY4s/zfaTeJ4bwwqV 4AqUS0DzK2j8DdtZccFEvmP9MXP9FkM= -----END CERTIFICATE-----Generated at Sun May 4 18:57:29 2025 by rpki-client