$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa File: 4dd8305e-e04a-3ce1-a306-cad4284760dd.roa (raw, json) Hash identifier: m1vbz5eo11jNlpsoFZklzBzatD/EKgk1GkN9bxrMyv0= Subject key identifier: 6D:6F:CC:CF:FC:F5:DB:E4:AE:14:85:C7:25:C7:E5:B2:71:93:62:AE Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F43285849806F202492C2CE1E39EA2F40 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 14230 IP address blocks: 64.71.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:20:24:92:c2:ce:1e:39:ea:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=d0ca36ba-66f1-4d0a-8526-f074e644a512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:0a:f4:8e:2a:d4:41:94:09:6b:58:f6:58: 7f:c7:c8:e6:ef:f3:c5:b6:ed:35:a7:5d:85:ee:dd: e1:1e:4a:f6:35:45:ba:16:0e:ce:7f:ee:38:1f:9f: f0:c5:a1:61:8f:d3:26:f7:65:61:4b:b5:20:90:a2: 33:19:a7:b9:22:36:b4:d6:29:6f:c4:9a:c9:08:3b: c0:4e:c0:8c:4b:b9:0c:d9:ad:9f:ea:7b:ee:12:cb: 72:c5:08:1d:ec:8c:97:6a:c2:bc:02:2f:31:37:e1: ec:f8:a1:a5:94:ef:8b:dc:4e:3b:ae:e1:f8:b1:7a: 3d:92:7c:b5:79:e7:00:4c:3d:b5:05:69:cf:c0:97: a3:f0:47:bd:a9:d8:46:59:4f:d9:8e:80:71:29:8a: 82:65:f0:c4:25:c0:34:0e:b2:1e:b4:1e:10:6c:46: 1f:71:aa:46:bb:a2:4d:2d:80:3f:dc:f7:8a:66:5a: 6d:c6:71:fb:c3:96:bf:72:57:4a:59:96:c9:2c:14: b1:a4:bb:01:eb:82:7d:cb:40:fb:90:92:67:2e:89: 00:6b:ac:8d:10:2e:be:53:2b:1e:85:ed:d6:80:1c: 50:d6:a2:37:d5:4f:82:85:56:98:8d:07:3f:37:8c: 22:9e:1e:69:6f:1e:0b:a1:c8:ec:51:5b:a8:d5:1d: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:CC:CF:FC:F5:DB:E4:AE:14:85:C7:25:C7:E5:B2:71:93:62:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 64.71.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:75:ad:5b:24:30:b7:fa:e5:4e:cf:da:e5:51:fe:34:17:27: df:d4:21:05:8f:73:19:b7:b7:bb:39:62:16:24:7f:bf:f4:04: f9:45:5a:c7:7f:00:f3:37:2c:dc:6e:2a:d8:99:cd:e0:52:15: 3e:5b:5d:32:ca:b8:24:00:91:ab:4a:54:8d:62:19:45:e6:72: 85:26:40:03:fa:b2:74:2e:b0:51:f4:77:1e:d1:4e:61:72:90: 40:41:4d:ed:76:e9:fa:ff:48:b7:10:8e:3b:5f:5d:31:d1:32: 97:41:02:de:67:b6:ab:91:18:a7:94:b4:6b:55:ca:38:65:3a: eb:0a:d7:ab:4c:d1:3c:39:f5:e0:4f:47:18:79:6d:52:50:df: d8:e0:18:57:a1:33:3e:b5:52:5c:78:96:4f:59:3e:21:09:35: 4f:bc:27:3a:1e:8e:4f:c5:c5:e4:e5:b3:df:0a:63:df:d0:4b: ed:70:64:ae:05:78:38:39:d0:ff:04:cc:ff:d3:b8:02:38:3e: 00:f0:66:c3:6f:83:97:c8:49:5d:2c:3d:86:e6:49:67:c0:b5: 3e:3c:eb:a4:52:70:60:85:f0:27:b9:a1:8a:ac:e8:60:cc:51: 54:8c:6c:3b:de:75:3c:7b:99:8e:30:ba:2b:d9:dd:e4:04:22: 86:47:8a:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyAkksLOHjnqL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDBjYTM2YmEtNjZmMS00ZDBhLTg1MjYtZjA3NGU2NDRhNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgScK9I4q1EGUCWtY9lh/x8jm7/PFtu01p12F 7t3hHkr2NUW6Fg7Of+44H5/wxaFhj9Mm92VhS7UgkKIzGae5Ija01ilvxJrJCDvA TsCMS7kM2a2f6nvuEstyxQgd7IyXasK8Ai8xN+Hs+KGllO+L3E47ruH4sXo9kny1 eecATD21BWnPwJej8Ee9qdhGWU/ZjoBxKYqCZfDEJcA0DrIetB4QbEYfcapGu6JN LYA/3PeKZlptxnH7w5a/cldKWZbJLBSxpLsB64J9y0D7kJJnLokAa6yNEC6+Uyse he3WgBxQ1qI31U+ChVaYjQc/N4winh5pbx4LocjsUVuo1R1qWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1vzM/89dvkrhSFxyXH5bJxk2KuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvNGRkODMwNWUtZTA0YS0z Y2UxLWEzMDYtY2FkNDI4NDc2MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI91rVskMLf65U7P2uVR/jQXJ9/UIQWPcxm3t7s5YhYkf7/0BPlFWsd/ APM3LNxuKtiZzeBSFT5bXTLKuCQAkatKVI1iGUXmcoUmQAP6snQusFH0dx7RTmFy kEBBTe126fr/SLcQjjtfXTHRMpdBAt5ntquRGKeUtGtVyjhlOusK16tM0Tw59eBP Rxh5bVJQ39jgGFehMz61Ulx4lk9ZPiEJNU+8Jzoejk/FxeTls98KY9/QS+1wZK4F eDg50P8EzP/TuAI4PgDwZsNvg5fISV0sPYbmSWfAtT4866RScGCF8Ce5oYqs6GDM UVSMbDvedTx7mY4wuivZ3eQEIoZHim4= -----END CERTIFICATE-----Generated at Sat May 10 19:09:09 2025 by rpki-client