$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa File: c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa (raw, json) Hash identifier: R2HDDk+vyW2eVrcjehMoyP2AdUvCiHOc2WTcl52FZNc= Subject key identifier: 0C:AE:83:82:5B:91:09:8F:57:B1:86:CB:70:1D:99:CF:D7:5E:A4:20 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F43285849B14A03101C85CD4558AE5B8C Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14230 IP address blocks: 206.80.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:03:10:1c:85:cd:45:58:ae:5b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c5026b25-6280-46b9-a472-cf3bac56230b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:3f:70:a7:c5:90:b1:95:16:d7:b9:19:70: f7:f2:3c:28:2e:7a:76:21:ae:4b:3c:25:49:6c:20: ca:d2:92:b5:41:5b:cf:ef:f6:c5:25:b9:2f:78:a6: 70:1d:51:1d:26:76:7d:1e:81:56:c8:95:d2:78:b4: 60:db:68:4e:34:ee:f9:f0:de:4d:c6:b2:94:77:ba: 3b:11:24:3e:0d:50:87:cd:07:3a:4c:1d:b8:2d:f1: 52:7d:88:95:5b:8a:e1:74:20:8e:d5:bd:4d:a0:15: 6d:49:b7:7b:af:3c:22:57:8e:32:e1:23:94:5d:6e: 8c:45:ba:1f:b5:24:3c:02:f0:85:a0:f8:59:ba:72: 73:48:1f:97:90:88:cc:3f:ed:30:76:61:ad:4a:08: c4:e1:68:54:34:8d:ff:cb:17:94:9a:8b:b8:a6:c5: 87:2d:92:06:f0:66:1d:78:61:09:b0:ce:3e:48:26: b2:ab:99:fa:6b:f4:6b:e3:1f:5e:fd:fe:6b:86:97: ab:fc:af:64:e9:59:c0:71:e4:f1:fd:8b:3f:ec:29: ec:08:e6:36:81:bd:d6:0f:fc:1c:31:82:f0:0f:04: 56:90:3b:29:f2:e0:fc:24:5a:d8:95:c7:55:db:bf: 69:a9:73:05:8c:5b:92:49:47:4b:37:63:9c:9e:7c: d3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AE:83:82:5B:91:09:8F:57:B1:86:CB:70:1D:99:CF:D7:5E:A4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 206.80.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:06:97:cf:3a:45:c7:42:ca:e9:53:94:1b:81:85:32:a3:e4: 32:14:58:a1:a7:8e:79:25:8b:85:71:1b:f5:7e:17:a2:a5:47: 38:a2:c3:07:c1:78:52:3f:3b:9c:4e:af:d0:45:4d:9a:45:6a: 60:2c:fc:b6:5b:15:e4:09:cb:4e:35:bf:a8:9b:af:1b:4f:4e: 47:f5:26:c3:02:9b:c6:c9:40:ef:07:1c:be:bb:db:19:ad:01: 34:25:c1:d5:15:08:22:f2:8c:68:d7:bb:ab:51:45:b5:1c:d5: 4b:19:67:c5:dc:96:7f:a4:66:3b:54:72:19:f0:df:0d:2d:9a: 8c:73:c2:c6:4c:0d:bd:ff:86:ff:6c:96:b2:40:aa:96:6f:7c: 0d:f5:47:55:b5:0b:49:76:11:5c:ef:17:56:33:52:12:e1:f6: e7:1a:f1:40:10:dc:ef:71:80:91:7b:48:76:b4:c1:9f:8f:3b: c8:5c:c2:ea:e6:27:78:20:a1:5c:82:fb:40:5e:b4:7e:3c:c7: 7b:74:5e:0d:4b:9e:37:b1:bd:bb:2c:9e:ae:7e:e6:88:a8:72: 96:78:b5:c3:74:2b:b4:12:3c:e7:ad:bd:47:aa:cf:f3:64:c3: b7:b6:e8:d4:55:22:95:db:73:fc:e0:6d:03:97:54:42:c1:c3: fa:01:0b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgMQHIXNRViuW4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzUwMjZiMjUtNjI4MC00NmI5LWE0NzItY2YzYmFjNTYyMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyY/cKfFkLGVFte5GXD38jwoLnp2Ia5LPCVJ bCDK0pK1QVvP7/bFJbkveKZwHVEdJnZ9HoFWyJXSeLRg22hONO758N5NxrKUd7o7 ESQ+DVCHzQc6TB24LfFSfYiVW4rhdCCO1b1NoBVtSbd7rzwiV44y4SOUXW6MRbof tSQ8AvCFoPhZunJzSB+XkIjMP+0wdmGtSgjE4WhUNI3/yxeUmou4psWHLZIG8GYd eGEJsM4+SCayq5n6a/Rr4x9e/f5rhper/K9k6VnAceTx/Ys/7CnsCOY2gb3WD/wc MYLwDwRWkDsp8uD8JFrYlcdV279pqXMFjFuSSUdLN2OcnnzTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyug4JbkQmPV7GGy3Admc/XXqQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvYzU0Y2UzYzEtZTA3NC0z ZGU1LTkwZTctNDFkNmVkZWIzNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzlBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4Gl886RcdCyulTlBuBhTKj5DIUWKGnjnkli4VxG/V+F6KlRziiwwfB eFI/O5xOr9BFTZpFamAs/LZbFeQJy041v6ibrxtPTkf1JsMCm8bJQO8HHL672xmt ATQlwdUVCCLyjGjXu6tRRbUc1UsZZ8Xcln+kZjtUchnw3w0tmoxzwsZMDb3/hv9s lrJAqpZvfA31R1W1C0l2EVzvF1YzUhLh9uca8UAQ3O9xgJF7SHa0wZ+PO8hcwurm J3ggoVyC+0BetH48x3t0Xg1Lnjexvbssnq5+5oiocpZ4tcN0K7QSPOetvUeqz/Nk w7e26NRVIpXbc/zgbQOXVELBw/oBC/c= -----END CERTIFICATE-----Generated at Sat May 10 09:43:18 2025 by rpki-client