$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa File: 3d9be492-283e-32a9-9ca3-e5235522fa2b.roa (raw, json) Hash identifier: NqE1mAPsrqsTfm2AXehITMJsUC1YFHcWxcyYAEfHj1g= Subject key identifier: 86:68:21:20:9B:89:34:1D:97:D8:94:F8:89:D8:35:87:6C:15:3C:46 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F43285849ABB4AB57EA38B39B2068A110 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 399294 IP address blocks: 200.5.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ab:57:ea:38:b3:9b:20:68:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=aaa2f81e-f75c-4b37-b862-9fccc8563b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:ce:02:81:a7:7a:d5:04:c5:21:da:13:df: 0a:98:f2:d9:a3:3b:15:35:d0:86:4a:88:10:1e:54: 80:98:ea:d8:43:2e:a0:20:78:6d:57:23:5c:a2:39: aa:8d:ae:79:b9:15:ea:fd:cd:3e:02:39:72:ee:04: 27:ab:0b:30:e6:ed:df:f1:84:db:05:bd:04:90:a6: 90:2d:a7:17:ba:d9:be:e0:59:20:68:99:28:c3:de: 8b:5f:eb:2d:a9:64:3d:7d:96:21:da:59:ce:fb:d0: ff:a7:da:52:f1:06:0c:d3:c4:58:c7:6e:83:67:f2: 7d:d5:0d:2a:2d:7d:e2:fe:15:6d:a4:f4:02:7d:88: a7:eb:45:2c:72:6e:8c:40:e5:39:04:66:ec:01:50: 89:37:75:fd:01:2a:d1:e4:a3:0f:ce:a5:6b:06:fa: 95:8d:8c:80:65:01:78:4c:74:e8:49:ab:c4:9c:64: ca:0a:84:96:61:f9:86:27:6f:7d:40:16:5a:d3:b6: e0:82:07:fb:7f:72:2d:b6:b6:8f:5f:49:72:07:c3: 34:65:03:53:6a:fc:41:8d:bf:22:fb:d8:c3:06:95: f7:86:b7:b9:91:a0:ec:2f:33:12:43:68:f8:f9:09: 71:9d:41:59:be:ba:c8:0c:bf:7e:0b:24:41:1e:78: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:68:21:20:9B:89:34:1D:97:D8:94:F8:89:D8:35:87:6C:15:3C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:35:97:f7:d2:ec:14:fe:3b:51:28:e1:0e:34:47:94:25:51: c7:74:32:94:22:6b:18:b1:75:fe:a6:17:11:04:5e:61:bf:48: 71:67:25:64:23:3b:90:c0:b3:ef:03:a1:90:60:93:ab:ca:96: dd:f6:2d:ae:07:37:08:c7:c3:87:10:d7:c2:bf:26:8c:82:59: 04:8a:31:7e:13:89:d0:74:8e:33:16:87:f3:8c:47:0d:67:eb: 5b:9d:6c:0a:7b:1e:04:41:ab:96:46:cb:77:0a:36:10:08:9c: 8e:c3:e6:76:78:60:ff:cf:e8:27:a4:4f:16:be:ed:40:d0:a8: e3:a9:be:61:6c:b0:b0:e9:e7:c0:8a:8e:9d:ee:60:43:53:89: 3c:b0:29:7d:c1:c6:4b:c8:7a:3d:5e:21:be:d2:22:6e:40:7c: b9:a6:33:06:a1:1e:2c:87:62:54:cc:59:34:cc:fa:71:e9:d3: bd:4a:5b:79:12:25:fd:8e:95:5e:80:d2:f2:db:df:28:fd:4b: 6a:73:3b:f1:59:47:41:f3:56:15:2e:de:2f:8f:db:b3:d7:c6: 65:f0:3b:34:ab:fd:52:5e:00:49:d3:4a:c7:05:50:97:65:57: 2c:21:e6:67:c9:db:5d:1f:ae:8b:de:cc:2c:2f:65:26:3d:47: ad:43:68:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKtX6jizmyBooRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWFhMmY4MWUtZjc1Yy00YjM3LWI4NjItOWZjY2M4NTYzYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDvOAoGnetUExSHaE98KmPLZozsVNdCGSogQ HlSAmOrYQy6gIHhtVyNcojmqja55uRXq/c0+Ajly7gQnqwsw5u3f8YTbBb0EkKaQ LacXutm+4FkgaJkow96LX+stqWQ9fZYh2lnO+9D/p9pS8QYM08RYx26DZ/J91Q0q LX3i/hVtpPQCfYin60Uscm6MQOU5BGbsAVCJN3X9ASrR5KMPzqVrBvqVjYyAZQF4 THToSavEnGTKCoSWYfmGJ299QBZa07bgggf7f3IttraPX0lyB8M0ZQNTavxBjb8i +9jDBpX3hre5kaDsLzMSQ2j4+QlxnUFZvrrIDL9+CyRBHniQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZoISCbiTQdl9iU+InYNYdsFTxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvM2Q5YmU0OTItMjgzZS0z MmE5LTljYTMtZTUyMzU1MjJmYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA81l/fS7BT+O1Eo4Q40R5QlUcd0MpQiaxixdf6mFxEEXmG/SHFnJWQj O5DAs+8DoZBgk6vKlt32La4HNwjHw4cQ18K/JoyCWQSKMX4TidB0jjMWh/OMRw1n 61udbAp7HgRBq5ZGy3cKNhAInI7D5nZ4YP/P6CekTxa+7UDQqOOpvmFssLDp58CK jp3uYENTiTywKX3BxkvIej1eIb7SIm5AfLmmMwahHiyHYlTMWTTM+nHp071KW3kS Jf2OlV6A0vLb3yj9S2pzO/FZR0HzVhUu3i+P27PXxmXwOzSr/VJeAEnTSscFUJdl Vywh5mfJ210frovezCwvZSY9R61DaIY= -----END CERTIFICATE-----Generated at Wed May 7 18:52:27 2025 by rpki-client