$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa File: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (raw, json) Hash identifier: BOGeH27lln6FLRP7FyUt/A//9mK5qUZiwGSWq8H+ZXA= Subject key identifier: 53:C3:AD:2F:9D:E4:07:A5:BD:21:8B:86:E0:AB:E3:86:12:15:0C:0C Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F43285849631EC7ABA237BDCA34086180 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 912 IP address blocks: 208.78.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c7:ab:a2:37:bd:ca:34:08:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=138a0b68-b6aa-40ab-bece-574f02b118e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:46:4d:62:58:49:68:c3:4f:a7:1b:0b:b8: 54:ae:1b:02:de:d7:89:f1:c1:8d:86:35:52:ce:89: 5a:22:d5:b5:25:37:6b:78:83:b4:72:ff:92:6a:88: 12:78:11:14:d2:ce:3f:60:d8:40:11:9a:c5:ac:58: 70:03:47:66:e5:2f:32:8a:d9:2d:4b:07:19:e7:f0: 70:89:3d:27:c4:8d:63:d8:46:e8:2d:c8:67:86:07: 28:6c:7f:9f:42:0e:65:2a:c2:a5:8c:14:1c:72:dc: 43:c5:c1:5e:a4:30:a5:38:ec:2f:b5:60:22:d6:01: 00:5c:3a:bd:a0:e6:ea:63:2b:88:86:f7:9b:45:01: 58:17:a2:81:c1:69:d6:21:25:84:1e:80:e4:40:c3: 72:3b:8c:c7:70:3e:7a:b2:cb:a6:dd:77:6a:87:ba: 18:bb:50:d7:7f:ba:73:d3:91:a1:a2:58:34:a0:b4: 70:ed:ce:2c:15:ae:db:42:af:f7:3b:80:cd:62:5e: c3:0e:79:1d:e7:0a:4b:04:51:ff:47:bc:26:15:95: f9:fe:10:b6:5c:5e:ac:f5:b7:5f:fc:d6:8f:d0:b4: 39:ae:62:1a:ac:a1:13:f3:33:15:bf:75:18:7c:05: e0:49:27:5b:17:de:88:24:af:bb:9f:8a:5e:37:62: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:AD:2F:9D:E4:07:A5:BD:21:8B:86:E0:AB:E3:86:12:15:0C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c9:d3:db:d0:d6:fd:75:97:7b:b4:2c:e3:bf:b0:d6:60:4a: c6:30:f5:ac:0a:59:0f:e0:6a:bc:e0:54:1e:c0:5a:c6:14:c8: 1e:bd:f2:23:8b:c3:a1:55:eb:88:a3:27:d7:64:49:72:63:31: 2f:c8:de:89:cc:e5:cc:43:a5:ec:61:42:ef:d6:a7:a9:6e:d2: 07:32:1b:a3:eb:4a:58:84:67:33:75:59:99:14:63:a9:6e:05: d0:e6:dd:0d:99:62:da:ba:47:3e:28:ab:8d:d2:fa:64:dc:2b: 6b:4d:a4:c7:bb:fc:21:bd:37:75:e5:cf:cb:75:f4:c4:ba:b7: 05:ee:98:cc:ed:f2:21:ba:3c:17:0f:53:1d:36:2a:6a:93:24: c6:7a:71:0f:49:46:2e:18:51:b8:c3:f9:ee:76:44:a6:2c:77: 6c:17:58:b8:49:35:52:0c:a9:40:3d:bb:7b:11:c6:93:50:5c: ec:6c:72:c4:9d:f9:55:47:86:68:b3:d0:ee:6c:90:69:da:ae: 87:44:43:fe:71:91:2a:3e:f2:a8:92:81:31:ef:56:49:4a:07: e1:04:b3:b5:f8:12:c2:ef:2a:25:23:f5:df:e5:dc:a5:d1:9e: 3c:8d:af:0e:bd:09:49:3a:20:fb:a6:29:7d:1a:b1:06:1b:5e: 88:62:65:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHseroje9yjQIYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MTM4YTBiNjgtYjZhYS00MGFiLWJlY2UtNTc0ZjAyYjExOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit1GTWJYSWjDT6cbC7hUrhsC3teJ8cGNhjVS zolaItW1JTdreIO0cv+SaogSeBEU0s4/YNhAEZrFrFhwA0dm5S8yitktSwcZ5/Bw iT0nxI1j2EboLchnhgcobH+fQg5lKsKljBQcctxDxcFepDClOOwvtWAi1gEAXDq9 oObqYyuIhvebRQFYF6KBwWnWISWEHoDkQMNyO4zHcD56ssum3Xdqh7oYu1DXf7pz 05Gholg0oLRw7c4sFa7bQq/3O4DNYl7DDnkd5wpLBFH/R7wmFZX5/hC2XF6s9bdf /NaP0LQ5rmIarKET8zMVv3UYfAXgSSdbF96IJK+7n4peN2LG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPDrS+d5AelvSGLhuCr44YSFQwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvNDg2Y2Y1OTYtNmFjNS0z MjBjLWI0MzctZTljMWZkYjg5ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTJ09vQ1v11l3u0LOO/sNZgSsYw9awKWQ/garzgVB7AWsYUyB698iOL w6FV64ijJ9dkSXJjMS/I3onM5cxDpexhQu/Wp6lu0gcyG6PrSliEZzN1WZkUY6lu BdDm3Q2ZYtq6Rz4oq43S+mTcK2tNpMe7/CG9N3Xlz8t19MS6twXumMzt8iG6PBcP Ux02KmqTJMZ6cQ9JRi4YUbjD+e52RKYsd2wXWLhJNVIMqUA9u3sRxpNQXOxscsSd +VVHhmiz0O5skGnarodEQ/5xkSo+8qiSgTHvVklKB+EEs7X4EsLvKiUj9d/l3KXR njyNrw69CUk6IPumKX0asQYbXohiZUc= -----END CERTIFICATE-----Generated at Mon Apr 28 13:43:31 2025 by rpki-client