$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/65a8e938-ed34-3296-90e4-cc66fbe2f351.roa File: 65a8e938-ed34-3296-90e4-cc66fbe2f351.roa (raw, json) Hash identifier: F/FO7GNVCPpIjaG3NUIUL13XJwhWlK1wkXMkNmO7dBs= Subject key identifier: 42:42:34:9F:AC:98:89:10:36:CB:FB:A1:5D:72:C7:09:0C:E3:A3:CB Certificate issuer: /CN=c739b1fc-db89-423c-9437-5e3b11048882 Certificate serial: 010D0C9F432858499AF48E79B76916D5C781D280 Authority key identifier: DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/65a8e938-ed34-3296-90e4-cc66fbe2f351.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 40080 IP address blocks: 205.207.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8e:79:b7:69:16:d5:c7:81:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c739b1fc-db89-423c-9437-5e3b11048882 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=cb59c4e1-0abe-485c-86da-f9fea7000870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:15:14:dc:82:4a:09:5d:df:52:62:b6:32: 9d:ad:5b:b0:70:b3:09:09:7b:d0:08:3a:f5:22:66: 47:4c:5b:be:54:46:f8:31:c6:58:b8:27:5f:f3:44: b2:1c:2d:3a:61:2d:52:bf:c0:10:09:f9:03:88:45: 5d:23:02:f7:bb:f7:17:5a:08:11:a7:79:17:e6:2e: 3e:cc:77:08:21:6d:f0:f8:76:5c:87:4e:3d:8a:23: cf:82:72:39:e0:ec:41:5c:81:15:c2:0c:77:0c:14: ca:38:d6:2f:c1:d0:8c:e3:48:14:9f:08:e5:3c:b1: 67:1e:1c:6a:df:6b:56:70:3d:9e:f1:6b:08:9c:19: 53:91:aa:2a:f3:cf:33:92:89:77:58:50:d9:11:ee: 7b:9a:0a:2a:90:fc:37:bf:02:38:21:5e:24:1f:24: 14:c5:a8:c7:89:ed:7a:17:8c:7b:9c:2b:66:b4:ba: 9d:1b:60:ef:a6:42:00:65:e9:c0:cf:e9:2d:2a:d5: 92:8b:75:12:87:f8:11:87:8e:b9:03:2b:71:78:b0: f9:7d:be:6b:82:b0:68:40:ba:60:cd:d8:2c:bc:14: 38:85:1a:a0:1b:a6:08:60:6b:1c:af:4c:10:bf:d0: e7:29:d7:86:49:bb:ca:08:e4:85:cf:55:c0:a3:83: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:34:9F:AC:98:89:10:36:CB:FB:A1:5D:72:C7:09:0C:E3:A3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/65a8e938-ed34-3296-90e4-cc66fbe2f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl X509v3 Authority Key Identifier: keyid:DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer sbgp-ipAddrBlock: critical IPv4: 205.207.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:55:bf:d2:16:b7:d6:93:9f:19:53:fc:23:be:75:2e:91:24: a2:2a:72:0e:5f:aa:4a:74:71:3c:64:2c:72:a8:27:36:03:51: 5e:53:3d:10:e1:c1:e0:16:00:1a:bf:50:d7:dc:4b:17:75:c4: d2:67:7b:d8:65:36:39:a3:fc:3a:09:a9:f3:4c:39:d7:4a:6e: 06:25:2a:44:0f:c1:4c:86:ce:4d:f2:5d:ad:43:b8:d0:d5:6c: e5:6c:24:a8:56:ab:28:2e:80:08:02:cf:f2:7b:39:6b:77:d8: 70:63:9b:e7:67:0b:52:00:4a:d0:9f:01:e3:c7:04:66:64:4e: 14:f4:68:b0:dc:f9:85:e0:15:4c:80:63:5f:57:ea:24:24:19: ad:3a:3f:98:3e:cc:a1:cd:7e:51:d9:26:98:3d:51:9a:bf:60: 2f:d2:0d:22:eb:eb:70:c0:b5:ce:df:73:ad:74:ca:99:87:c1: 79:df:8e:70:95:f0:92:94:13:a1:ce:e1:08:d5:a7:0e:bd:d8: b5:2c:3e:54:77:d6:1c:99:b6:86:a5:71:24:4b:89:c0:c3:24: 47:af:e2:9d:27:fe:11:2f:b5:c2:60:a0:03:b3:53:80:d3:cd: 9d:4c:7a:80:8e:1c:2c:14:a2:34:d1:1d:d0:d1:8d:36:7b:0a: 28:19:9b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9I55t2kW1ceB0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczOWIxZmMtZGI4OS00MjNjLTk0MzctNWUzYjExMDQ4 ODgyMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2I1OWM0ZTEtMGFiZS00ODVjLTg2ZGEtZjlmZWE3MDAwODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEAVFNyCSgld31JitjKdrVuwcLMJCXvQCDr1 ImZHTFu+VEb4McZYuCdf80SyHC06YS1Sv8AQCfkDiEVdIwL3u/cXWggRp3kX5i4+ zHcIIW3w+HZch049iiPPgnI54OxBXIEVwgx3DBTKONYvwdCM40gUnwjlPLFnHhxq 32tWcD2e8WsInBlTkaoq888zkol3WFDZEe57mgoqkPw3vwI4IV4kHyQUxajHie16 F4x7nCtmtLqdG2DvpkIAZenAz+ktKtWSi3USh/gRh465AytxeLD5fb5rgrBoQLpg zdgsvBQ4hRqgG6YIYGscr0wQv9DnKdeGSbvKCOSFz1XAo4NTNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJCNJ+smIkQNsv7oV1yxwkM46PLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5 YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNiMTEwNDg4ODIvNjVhOGU5MzgtZWQzNC0z Mjk2LTkwZTQtY2M2NmZiZTJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzczOWIxZmMtZGI4OS00MjNjLTk0 MzctNWUzYjExMDQ4ODgyL2M3MzliMWZjLWRiODktNDIzYy05NDM3LTVlM2IxMTA0 ODg4Mi5jcmwwHwYDVR0jBBgwFoAU3CEl0EmMyvfM4tBOcjAjLsgDr04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNi MTEwNDg4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABVv9IWt9aTnxlT/CO+dS6RJKIqcg5fqkp0cTxkLHKoJzYDUV5TPRDh weAWABq/UNfcSxd1xNJne9hlNjmj/DoJqfNMOddKbgYlKkQPwUyGzk3yXa1DuNDV bOVsJKhWqygugAgCz/J7OWt32HBjm+dnC1IAStCfAePHBGZkThT0aLDc+YXgFUyA Y19X6iQkGa06P5g+zKHNflHZJpg9UZq/YC/SDSLr63DAtc7fc610ypmHwXnfjnCV 8JKUE6HO4QjVpw692LUsPlR31hyZtoalcSRLicDDJEev4p0n/hEvtcJgoAOzU4DT zZ1MeoCOHCwUojTRHdDRjTZ7CigZmys= -----END CERTIFICATE-----Generated at Mon Apr 28 11:56:01 2025 by rpki-client