$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa File: 2489eab1-fab2-357f-aeb8-08dc32897f54.roa (raw, json) Hash identifier: nRnEbqVId8zBp14HTkSwnaqLpWtUaWdMvUqPCXSlNeU= Subject key identifier: E5:06:1A:90:C4:54:A6:86:61:68:F1:70:5B:81:44:A9:3C:39:88:51 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F43285848CB164ECF33795654A7FA4800 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 20419 IP address blocks: 69.28.108.0/24 maxlen: 24 69.28.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:4e:cf:33:79:56:54:a7:fa:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=84c2462d-0640-4813-9bc4-f91cb43845b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:de:c5:dd:36:68:96:2b:12:42:9e:bc:60:f8: 6e:ff:fc:df:89:9a:ec:2e:94:f3:8f:1a:ff:28:1d: 8d:3b:ab:57:78:44:22:7a:90:06:73:97:dd:69:6a: 1a:ec:bd:f2:a3:50:fd:b1:70:1a:d5:37:61:96:e7: c8:26:7f:b9:d8:3c:bc:79:97:fe:9b:00:77:77:a2: 0d:34:cc:79:c2:6d:3e:65:ad:1a:6d:3f:14:1f:8b: b3:6f:11:bc:65:8e:70:fb:35:cb:f2:e6:7f:ef:32: e4:da:08:2b:75:7f:33:fa:e9:c1:61:54:0f:69:ab: ad:df:01:eb:77:7c:a1:fe:4d:1b:7f:78:2d:72:5b: e0:f7:a3:a8:db:d9:77:54:a8:ae:dc:10:4f:70:e5: f6:91:85:8d:6a:8f:5e:fe:67:f1:50:25:d1:ee:07: 1c:75:d2:21:93:db:18:10:98:01:fb:2b:e1:90:49: 75:1f:52:fd:5c:87:65:2e:f2:fa:a6:60:a1:60:df: c8:0d:b9:02:7d:72:84:ca:2a:55:4d:d9:da:57:d9: 43:8b:89:f6:a1:9e:9f:8d:6f:99:0f:8b:52:5a:e2: c5:73:04:ca:6a:0e:37:1f:1b:bf:c5:63:f2:e9:aa: 1e:e9:25:f6:9a:a0:08:cc:d5:89:f2:14:02:d9:e1: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:06:1A:90:C4:54:A6:86:61:68:F1:70:5B:81:44:A9:3C:39:88:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.28.108.0/24 69.28.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3c:86:fa:fc:48:89:a3:a1:12:34:ae:4c:73:d3:5f:3e:a3: a9:e9:b7:1b:c7:bc:9c:4d:db:3d:33:04:93:97:0b:15:f6:77: 5d:ef:0f:7c:60:ad:8b:6b:f9:02:7d:6c:03:a0:a2:7b:c1:03: 8d:c2:fb:42:d2:64:8d:dd:e6:61:59:34:be:0a:69:ad:f8:2e: c1:5b:59:43:f0:fa:1c:75:a0:62:e0:82:cd:a1:b2:58:d0:13: 09:7a:33:2c:1c:a1:a5:4f:6e:fd:b7:45:95:6d:59:91:64:4a: d6:78:d4:e8:f7:1b:85:a9:8f:97:98:7f:f8:29:fb:59:10:cf: fc:da:c9:c0:02:31:84:2d:33:13:d6:f4:87:f1:6f:17:a1:3a: 08:93:fd:ad:30:04:f6:34:2e:f8:21:31:ca:20:dd:8f:37:c4: 4d:77:ed:b3:ad:81:0b:55:e3:1b:a6:1c:60:1d:13:31:79:aa: 41:a0:f9:ce:45:35:1f:6c:a6:db:4c:1c:f0:af:b6:ca:45:96: 42:30:25:a1:92:fa:ab:18:29:50:35:0e:cd:66:e8:67:f7:e1: 46:21:8d:58:2e:09:76:a3:32:97:94:92:3f:bc:ff:35:c8:16: a1:48:68:1f:bd:3a:ca:4e:24:67:f5:f2:22:6c:b1:2e:e1:90: a9:c4:65:80 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjLFk7PM3lWVKf6SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk ODRjMjQ2MmQtMDY0MC00ODEzLTliYzQtZjkxY2I0Mzg0NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t7F3TZolisSQp68YPhu//zfiZrsLpTzjxr/ KB2NO6tXeEQiepAGc5fdaWoa7L3yo1D9sXAa1TdhlufIJn+52Dy8eZf+mwB3d6IN NMx5wm0+Za0abT8UH4uzbxG8ZY5w+zXL8uZ/7zLk2ggrdX8z+unBYVQPaaut3wHr d3yh/k0bf3gtclvg96Oo29l3VKiu3BBPcOX2kYWNao9e/mfxUCXR7gccddIhk9sY EJgB+yvhkEl1H1L9XIdlLvL6pmChYN/IDbkCfXKEyipVTdnaV9lDi4n2oZ6fjW+Z D4tSWuLFcwTKag43Hxu/xWPy6aoe6SX2mqAIzNWJ8hQC2eGfbQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOUGGpDEVKaGYWjxcFuBRKk8OYhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMjQ4OWVhYjEtZmFiMi0z NTdmLWFlYjgtMDhkYzMyODk3ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARRxsAwQA RRx0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFA8hvr8SImjoRI0rkxz018+o6nptxvHvJxN2z0zBJOXCxX2 d13vD3xgrYtr+QJ9bAOgonvBA43C+0LSZI3d5mFZNL4Kaa34LsFbWUPw+hx1oGLg gs2hsljQEwl6MywcoaVPbv23RZVtWZFkStZ41Oj3G4Wpj5eYf/gp+1kQz/zaycAC MYQtMxPW9IfxbxehOgiT/a0wBPY0LvghMcog3Y83xE137bOtgQtV4xumHGAdEzF5 qkGg+c5FNR9spttMHPCvtspFlkIwJaGS+qsYKVA1Ds1m6Gf34UYhjVguCXajMpeU kj+8/zXIFqFIaB+9OspOJGf18iJssS7hkKnEZYA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:57:53 2025 by rpki-client