$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa File: 28ad8c15-6504-3448-80f6-48cbd21dac70.roa (raw, json) Hash identifier: 99iOcYqyqDY5kMG6vSwSj0c5bw4biNFrUQCvIFiIn6M= Subject key identifier: 20:03:B4:F0:12:78:60:61:1E:EE:CA:FB:AE:05:0C:89:A4:6B:FE:51 Certificate issuer: /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Certificate serial: 010D0C9F43285849A784C1D24515AA16D110F840 Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 31782 IP address blocks: 192.219.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c1:d2:45:15:aa:16:d1:10:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0478f5c0-6239-4bd7-8427-a5660a981607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:03:a7:ce:d7:25:28:a4:a0:34:e5:0e:f2: e1:74:9d:23:bd:23:74:b1:fb:4e:42:d5:1c:72:7e: 9c:6a:8c:a4:c1:c2:a8:81:99:36:88:f2:8a:dd:89: 79:72:9f:0a:1f:2f:af:81:62:7c:89:c0:92:5c:61: e9:1a:1f:e9:db:b6:fd:31:07:b7:bd:8a:c1:28:73: e0:14:a8:ea:22:42:d5:10:c9:8e:be:4b:12:4d:64: 58:be:93:27:3f:14:16:12:dc:7d:a2:11:35:e7:19: 53:89:69:ea:ed:19:0b:58:d3:bd:f6:c3:d4:cd:6a: b9:b1:d9:0e:af:55:ca:c4:35:fa:ef:e8:52:2c:81: 50:c2:c7:13:e6:9c:b3:21:06:04:59:c7:7b:28:08: 4e:4b:7e:d5:db:f2:12:48:53:5b:16:e2:ee:64:98: 67:24:dc:9f:c5:16:3c:88:2e:a5:72:8a:88:23:1e: b5:f0:1f:2e:0d:9d:a5:3e:87:f3:a8:00:ef:78:07: a7:ff:e6:5c:8e:38:a4:e8:e2:fa:88:fb:c9:dd:86: e5:2f:c4:8e:b1:66:19:39:df:5e:65:e9:34:c2:1e: d3:35:f1:06:0a:a3:ed:58:de:a0:dd:6e:9c:f4:9a: 91:24:9b:72:b7:94:2d:e7:a2:0b:c8:cf:9c:0c:3b: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:03:B4:F0:12:78:60:61:1E:EE:CA:FB:AE:05:0C:89:A4:6B:FE:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl X509v3 Authority Key Identifier: keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer sbgp-ipAddrBlock: critical IPv4: 192.219.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:87:8d:76:9c:b8:bd:55:7b:77:96:96:fb:7e:29:ca:03:95: 8e:f4:cb:2d:b3:8a:4e:fc:e7:c7:e0:88:d6:b2:b8:e3:67:87: 39:d6:5c:36:0f:51:78:4e:3a:c4:d7:5d:52:ce:af:30:6b:19: bc:c6:17:46:f6:ea:ce:23:dc:e4:13:6e:ec:41:e4:44:04:4a: 02:a3:20:c1:f8:39:f3:a5:a2:1f:13:f8:58:b9:69:94:ea:12: 32:93:b0:46:7e:28:a1:97:b5:53:05:cf:e7:e8:29:8f:15:5d: fd:8b:92:e1:78:dc:e3:17:4c:19:ab:f7:d3:77:32:01:3d:3f: c4:98:e3:eb:30:41:85:0b:fb:05:62:5b:3b:7c:ce:24:fa:fa: 6a:06:ca:e7:61:88:ac:9e:8c:a4:79:b4:9d:b4:3e:9b:e5:d1: 54:b7:6f:91:9c:14:6e:9f:37:5d:a1:a5:6d:bb:88:f5:0d:de: 2d:76:74:1a:e6:7d:7a:07:50:5b:b0:3f:15:57:6f:79:7f:a3: 7e:31:4c:74:22:26:c5:6f:bc:0e:da:d9:df:ac:8e:02:4a:14: 04:c4:4f:57:6c:9c:d8:43:35:41:bf:b2:6f:30:2b:53:44:bd: a1:da:fe:f2:dd:40:16:ef:5c:02:2b:e9:55:c6:26:91:1a:de: 08:3b:c1:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMHSRRWqFtEQ+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNm NWFmMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDQ3OGY1YzAtNjIzOS00YmQ3LTg0MjctYTU2NjBhOTgxNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/wDp87XJSikoDTlDvLhdJ0jvSN0sftOQtUc cn6caoykwcKogZk2iPKK3Yl5cp8KHy+vgWJ8icCSXGHpGh/p27b9MQe3vYrBKHPg FKjqIkLVEMmOvksSTWRYvpMnPxQWEtx9ohE15xlTiWnq7RkLWNO99sPUzWq5sdkO r1XKxDX67+hSLIFQwscT5pyzIQYEWcd7KAhOS37V2/ISSFNbFuLuZJhnJNyfxRY8 iC6lcoqIIx618B8uDZ2lPofzqADveAen/+Zcjjik6OL6iPvJ3YblL8SOsWYZOd9e Zek0wh7TNfEGCqPtWN6g3W6c9JqRJJtyt5Qt56ILyM+cDDt4vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCADtPASeGBhHu7K+64FDImka/5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0 ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvMjhhZDhjMTUtNjUwNC0z NDQ4LTgwZjYtNDhjYmQyMWRhYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2MxNGVmN2MtMTI4OS00N2VkLTgx NDQtYzdiM2ZlYWNmNWFmLzdjMTRlZjdjLTEyODktNDdlZC04MTQ0LWM3YjNmZWFj ZjVhZi5jcmwwHwYDVR0jBBgwFoAUsN8Y7XkJwz2LZ31Fr9aB9mU8KxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2Iz ZmVhY2Y1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwNvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWHjXacuL1Ve3eWlvt+KcoDlY70yy2zik7858fgiNayuONnhznWXDYP UXhOOsTXXVLOrzBrGbzGF0b26s4j3OQTbuxB5EQESgKjIMH4OfOloh8T+Fi5aZTq EjKTsEZ+KKGXtVMFz+foKY8VXf2LkuF43OMXTBmr99N3MgE9P8SY4+swQYUL+wVi Wzt8ziT6+moGyudhiKyejKR5tJ20Ppvl0VS3b5GcFG6fN12hpW27iPUN3i12dBrm fXoHUFuwPxVXb3l/o34xTHQiJsVvvA7a2d+sjgJKFATET1dsnNhDNUG/sm8wK1NE vaHa/vLdQBbvXAIr6VXGJpEa3gg7wSE= -----END CERTIFICATE-----Generated at Mon Apr 28 14:36:53 2025 by rpki-client