$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa File: 28f935d3-57e6-314d-95ed-7c825db00b08.roa (raw, json) Hash identifier: j62j0ukOwJPUyxPVbsKAEr672yQkV3PvxhYgqL15XtA= Subject key identifier: BA:47:F5:08:2F:1D:FF:54:F0:59:F7:98:79:CB:0C:59:15:E0:17:3E Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F4328584949FEB54C7040999D41E2B6E0 Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 18888 IP address blocks: 64.42.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b5:4c:70:40:99:9d:41:e2:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=6afeeef6-89b1-4136-aa5a-2423b48fc0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:b2:6e:db:7a:93:64:2c:76:a9:92:43:32: 4a:88:b4:4a:f6:ab:d1:7d:f1:15:b1:30:ec:fa:b2: 33:0b:11:45:0d:97:b5:4a:aa:44:57:62:8e:da:a9: e0:35:d5:97:85:72:e1:8e:dd:55:11:4f:68:64:e9: a6:dd:b7:89:54:8e:e1:82:13:3c:bf:09:ee:ce:60: 40:20:20:13:b8:ae:d6:47:57:f9:12:65:42:81:95: d3:0c:11:cf:bf:a2:7e:28:91:e7:dc:c0:c5:1c:17: 53:ed:d7:3b:71:09:6e:45:87:7a:56:11:36:8e:a7: a7:6d:fd:33:55:59:d6:97:26:b8:b8:03:f6:e6:35: 6f:dd:d3:96:eb:0b:33:33:69:da:4c:df:98:14:b6: c6:c0:cc:2a:69:ec:d6:1f:b5:78:3a:3c:45:68:a7: df:12:75:e8:2a:3d:f5:dd:03:73:d0:af:53:ec:7c: 21:0c:22:de:4a:50:65:37:78:c5:88:e9:5a:fc:e6: 10:3d:b1:ac:97:03:89:50:01:5b:f2:e5:e5:3a:b8: 95:4f:67:29:8f:0d:8c:e2:d2:d5:d4:89:6b:74:d9: 7b:81:e3:72:35:82:28:73:b4:a4:e2:cb:3c:de:09: a7:fb:c6:36:77:c4:e3:69:34:c0:af:23:d2:36:4b: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:47:F5:08:2F:1D:FF:54:F0:59:F7:98:79:CB:0C:59:15:E0:17:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6e:58:73:7a:fe:96:33:99:8b:3e:8d:7a:fd:14:0c:cf:5f: 98:55:0d:01:54:f1:2f:f4:f7:f2:ec:51:45:9d:43:22:b9:fb: 14:18:91:c5:d6:be:12:72:78:5a:30:a8:c8:4b:aa:69:13:f5: af:df:e3:4e:24:a8:37:76:d3:35:fc:80:d0:05:4e:26:75:a7: 4f:1f:fa:ba:39:5e:a7:94:de:7c:d5:e4:cf:a4:09:24:97:d4: c1:b9:cd:30:68:ee:b5:52:af:32:f3:d1:40:30:1b:4e:e7:66: f3:be:0f:29:d0:7e:6c:43:99:d6:38:0f:6f:53:bb:f3:a8:b8: 8b:7b:72:54:b0:a1:d3:8f:77:e1:05:e4:ee:d2:4e:20:ea:40: 20:25:89:01:f7:ae:ca:38:51:0f:82:a5:66:2b:91:87:5b:5b: bb:a6:cd:9d:1a:30:1b:12:36:b8:c7:35:56:6a:ad:cc:56:90: 5f:6f:77:53:5a:c9:a3:d9:28:ca:d2:7d:1d:97:58:26:c8:91: c0:6e:01:50:93:8e:c2:a3:f0:9a:5f:44:fc:6d:e8:65:dd:37: c0:c4:ed:ec:e7:e2:bc:24:4e:08:6c:6e:d0:f2:0d:0d:84:e3: 8f:ba:44:98:a0:3d:5e:df:12:0e:7c:a5:75:7b:0d:64:3b:f3: 17:4d:10:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/rVMcECZnUHituAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NmFmZWVlZjYtODliMS00MTM2LWFhNWEtMjQyM2I0OGZjMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijiybtt6k2QsdqmSQzJKiLRK9qvRffEVsTDs +rIzCxFFDZe1SqpEV2KO2qngNdWXhXLhjt1VEU9oZOmm3beJVI7hghM8vwnuzmBA ICATuK7WR1f5EmVCgZXTDBHPv6J+KJHn3MDFHBdT7dc7cQluRYd6VhE2jqenbf0z VVnWlya4uAP25jVv3dOW6wszM2naTN+YFLbGwMwqaezWH7V4OjxFaKffEnXoKj31 3QNz0K9T7HwhDCLeSlBlN3jFiOla/OYQPbGslwOJUAFb8uXlOriVT2cpjw2M4tLV 1IlrdNl7geNyNYIoc7Sk4ss83gmn+8Y2d8TjaTTAryPSNkuWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpH9QgvHf9U8Fn3mHnLDFkV4Bc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvMjhmOTM1ZDMtNTdlNi0z MTRkLTk1ZWQtN2M4MjVkYjAwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpuWHN6/pYzmYs+jXr9FAzPX5hVDQFU8S/09/LsUUWdQyK5+xQYkcXW vhJyeFowqMhLqmkT9a/f404kqDd20zX8gNAFTiZ1p08f+ro5XqeU3nzV5M+kCSSX 1MG5zTBo7rVSrzLz0UAwG07nZvO+DynQfmxDmdY4D29Tu/OouIt7clSwodOPd+EF 5O7STiDqQCAliQH3rso4UQ+CpWYrkYdbW7umzZ0aMBsSNrjHNVZqrcxWkF9vd1Na yaPZKMrSfR2XWCbIkcBuAVCTjsKj8JpfRPxt6GXdN8DE7ezn4rwkTghsbtDyDQ2E 44+6RJigPV7fEg58pXV7DWQ78xdNENI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:09 2025 by rpki-client