$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/05aafed3-9d0a-3a82-8b90-612690957dab.roa File: 05aafed3-9d0a-3a82-8b90-612690957dab.roa (raw, json) Hash identifier: oa1cGXcy0GCm0vfTKvT7wmVk0Reuu426Ot7h0t7LHek= Subject key identifier: 3B:AB:16:73:70:25:1A:B6:61:C5:4E:3A:DE:B1:9A:92:98:11:50:E7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849ABB4A4C42D41AF32E4CFC300 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/05aafed3-9d0a-3a82-8b90-612690957dab.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 64267 IP address blocks: 209.251.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a4:c4:2d:41:af:32:e4:cf:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=80d544f7-35dc-4adb-85be-21695923f562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:51:81:d5:ac:68:41:cb:66:99:3b:47:e4: 47:ac:3f:07:0d:08:5b:3a:be:77:e6:c0:fa:f8:fd: 54:4a:6f:df:30:c7:25:e7:38:73:39:fc:eb:4f:f8: d4:91:df:73:21:b4:82:92:a4:09:23:c6:a4:59:de: d0:0f:ee:87:9b:28:93:18:b0:2f:36:a4:58:f1:ed: 48:82:11:cf:8a:f8:d8:3d:2c:be:8a:70:84:5d:26: 80:6e:2e:44:72:f6:a2:17:f8:77:fa:46:02:fc:62: 7a:61:00:cb:42:3e:cd:02:ee:13:1c:ed:8c:e9:af: 7c:e7:cb:4b:ef:1d:db:66:48:31:21:47:90:dd:8d: 28:60:d9:0a:13:6b:dd:69:58:29:9c:f2:ca:55:06: c9:0d:5a:f7:76:fe:83:39:7c:54:bf:89:a4:12:ea: 3c:dc:45:19:49:cf:30:ba:cd:6f:bf:d2:1c:ef:f5: 86:b3:fb:05:fe:2a:37:47:6e:4c:57:c4:63:b9:da: c9:b2:f4:8d:a5:32:ac:5e:b1:cb:ea:f8:82:5f:ba: 5c:8f:c0:b0:37:2e:35:02:0c:9d:74:df:9a:fa:52: d0:5f:08:6c:97:2a:b1:ae:79:2d:41:86:25:34:13: 68:48:bc:f9:b8:41:21:03:38:b1:87:73:f7:4d:09: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:16:73:70:25:1A:B6:61:C5:4E:3A:DE:B1:9A:92:98:11:50:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/05aafed3-9d0a-3a82-8b90-612690957dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.251.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:87:84:19:f9:ee:7a:8c:6f:b6:49:b6:c2:32:32:a2:fc:20: d0:cf:11:56:36:1b:c9:f1:c3:ab:c3:cf:93:24:d7:59:25:37: 82:79:5d:48:66:0e:d8:3b:88:1c:5f:cd:d5:a0:3d:ff:24:48: 6d:b4:d7:02:d5:90:ed:b7:78:bc:2e:be:60:22:a0:28:90:96: 2a:3b:ba:69:e3:87:76:b3:e9:dc:5a:08:1b:d4:27:e6:c9:b5: 6f:61:2c:a1:a8:fb:3d:4d:b2:d5:d2:6d:83:94:c7:38:d1:66: db:9d:e1:99:6d:bc:4b:3c:ec:f8:8c:03:b9:a0:42:0e:32:42: ab:a0:d2:1c:06:64:6d:bb:e3:28:f3:bd:14:7a:d4:bb:44:d5: f4:76:66:d8:b1:cf:a7:e9:3a:e0:64:8d:d3:04:af:94:2a:ca: 10:9b:cc:de:a0:6e:40:04:66:f8:30:04:ef:23:b3:85:ea:40: 17:65:cc:7b:1d:8e:4b:ec:71:a9:6a:fa:a6:1e:d3:33:35:1d: 8c:0e:11:81:fb:a8:17:23:ff:fb:42:81:8f:93:91:9d:39:fd: 1c:2a:db:de:a4:3e:5f:a4:8a:40:b3:be:00:72:b4:d4:07:9a: ec:3b:f7:53:99:6d:cc:a0:93:fd:31:2a:0d:c9:ea:72:e0:fc: df:2f:a5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKTELUGvMuTPwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ODBkNTQ0ZjctMzVkYy00YWRiLTg1YmUtMjE2OTU5MjNmNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4ZRgdWsaEHLZpk7R+RHrD8HDQhbOr535sD6 +P1USm/fMMcl5zhzOfzrT/jUkd9zIbSCkqQJI8akWd7QD+6HmyiTGLAvNqRY8e1I ghHPivjYPSy+inCEXSaAbi5EcvaiF/h3+kYC/GJ6YQDLQj7NAu4THO2M6a9858tL 7x3bZkgxIUeQ3Y0oYNkKE2vdaVgpnPLKVQbJDVr3dv6DOXxUv4mkEuo83EUZSc8w us1vv9Ic7/WGs/sF/io3R25MV8RjudrJsvSNpTKsXrHL6viCX7pcj8CwNy41Agyd dN+a+lLQXwhslyqxrnktQYYlNBNoSLz5uEEhAzixh3P3TQl5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDurFnNwJRq2YcVOOt6xmpKYEVDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDVhYWZlZDMtOWQwYS0z YTgyLThiOTAtNjEyNjkwOTU3ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0fsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2HhBn57nqMb7ZJtsIyMqL8INDPEVY2G8nxw6vDz5Mk11klN4J5XUhm Dtg7iBxfzdWgPf8kSG201wLVkO23eLwuvmAioCiQlio7umnjh3az6dxaCBvUJ+bJ tW9hLKGo+z1NstXSbYOUxzjRZtud4ZltvEs87PiMA7mgQg4yQqug0hwGZG274yjz vRR61LtE1fR2Ztixz6fpOuBkjdMEr5QqyhCbzN6gbkAEZvgwBO8js4XqQBdlzHsd jkvscalq+qYe0zM1HYwOEYH7qBcj//tCgY+TkZ05/Rwq296kPl+kikCzvgBytNQH muw791OZbcygk/0xKg3J6nLg/N8vpfk= -----END CERTIFICATE-----Generated at Tue Apr 29 04:23:47 2025 by rpki-client