$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa File: 20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa (raw, json) Hash identifier: RhH9PP6HfYL0N7C1s4wNGz+wzI9AoE9qlyk0jMbyKoA= Subject key identifier: 7B:A9:9B:BA:F1:56:C5:99:9F:83:BF:33:51:42:7A:72:D4:98:2A:16 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849674EF82837BB3E14360B9D80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 7018 IP address blocks: 172.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f8:28:37:bb:3e:14:36:0b:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=2294f2f8-28f4-431f-9b10-8c7a402878a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:d2:a2:e9:d3:dc:33:d7:da:36:68:87:c1: 93:38:50:3b:4b:d9:ea:1c:97:7e:fc:58:3e:80:79: 1e:64:0a:45:79:90:2f:9a:4a:69:52:da:f0:4f:18: 64:62:26:2c:83:d6:1c:34:eb:8e:95:dc:5e:23:b2: b2:be:d9:6e:78:01:b4:cb:0e:e0:16:2b:2f:d5:e5: da:8c:00:7b:65:f6:64:3d:9d:c7:01:ed:4a:21:aa: 2e:c7:ae:75:0e:a4:f3:ad:55:eb:5a:74:7c:4e:82: f3:d3:3c:41:45:c1:f1:82:9d:67:a9:ae:ba:19:37: 19:5a:88:dd:c9:5b:aa:3e:61:14:2d:75:50:40:a6: fc:4f:fb:c0:4f:bf:bf:24:71:1f:3b:ec:8e:1d:83: 44:6f:34:84:9e:b0:18:82:c2:72:66:f7:e9:f6:86: 3f:9b:c1:04:1c:de:f8:05:ac:50:4b:d2:79:94:ed: 2b:ec:03:ac:fd:2f:b5:4b:9c:d0:dd:9b:eb:72:0d: 8e:2d:6c:f7:a7:36:46:07:40:8e:13:a2:eb:83:cd: d6:6f:b0:16:32:34:51:f4:7a:2d:4e:a1:eb:3c:65: 01:9b:74:65:7b:12:09:2a:33:fc:1e:27:ee:b3:d0: 91:1a:b4:a3:f5:d9:72:ab:b4:f9:88:32:e4:11:9d: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A9:9B:BA:F1:56:C5:99:9F:83:BF:33:51:42:7A:72:D4:98:2A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cd:06:13:b2:b7:99:8e:e4:ae:86:03:28:72:48:a2:36:e0: bc:56:0d:7a:38:18:52:bb:27:44:57:c0:df:9c:90:e2:a0:36: 3f:c7:5e:36:f9:cb:be:f0:4a:76:07:e6:42:30:55:e8:25:4f: af:9e:d1:ac:75:d5:39:71:e5:9b:a8:6c:e8:21:c8:d6:a8:ad: f7:eb:87:b7:98:11:fc:9d:91:19:b7:6e:a1:80:83:ce:96:e9: ea:4d:70:e8:24:13:b5:9b:06:05:df:dc:10:8e:38:71:62:ac: a8:37:2f:c2:3e:f3:f6:2c:b2:d7:b7:22:8d:ba:f2:41:f0:20: a6:5a:b2:ac:3e:74:50:ca:e8:68:66:9d:c7:5c:5e:41:62:ab: c7:01:90:26:ce:6d:5a:8f:3f:35:47:62:ae:08:55:dd:a5:31: c1:0a:63:80:fb:9e:11:02:2c:31:6c:11:03:1e:de:fe:35:c1: cb:0d:96:2f:ec:2e:c2:f1:5d:eb:3a:64:5e:75:5a:df:4d:9d: 41:ea:f6:29:da:1b:a3:a0:c0:b9:ad:15:f5:ec:cd:28:b4:e1: 35:3e:22:2d:33:a9:aa:8a:d7:cd:8c:4d:9d:90:9f:e1:74:32: b6:e4:b4:6c:76:b3:90:5a:95:88:6e:8a:ac:b4:94:7a:21:1e: 6b:81:d4:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvgoN7s+FDYLnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk MjI5NGYyZjgtMjhmNC00MzFmLTliMTAtOGM3YTQwMjg3OGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWzSounT3DPX2jZoh8GTOFA7S9nqHJd+/Fg+ gHkeZApFeZAvmkppUtrwTxhkYiYsg9YcNOuOldxeI7KyvtlueAG0yw7gFisv1eXa jAB7ZfZkPZ3HAe1KIaoux651DqTzrVXrWnR8ToLz0zxBRcHxgp1nqa66GTcZWojd yVuqPmEULXVQQKb8T/vAT7+/JHEfO+yOHYNEbzSEnrAYgsJyZvfp9oY/m8EEHN74 BaxQS9J5lO0r7AOs/S+1S5zQ3Zvrcg2OLWz3pzZGB0COE6Lrg83Wb7AWMjRR9Hot TqHrPGUBm3RlexIJKjP8Hifus9CRGrSj9dlyq7T5iDLkEZ1mHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHupm7rxVsWZn4O/M1FCenLUmCoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjBjMTgzOGItZWI3NS0z YjRhLWEwZGMtODU1ZDJlY2JhOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLNBhOyt5mO5K6GAyhySKI24LxWDXo4GFK7J0RXwN+ckOKgNj/HXjb5 y77wSnYH5kIwVeglT6+e0ax11Tlx5ZuobOghyNaorffrh7eYEfydkRm3bqGAg86W 6epNcOgkE7WbBgXf3BCOOHFirKg3L8I+8/Ysste3Io268kHwIKZasqw+dFDK6Ghm ncdcXkFiq8cBkCbObVqPPzVHYq4IVd2lMcEKY4D7nhECLDFsEQMe3v41wcsNli/s LsLxXes6ZF51Wt9NnUHq9inaG6OgwLmtFfXszSi04TU+Ii0zqaqK182MTZ2Qn+F0 MrbktGx2s5BalYhuiqy0lHohHmuB1Mo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:45:59 2025 by rpki-client