$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa File: 64c7f1aa-e841-3477-a99e-7a146becbbc2.roa (raw, json) Hash identifier: aAbVOXjddQGZk0eVw9qvcG3xcvLfC/gc9GosOEnq5Lk= Subject key identifier: A3:31:0B:E7:1E:D8:18:5F:3E:5B:CE:DC:10:C5:3E:46:5A:77:F4:29 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584988CF32BFA612A1BCF166B100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397630 IP address blocks: 170.199.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:32:bf:a6:12:a1:bc:f1:66:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=0e7893fd-6e4a-4439-8648-eb1831cd754f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:d2:06:c4:32:18:0b:db:12:da:ae:29:0b: 1d:4c:d2:12:82:e0:90:15:92:d5:ce:d7:9d:a8:de: ee:2d:46:61:7e:f0:2d:dd:8c:e2:1c:4b:e4:11:5a: 31:fa:e0:8c:01:d7:55:95:a3:71:8b:a4:75:76:65: 06:1f:c5:73:c8:ab:b9:ae:4f:86:06:41:13:f1:ab: db:71:ca:b3:da:4e:9d:f9:dd:2d:39:ac:1e:36:07: 9f:9f:af:4f:3a:51:8c:08:38:c4:47:ea:33:53:35: f2:aa:99:55:44:cc:20:b1:2c:49:3e:69:81:ec:c0: ec:34:b6:b1:a5:2b:b0:33:a2:bb:a3:7e:98:8e:07: da:23:fc:fe:37:43:d7:2b:c3:fe:20:e0:fa:60:ad: c2:64:4f:8b:7f:a3:10:d7:68:73:05:88:3e:6f:d0: ca:01:1c:da:c8:e5:dd:56:e3:53:15:e0:d0:39:79: 11:da:e0:da:2c:5d:98:cb:e3:7d:2c:6e:b8:2c:75: 4f:bb:41:32:0f:7e:88:20:50:79:4b:83:4f:c9:44: d2:fe:f6:dc:64:b4:94:a4:3e:43:ef:15:32:b7:52: e7:51:59:ad:c3:31:b0:e3:9b:c1:c3:80:6b:1e:f8: d5:42:38:49:2a:28:2b:9c:1f:38:1c:27:7f:3e:be: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:0B:E7:1E:D8:18:5F:3E:5B:CE:DC:10:C5:3E:46:5A:77:F4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:23:f2:1f:61:5b:be:0a:d7:93:c4:2b:b9:d2:69:46:f9:91: da:e7:01:7d:f3:e9:75:92:af:d7:1c:fb:e4:fd:4f:3c:5b:af: 70:e0:ac:f8:b1:38:e3:1e:54:d4:3b:a9:14:bd:28:84:bf:c9: b6:a9:40:4e:ad:2e:15:e2:32:50:92:e5:96:22:93:9d:9a:30: 79:96:e4:6b:06:34:23:97:28:d4:23:e3:f3:cd:38:84:e4:28: 3c:54:89:ae:08:54:40:15:e8:f2:6d:79:f0:4f:39:28:0a:02: bc:82:22:bf:a8:b6:5a:d2:a8:5e:f1:c0:f0:04:39:74:35:a0: cf:69:44:e5:81:46:ef:32:2c:8b:a7:fd:bf:98:b2:db:1c:ef: 66:46:46:af:9e:9a:24:85:13:c4:ea:9e:08:a4:73:43:42:47: 9d:d5:ee:82:40:59:50:87:5b:80:bb:90:79:17:42:0e:7c:6a: 4f:6c:33:dc:d0:f1:a1:45:ca:c1:6e:cd:d3:a2:71:a7:07:ff: 7d:b6:dd:c3:69:bd:e7:ee:d5:14:b8:67:21:09:fd:05:f3:b6: 8c:d4:77:10:01:ce:fd:8a:93:1a:fc:90:76:f0:57:93:62:52: 0c:62:84:9a:28:d2:6d:19:e4:5f:a6:cf:18:03:dc:76:79:d1: 87:66:ca:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzK/phKhvPFmsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGU3ODkzZmQtNmU0YS00NDM5LTg2NDgtZWIxODMxY2Q3NTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK7SBsQyGAvbEtquKQsdTNISguCQFZLVzted qN7uLUZhfvAt3YziHEvkEVox+uCMAddVlaNxi6R1dmUGH8VzyKu5rk+GBkET8avb ccqz2k6d+d0tOaweNgefn69POlGMCDjER+ozUzXyqplVRMwgsSxJPmmB7MDsNLax pSuwM6K7o36YjgfaI/z+N0PXK8P+IOD6YK3CZE+Lf6MQ12hzBYg+b9DKARzayOXd VuNTFeDQOXkR2uDaLF2Yy+N9LG64LHVPu0EyD36IIFB5S4NPyUTS/vbcZLSUpD5D 7xUyt1LnUVmtwzGw45vBw4BrHvjVQjhJKigrnB84HCd/Pr7iQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMxC+ce2BhfPlvO3BDFPkZad/QpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjRjN2YxYWEtZTg0MS0z NDc3LWE5OWUtN2ExNDZiZWNiYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwj8h9hW74K15PEK7nSaUb5kdrnAX3z6XWSr9cc++T9Tzxbr3DgrPix OOMeVNQ7qRS9KIS/ybapQE6tLhXiMlCS5ZYik52aMHmW5GsGNCOXKNQj4/PNOITk KDxUia4IVEAV6PJtefBPOSgKAryCIr+otlrSqF7xwPAEOXQ1oM9pROWBRu8yLIun /b+Ystsc72ZGRq+emiSFE8Tqngikc0NCR53V7oJAWVCHW4C7kHkXQg58ak9sM9zQ 8aFFysFuzdOicacH/3223cNpvefu1RS4ZyEJ/QXztozUdxABzv2Kkxr8kHbwV5Ni UgxihJoo0m0Z5F+mzxgD3HZ50Ydmys0= -----END CERTIFICATE-----Generated at Fri May 2 17:51:06 2025 by rpki-client