$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a3cae45-9a6d-3200-ab69-3ffa5cfe3c33.roa File: 8a3cae45-9a6d-3200-ab69-3ffa5cfe3c33.roa (raw, json) Hash identifier: H5yhjqZ3q8Hkh1i0mKJd/Urdvr52aa92dJRE7HF/SGg= Subject key identifier: 85:A3:B4:CB:35:B1:66:FC:A6:1D:16:B1:85:F9:82:8A:27:0D:97:A6 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849AE7F429367820EDEA2E4B5B8 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a3cae45-9a6d-3200-ab69-3ffa5cfe3c33.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 397630 IP address blocks: 172.81.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:42:93:67:82:0e:de:a2:e4:b5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=c17f4d2c-9a65-4ed2-8d41-351e33c22f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:c4:14:6b:4f:f9:5c:3c:fc:6f:f4:dc:36: ef:39:6e:e1:0e:2a:cb:04:a3:79:6f:87:d4:f1:89: 55:3f:c3:25:83:92:38:74:0c:93:80:a6:d6:19:1b: ee:2c:af:56:cf:5b:00:31:c3:44:b6:9e:b6:9c:d8: 5c:ab:a4:79:ad:d5:6f:d8:ed:cc:65:c8:ae:c8:cc: 44:8b:64:92:27:e5:e6:07:5e:da:e7:97:8b:a3:ec: 64:92:e0:0f:76:60:63:96:cb:0c:42:e8:b9:08:4a: 0e:25:aa:ce:be:65:96:08:a2:3d:e3:e9:ec:59:83: fa:c8:58:ec:a1:df:f3:be:20:1c:57:9b:69:b6:3f: bf:0e:6e:08:85:71:85:5b:04:88:c1:64:68:ca:3c: 09:d5:bb:57:4e:db:77:6f:d5:db:87:0d:92:19:95: 30:e6:83:fc:4a:21:24:c0:18:66:f0:85:5a:52:40: ee:c6:14:57:13:82:a1:02:f2:95:8c:fd:67:42:8b: 67:f2:4d:62:16:f2:c5:73:08:ab:fa:7b:78:8a:7c: c4:6b:31:3a:51:4b:1a:2e:42:2b:84:1d:89:f8:e9: 1e:3a:cc:7b:65:07:be:9e:cd:07:23:17:7f:bf:a8: 51:0e:26:ca:1e:81:2d:bc:45:65:72:17:e6:e8:a5: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:B4:CB:35:B1:66:FC:A6:1D:16:B1:85:F9:82:8A:27:0D:97:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a3cae45-9a6d-3200-ab69-3ffa5cfe3c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.81.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:f2:88:8d:80:41:73:04:7c:11:ad:2c:6d:49:7f:83:66:b6: ec:92:11:2e:7e:0a:83:ba:cc:ac:dc:6d:51:d7:95:5f:5f:4c: a9:73:2d:25:57:63:b6:e8:9d:e3:42:47:f2:63:24:b5:a8:a0: 5b:9d:52:91:35:38:d4:12:56:b9:8c:07:75:75:a4:b6:c7:7b: 1e:a5:a6:fb:e1:01:df:71:a1:bd:74:ea:e1:cd:85:5e:07:42: 33:ca:3f:86:9e:37:3b:7d:3c:76:5e:a2:05:66:dd:23:e2:30: 92:86:5f:68:9f:1a:0e:b7:bf:40:07:bc:50:4e:7b:7c:8a:e9: ff:b7:38:6f:76:1a:39:71:fb:c5:e0:86:b4:3b:fc:72:29:f6: 28:4b:60:74:81:1c:92:fc:b3:90:59:1f:68:7a:71:63:10:25: 12:6b:d5:6e:f5:6c:00:c2:10:de:53:14:19:4f:95:99:20:39: 7f:2f:a6:96:91:42:fd:04:24:de:91:e8:b4:02:d3:21:3f:1e: 51:92:c1:a3:90:95:a7:c0:75:87:1b:ac:d3:0e:e6:80:8c:07: 31:f2:9e:fb:1b:a8:5a:5d:5e:b9:06:78:a1:ed:ee:b1:d2:50: c2:42:ca:a7:6d:a7:90:64:a9:b1:02:76:0c:20:77:56:e8:71: e4:db:11:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0KTZ4IO3qLktbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk YzE3ZjRkMmMtOWE2NS00ZWQyLThkNDEtMzUxZTMzYzIyZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0fEFGtP+Vw8/G/03DbvOW7hDirLBKN5b4fU 8YlVP8Mlg5I4dAyTgKbWGRvuLK9Wz1sAMcNEtp62nNhcq6R5rdVv2O3MZciuyMxE i2SSJ+XmB17a55eLo+xkkuAPdmBjlssMQui5CEoOJarOvmWWCKI94+nsWYP6yFjs od/zviAcV5tptj+/Dm4IhXGFWwSIwWRoyjwJ1btXTtt3b9Xbhw2SGZUw5oP8SiEk wBhm8IVaUkDuxhRXE4KhAvKVjP1nQotn8k1iFvLFcwir+nt4inzEazE6UUsaLkIr hB2J+OkeOsx7ZQe+ns0HIxd/v6hRDibKHoEtvEVlchfm6KVTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWjtMs1sWb8ph0WsYX5goonDZemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGEzY2FlNDUtOWE2ZC0z MjAwLWFiNjktM2ZmYTVjZmUzYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANnyiI2AQXMEfBGtLG1Jf4NmtuySES5+CoO6zKzcbVHXlV9fTKlzLSVX Y7boneNCR/JjJLWooFudUpE1ONQSVrmMB3V1pLbHex6lpvvhAd9xob106uHNhV4H QjPKP4aeNzt9PHZeogVm3SPiMJKGX2ifGg63v0AHvFBOe3yK6f+3OG92Gjlx+8Xg hrQ7/HIp9ihLYHSBHJL8s5BZH2h6cWMQJRJr1W71bADCEN5TFBlPlZkgOX8vppaR Qv0EJN6R6LQC0yE/HlGSwaOQlafAdYcbrNMO5oCMBzHynvsbqFpdXrkGeKHt7rHS UMJCyqdtp5BkqbECdgwgd1boceTbEec= -----END CERTIFICATE-----Generated at Fri May 2 13:31:36 2025 by rpki-client