$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa File: 906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa (raw, json) Hash identifier: bAtZ7nMJpTon6WETY/maOdpKL8pg5MUJs0uuQcJJ4UY= Subject key identifier: 14:B7:AC:23:11:6C:2A:6C:2F:C8:F7:21:1D:18:3F:B7:23:46:21:07 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849218412E886CBA276C8CF7400 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 64267 IP address blocks: 152.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:12:e8:86:cb:a2:76:c8:cf:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=451dfb70-295a-482b-8a63-aa52e1b1b7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:51:9f:ae:b5:99:b7:e3:ed:f4:ed:34:8c: a3:6c:65:da:f9:d2:40:91:fe:c1:47:e3:a7:52:ef: 02:2d:ac:4c:dd:92:de:27:0f:ef:92:12:97:dc:b9: 46:17:20:27:a0:9f:f8:4c:3f:4b:9e:65:99:d0:56: 02:61:0f:c4:cf:4b:a5:94:d4:5d:a9:2d:54:65:3f: a2:5d:cf:dc:aa:e8:f5:f5:e8:94:60:2d:b5:08:f8: 7f:38:34:6a:fe:ec:44:f7:d4:d6:e8:44:96:af:77: f2:b9:c1:48:3a:97:96:7e:31:1e:32:ec:c1:e6:b0: 77:e3:9c:0a:eb:bd:72:2d:a4:0b:ee:ff:1a:3a:08: 48:64:0b:fb:88:c3:b8:6b:a4:28:ea:74:75:8e:43: 95:4b:6f:78:14:a5:dd:cc:0b:2b:0e:f4:ef:c1:6d: b4:c7:f4:09:6c:9c:0b:81:ca:d0:c0:55:42:73:e3: e0:fb:04:30:7a:a1:ad:0d:8c:45:68:be:f4:b6:88: 52:94:71:0c:32:76:30:2a:63:e5:d9:e7:f7:74:cf: 4a:86:ef:96:6e:9b:81:f2:49:a2:5d:6b:a7:cf:4e: da:fc:d5:83:4a:74:e7:f9:43:e2:30:d2:47:86:8e: df:c6:29:c9:b4:02:40:d8:77:5b:db:ec:b4:8d:9b: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:AC:23:11:6C:2A:6C:2F:C8:F7:21:1D:18:3F:B7:23:46:21:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 152.44.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:b2:b5:99:19:4d:12:6a:45:3b:db:86:85:28:11:ac:2f:5c: b7:24:8f:57:af:2f:e5:b6:f8:23:12:89:0b:b6:79:0d:0d:3a: 50:f6:55:98:60:c9:02:0c:b1:5f:c4:d7:6f:9d:d7:c2:42:63: bf:2e:16:0c:ea:c1:92:3d:74:9e:7b:43:40:d2:5a:d8:65:ae: 00:bd:46:92:5e:f6:1f:b9:44:6b:d3:3b:8e:d4:3b:44:dc:0e: 5a:0d:93:89:77:bd:2f:53:b9:cc:14:bf:c5:8f:39:80:cd:3f: fa:f3:ba:40:b6:38:3d:4c:ea:e5:d4:3f:92:dc:2c:4f:7b:3b: a7:d6:b8:39:6c:4f:c3:91:ed:39:93:95:fa:70:1c:39:2d:54: 64:57:31:d6:3d:8e:49:1e:c3:78:63:7c:39:5f:9c:29:b5:db: 0b:71:76:c7:b0:98:cb:57:31:13:c7:50:62:f2:02:8c:a7:be: 68:d7:83:e7:dc:f6:76:23:c5:e6:a2:60:6d:3d:63:c4:e7:a1: 34:72:b2:09:c5:ba:fc:60:b6:07:ea:75:04:90:48:e5:04:49: 20:27:5f:a9:30:a7:a1:cf:2e:47:72:b5:d0:1d:b2:ae:c7:ef: bc:86:64:9b:f0:fc:b6:31:9f:e1:f4:9c:b8:ff:9e:4b:f9:27: bd:04:58:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBLohsuidsjPdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NDUxZGZiNzAtMjk1YS00ODJiLThhNjMtYWE1MmUxYjFiN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9NRn661mbfj7fTtNIyjbGXa+dJAkf7BR+On Uu8CLaxM3ZLeJw/vkhKX3LlGFyAnoJ/4TD9LnmWZ0FYCYQ/Ez0ullNRdqS1UZT+i Xc/cquj19eiUYC21CPh/ODRq/uxE99TW6ESWr3fyucFIOpeWfjEeMuzB5rB345wK 671yLaQL7v8aOghIZAv7iMO4a6Qo6nR1jkOVS294FKXdzAsrDvTvwW20x/QJbJwL gcrQwFVCc+Pg+wQweqGtDYxFaL70tohSlHEMMnYwKmPl2ef3dM9Khu+WbpuB8kmi XWunz07a/NWDSnTn+UPiMNJHho7fxinJtAJA2Hdb2+y0jZugBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS3rCMRbCpsL8j3IR0YP7cjRiEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOTA2ZmI1ZDAtNWUxYS0z ZjFkLWJjZTMtN2QzY2FkYTk4MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2ytZkZTRJqRTvbhoUoEawvXLckj1evL+W2+CMSiQu2eQ0NOlD2VZhg yQIMsV/E12+d18JCY78uFgzqwZI9dJ57Q0DSWthlrgC9RpJe9h+5RGvTO47UO0Tc DloNk4l3vS9TucwUv8WPOYDNP/rzukC2OD1M6uXUP5LcLE97O6fWuDlsT8OR7TmT lfpwHDktVGRXMdY9jkkew3hjfDlfnCm12wtxdsewmMtXMRPHUGLyAoynvmjXg+fc 9nYjxeaiYG09Y8TnoTRysgnFuvxgtgfqdQSQSOUESSAnX6kwp6HPLkdytdAdsq7H 77yGZJvw/LYxn+H0nLj/nkv5J70EWJ0= -----END CERTIFICATE-----Generated at Tue Apr 29 05:20:28 2025 by rpki-client