$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/935aecb0-4624-30ef-a160-31451ea08540.roa File: 935aecb0-4624-30ef-a160-31451ea08540.roa (raw, json) Hash identifier: bGnnkIyHYyDPY+Foof9OXgaPlc9XGYpVbukgU5TYKAM= Subject key identifier: 3F:57:FE:4A:09:99:B1:F6:8B:DF:03:5B:43:26:0C:FB:31:32:5E:F7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584988CF32CC15867AB671229C28 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/935aecb0-4624-30ef-a160-31451ea08540.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397630 IP address blocks: 170.199.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:32:cc:15:86:7a:b6:71:22:9c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=6a3c2848-5d8c-467d-bbd2-f862622782e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:5d:72:5c:da:f6:a4:d4:fd:83:bd:b9:77: 68:e1:86:ce:90:e7:d3:d2:b0:ad:0a:3a:a9:44:1d: db:86:de:92:48:e3:ef:58:c5:69:39:0a:0b:35:f8: 85:4c:55:18:04:5e:07:85:6d:e6:84:fa:06:9b:2f: 7e:8d:dc:86:d2:97:64:64:b0:c4:a5:6d:4a:ec:9c: 1e:74:68:15:21:d4:c0:08:fe:f8:06:74:8a:fa:bd: 04:8c:46:bc:71:f8:39:4e:72:9f:9a:82:30:f1:7e: ea:7c:d0:bf:44:42:ba:a7:37:74:bc:62:76:71:25: 1e:b6:2b:19:02:7f:1e:dc:eb:0c:04:d5:8d:0c:09: b0:27:87:96:ba:ee:79:f8:ad:bc:f1:fe:f0:01:f3: a4:a1:65:8d:8f:77:fd:02:50:b6:57:50:16:f0:e7: ef:ba:e6:b5:db:f6:40:13:37:1b:48:e2:51:d8:c0: 59:cf:d8:7f:f8:21:28:6f:6a:17:53:72:35:a8:b7: 9e:46:42:54:6c:ec:7b:43:48:f4:17:3f:46:7d:d0: 83:44:17:70:c6:0f:26:93:e6:d2:50:06:f2:bd:c9: 2d:eb:d4:79:6a:a7:75:9f:99:de:a8:06:06:88:8d: 4a:9b:8c:01:61:e3:79:fd:89:ac:6c:4d:31:02:37: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:57:FE:4A:09:99:B1:F6:8B:DF:03:5B:43:26:0C:FB:31:32:5E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/935aecb0-4624-30ef-a160-31451ea08540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0d:a5:54:da:c6:c1:cc:2a:ae:20:b3:0f:a0:a5:07:06:79: c7:e4:8f:98:a2:23:9a:c2:97:0a:c4:73:52:e5:5c:d9:12:bd: dd:e5:00:c7:b8:6b:7b:b7:7e:34:0d:a0:bd:d2:45:91:a4:0a: c3:f9:ce:d6:52:e4:2e:89:c9:cd:2f:df:d2:99:8b:13:30:a7: 22:9b:7e:e5:44:be:51:d4:35:69:fb:3f:70:4e:6d:ab:fb:df: 10:bc:d4:0c:44:de:6e:f6:49:0d:b2:ba:15:fa:66:e7:cb:ed: 5c:e5:5c:12:ac:77:1e:a2:0e:dd:97:7d:19:4a:04:7a:4e:58: 5a:69:5d:b0:3a:92:71:94:c4:d8:cd:8c:11:62:1b:3b:56:75: 7f:79:15:87:e4:43:91:89:5a:0f:14:aa:a4:cb:c2:1e:f6:33: e5:16:1b:6c:0c:7f:c7:a1:71:93:b3:07:44:10:5e:d2:ad:16: 37:62:31:7e:4c:dd:5a:28:fb:31:82:41:73:cc:e6:8b:db:a9: 54:ab:27:80:d6:32:ff:a2:4b:6a:c8:32:58:66:75:a5:29:5c: 16:c0:c9:61:7e:d1:d8:16:60:ef:7b:c4:00:eb:43:2a:07:19: b1:54:92:d0:f5:48:ad:15:29:9b:77:52:28:47:2b:a8:61:84: 45:e8:5a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzLMFYZ6tnEinCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmEzYzI4NDgtNWQ4Yy00NjdkLWJiZDItZjg2MjYyMjc4MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMddclza9qTU/YO9uXdo4YbOkOfT0rCtCjqp RB3bht6SSOPvWMVpOQoLNfiFTFUYBF4HhW3mhPoGmy9+jdyG0pdkZLDEpW1K7Jwe dGgVIdTACP74BnSK+r0EjEa8cfg5TnKfmoIw8X7qfNC/REK6pzd0vGJ2cSUetisZ An8e3OsMBNWNDAmwJ4eWuu55+K288f7wAfOkoWWNj3f9AlC2V1AW8Ofvuua12/ZA EzcbSOJR2MBZz9h/+CEob2oXU3I1qLeeRkJUbOx7Q0j0Fz9GfdCDRBdwxg8mk+bS UAbyvckt69R5aqd1n5neqAYGiI1Km4wBYeN5/YmsbE0xAjdMTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9X/koJmbH2i98DW0MmDPsxMl73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOTM1YWVjYjAtNDYyNC0z MGVmLWExNjAtMzE0NTFlYTA4NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMNpVTaxsHMKq4gsw+gpQcGecfkj5iiI5rClwrEc1LlXNkSvd3lAMe4 a3u3fjQNoL3SRZGkCsP5ztZS5C6Jyc0v39KZixMwpyKbfuVEvlHUNWn7P3BObav7 3xC81AxE3m72SQ2yuhX6ZufL7VzlXBKsdx6iDt2XfRlKBHpOWFppXbA6knGUxNjN jBFiGztWdX95FYfkQ5GJWg8UqqTLwh72M+UWG2wMf8ehcZOzB0QQXtKtFjdiMX5M 3Voo+zGCQXPM5ovbqVSrJ4DWMv+iS2rIMlhmdaUpXBbAyWF+0dgWYO97xADrQyoH GbFUktD1SK0VKZt3UihHK6hhhEXoWi4= -----END CERTIFICATE-----Generated at Sat May 3 02:34:53 2025 by rpki-client