$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa File: 9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa (raw, json) Hash identifier: U88ACXxghwqY9l2zbSSf1E0gWzZRGtPumXI9ayzrhMY= Subject key identifier: C5:AF:CB:4C:8E:96:80:FC:42:B4:C3:9A:07:ED:EF:E4:C9:B2:E7:C1 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849B6DF58AE991DCFFFEC901400 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 397630 IP address blocks: 158.62.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:58:ae:99:1d:cf:ff:ec:90:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=fde22f71-3fe2-422b-9639-9cc0390ec9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:a0:55:59:54:b0:96:46:2b:b6:f6:ce:ef: 26:51:5a:09:a5:6d:2d:81:15:74:4a:0d:15:f2:8a: 5c:7a:cb:40:b2:96:6e:22:09:a3:26:33:86:fc:0f: de:ff:a9:6f:a0:b1:7c:0a:70:82:fa:ab:7e:1b:fa: 98:fc:06:a1:90:71:c6:e5:0e:8b:18:9f:0f:79:87: ae:9c:17:42:7d:99:90:52:40:fe:d6:ae:b0:7e:39: 27:a9:0b:62:2c:f3:0c:e8:9a:15:bf:f1:63:b0:aa: bf:36:02:64:62:39:8f:85:db:01:ca:04:59:e0:17: f4:41:2e:5c:e2:5d:99:1a:c5:d3:d0:8a:a7:ec:bf: ec:f4:91:31:61:6e:52:6e:fd:bd:5b:3d:b4:04:f0: c1:8d:6d:41:cd:0e:4a:ec:e9:3d:5d:d8:69:c4:a6: 6a:3d:0c:17:05:4d:6f:52:a2:a7:17:16:58:17:9e: 32:1b:b8:12:f2:35:87:6f:11:bc:c6:97:7e:c8:db: 8c:3c:35:9a:b8:8c:b1:d5:4a:fa:3d:a8:83:07:68: a8:38:1f:7f:4f:1f:97:af:da:79:5d:83:24:9d:8d: d5:ee:9a:0f:40:28:27:6b:88:c5:4e:6c:52:7f:06: 0d:f1:c2:3a:ff:94:fd:24:94:38:bf:d3:6f:c8:4c: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:CB:4C:8E:96:80:FC:42:B4:C3:9A:07:ED:EF:E4:C9:B2:E7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ab:53:50:91:8b:4c:80:c6:dd:8b:0d:b5:c7:2d:a7:48:aa: ae:e1:d2:1b:33:dd:df:08:6d:fb:6f:95:56:9e:bd:d9:ea:63: b0:0a:ae:65:a1:6f:0f:ca:af:0f:c4:40:a7:77:e3:47:dc:d3: 55:b2:6c:00:8d:d8:26:fd:84:18:dd:76:5f:92:a2:f9:19:d4: 81:1e:1d:a9:2b:23:ae:2b:b7:2d:0d:18:5c:a2:b5:20:ff:90: 71:d3:9c:64:9e:93:56:d7:1e:b9:ad:d1:88:12:a7:71:de:e0: 7a:c7:a7:ed:28:3a:2d:11:2f:87:26:29:84:3e:98:3b:51:c0: 7a:1c:d1:f9:c8:c5:31:92:0d:48:de:81:da:95:31:4b:06:06: 4c:4c:d4:37:7e:18:7f:10:5f:5e:1e:ac:64:77:4a:f7:39:4b: 0e:61:0d:dc:b7:48:73:87:a0:75:7d:24:19:50:fd:e0:bd:15: 41:53:91:ef:79:5a:73:b9:74:a5:59:48:63:f2:8e:b2:25:cb: 16:9b:f4:a3:16:a6:2c:10:30:6d:1f:e9:6a:7f:25:6d:53:e2: 4f:9b:a4:fc:f4:ac:a3:ba:e0:ee:95:28:6a:f9:ce:78:21:37: c1:2e:22:57:93:a3:89:19:74:99:9e:27:67:23:04:ac:68:e4: ca:ec:db:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231iumR3P/+yQFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmRlMjJmNzEtM2ZlMi00MjJiLTk2MzktOWNjMDM5MGVjOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA6gVVlUsJZGK7b2zu8mUVoJpW0tgRV0Sg0V 8opcestAspZuIgmjJjOG/A/e/6lvoLF8CnCC+qt+G/qY/AahkHHG5Q6LGJ8PeYeu nBdCfZmQUkD+1q6wfjknqQtiLPMM6JoVv/FjsKq/NgJkYjmPhdsBygRZ4Bf0QS5c 4l2ZGsXT0Iqn7L/s9JExYW5Sbv29Wz20BPDBjW1BzQ5K7Ok9XdhpxKZqPQwXBU1v UqKnFxZYF54yG7gS8jWHbxG8xpd+yNuMPDWauIyx1Ur6PaiDB2ioOB9/Tx+Xr9p5 XYMknY3V7poPQCgna4jFTmxSfwYN8cI6/5T9JJQ4v9NvyEwXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWvy0yOloD8QrTDmgft7+TJsufBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWZhZTJjOGYtMmE0NS0z YWViLWFmNWMtZjhmY2M1NWVhMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAarU1CRi0yAxt2LDbXHLadIqq7h0hsz3d8IbftvlVaevdnqY7AKrmWh bw/Krw/EQKd340fc01WybACN2Cb9hBjddl+SovkZ1IEeHakrI64rty0NGFyitSD/ kHHTnGSek1bXHrmt0YgSp3He4HrHp+0oOi0RL4cmKYQ+mDtRwHoc0fnIxTGSDUje gdqVMUsGBkxM1Dd+GH8QX14erGR3Svc5Sw5hDdy3SHOHoHV9JBlQ/eC9FUFTke95 WnO5dKVZSGPyjrIlyxab9KMWpiwQMG0f6Wp/JW1T4k+bpPz0rKO64O6VKGr5zngh N8EuIleTo4kZdJmeJ2cjBKxo5Mrs2/M= -----END CERTIFICATE-----Generated at Fri May 2 12:05:23 2025 by rpki-client