$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa File: aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa (raw, json) Hash identifier: JfbZOiWq7EYSbPNWp23Z3sTLtSLgZ2fjTObK9muxWdw= Subject key identifier: 73:F0:13:F6:B8:5B:D6:D1:6A:3B:9A:97:17:67:84:6B:D4:5B:78:78 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848DB438A079B4F948DB7D410E0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa Signing time: Wed 12 Feb 2025 09:05:00 +0000 ROA not before: Wed 12 Feb 2025 09:05:00 +0000 ROA not after: Tue 13 May 2025 08:05:00 +0000 asID: 64267 IP address blocks: 139.180.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:43:8a:07:9b:4f:94:8d:b7:d4:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 12 09:05:00 2025 GMT Not After : May 13 08:05:00 2025 GMT Subject: CN=8a914355-2b6e-452a-aa63-399577f6cc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ba:9c:a6:a7:dc:34:c2:73:92:bf:41:10:27: 44:9b:f8:0e:1b:b1:aa:df:ae:af:28:14:76:91:2c: 38:af:ad:8e:4f:f1:7b:e2:66:ea:3e:85:fe:59:4c: b1:57:32:86:50:fd:e4:7b:40:ab:59:65:25:ac:38: 91:56:6f:77:d9:45:09:81:22:84:a8:1b:40:0f:de: 18:ba:33:91:c8:50:4e:2c:c7:6c:2f:1c:da:4e:5a: a5:6b:27:73:1d:6c:47:ef:9f:fc:fe:ab:b9:63:81: db:e0:44:aa:ab:49:1a:cc:3a:37:fa:89:86:55:2f: 5c:35:73:dd:a8:08:03:01:67:21:4a:3f:c1:42:c7: fd:73:44:ac:b4:d9:e7:a0:74:0d:21:02:ac:a4:15: 0b:73:cd:47:7f:c9:9e:99:45:11:8e:a5:1e:30:00: 89:bb:2f:fc:3f:fd:bf:e5:a4:3b:d5:95:88:fd:b1: a0:2d:be:49:c3:47:41:7f:ee:65:73:bc:2a:2d:f8: b7:f6:27:b9:fe:66:01:87:ac:80:e6:9d:60:68:9d: b4:e6:f3:70:c9:73:6e:de:81:cb:0e:a8:43:b2:e2: 7e:5e:22:c4:93:08:75:3a:53:72:87:e9:4a:d0:42: 7f:88:0b:00:b8:22:14:68:f8:17:29:bd:63:e7:50: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F0:13:F6:B8:5B:D6:D1:6A:3B:9A:97:17:67:84:6B:D4:5B:78:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 139.180.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:92:43:b2:03:28:2f:b6:73:d3:85:5b:88:67:7b:6e:ef:d3: 73:9b:13:58:7c:34:50:50:c3:ac:49:ce:ed:b6:73:a5:b6:12: 72:f7:00:a5:b4:f5:10:77:4a:7b:58:e3:01:d7:e4:14:a8:19: e7:98:05:bb:54:f4:96:45:25:ae:50:ea:c2:02:34:ba:f2:75: 3a:ed:28:ac:79:38:2b:39:24:17:50:83:2f:a0:94:4c:88:15: fb:29:8d:e4:69:dc:dc:be:38:33:1f:14:d9:3d:bc:df:ac:9f: 16:f7:50:11:02:34:f1:02:3b:66:63:cd:93:bf:5a:63:c3:a4: 67:46:dd:60:0f:41:b0:de:dd:4b:c5:e7:16:95:3b:81:ce:54: ba:95:8e:21:c2:e8:79:dc:12:4e:48:e1:c2:12:9d:94:06:cb: c3:87:4a:49:b2:a9:f8:1a:2b:3e:23:70:33:55:c3:86:cd:7c: 5c:87:03:9d:ff:03:ec:f9:9e:68:33:13:cc:6c:4b:4b:6a:a6: 04:d5:13:59:ae:6e:9c:af:33:a1:6d:0b:aa:1e:ae:86:d1:a3: 86:94:9a:72:94:57:1f:33:22:e3:7a:2e:a3:11:f0:73:c0:b1: 86:16:17:10:15:08:4b:c2:0b:2c:38:71:fe:3b:68:7d:c5:61: 56:5b:1c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjbQ4oHm0+UjbfUEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMjA5MDUwMFoXDTI1MDUxMzA4MDUwMFowLzEtMCsGA1UEAxMk OGE5MTQzNTUtMmI2ZS00NTJhLWFhNjMtMzk5NTc3ZjZjYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbqcpqfcNMJzkr9BECdEm/gOG7Gq366vKBR2 kSw4r62OT/F74mbqPoX+WUyxVzKGUP3ke0CrWWUlrDiRVm932UUJgSKEqBtAD94Y ujORyFBOLMdsLxzaTlqlaydzHWxH75/8/qu5Y4Hb4ESqq0kazDo3+omGVS9cNXPd qAgDAWchSj/BQsf9c0SstNnnoHQNIQKspBULc81Hf8memUURjqUeMACJuy/8P/2/ 5aQ71ZWI/bGgLb5Jw0dBf+5lc7wqLfi39ie5/mYBh6yA5p1gaJ205vNwyXNu3oHL DqhDsuJ+XiLEkwh1OlNyh+lK0EJ/iAsAuCIUaPgXKb1j51BDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPwE/a4W9bRajualxdnhGvUW3h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWFiOWI5ZGEtZWI3NC0z ODQ4LTkwN2QtYjc5M2U3YTFmYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7QDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCSQ7IDKC+2c9OFW4hne27v03ObE1h8NFBQw6xJzu22c6W2EnL3AKW0 9RB3SntY4wHX5BSoGeeYBbtU9JZFJa5Q6sICNLrydTrtKKx5OCs5JBdQgy+glEyI FfspjeRp3Ny+ODMfFNk9vN+snxb3UBECNPECO2ZjzZO/WmPDpGdG3WAPQbDe3UvF 5xaVO4HOVLqVjiHC6HncEk5I4cISnZQGy8OHSkmyqfgaKz4jcDNVw4bNfFyHA53/ A+z5nmgzE8xsS0tqpgTVE1mubpyvM6FtC6oerobRo4aUmnKUVx8zIuN6LqMR8HPA sYYWFxAVCEvCCyw4cf47aH3FYVZbHHA= -----END CERTIFICATE-----Generated at Wed Apr 30 11:50:57 2025 by rpki-client