$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bbd09970-c53a-3b34-8e53-81fb49ec5091.roa File: bbd09970-c53a-3b34-8e53-81fb49ec5091.roa (raw, json) Hash identifier: WCLLIEI4FoWDeBdKCjP6qf0DAsUzYddTKEeiF8w2WMk= Subject key identifier: 22:3F:95:6D:A1:AD:B9:05:51:60:6B:27:B8:C7:2B:6F:80:88:F2:07 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849A1EF41DB6A217CA5A8313F50 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bbd09970-c53a-3b34-8e53-81fb49ec5091.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 7018 IP address blocks: 173.214.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:41:db:6a:21:7c:a5:a8:31:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=401e4ece-7c76-4663-8556-63997b7c42d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:fc:12:a2:10:f2:36:5f:c6:60:c1:45:d4: c5:8f:68:9d:ee:ae:d3:de:3b:9a:a4:b7:c0:60:a9: cc:ad:ff:0a:7b:db:a2:bb:88:f7:a6:a3:2c:35:69: 68:02:10:58:57:bf:94:2b:a0:ae:6e:eb:10:ba:57: 9e:f9:c5:fc:6e:a6:a9:fa:f8:f0:bc:76:ae:9f:60: f2:30:f3:3c:d7:41:c6:f4:d5:a9:6e:ae:25:09:ee: 64:e5:6d:ef:98:28:6b:3f:00:21:ce:39:ee:fd:ae: 79:75:25:8d:76:c6:88:8b:5e:c8:bf:63:06:8e:79: 71:f9:41:b8:7d:86:a6:de:e9:4c:d8:9e:f9:1a:a8: 76:08:26:0b:bb:b8:65:10:7e:a1:fc:02:2f:08:9c: 88:e7:de:1d:be:23:41:25:c6:8d:b1:ad:3c:6a:43: 52:69:77:11:d2:d7:80:c7:32:35:f6:89:23:f9:e5: 58:81:0f:f0:99:d3:c9:00:9e:8a:90:51:f3:ba:b7: ab:ec:9a:f4:2d:db:de:8b:90:c7:d7:1a:61:c0:14: c6:0a:13:d9:d5:fc:e1:52:96:46:c3:2e:8f:7d:52: 25:97:fc:25:3b:54:54:97:96:19:69:e0:32:9d:8e: 9e:8b:69:a6:e2:b8:d5:4d:36:0e:e5:e4:ab:0c:9c: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3F:95:6D:A1:AD:B9:05:51:60:6B:27:B8:C7:2B:6F:80:88:F2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bbd09970-c53a-3b34-8e53-81fb49ec5091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 173.214.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4c:90:ac:9e:83:fc:c0:b2:6e:17:20:2a:7a:52:16:37:d6: 45:21:f9:88:aa:47:2e:b7:45:fd:a2:5c:86:af:9b:fb:3f:c9: a2:ed:9f:f8:3c:dd:57:8d:93:3b:f9:18:b5:c3:27:a0:00:39: 14:6d:24:3e:94:0d:32:b7:22:77:1f:fe:27:17:64:0a:ab:b9: 3c:f8:1c:8d:79:19:0e:a2:08:7b:15:ea:21:49:68:99:67:24: ff:13:b2:b5:d8:31:ab:78:e8:3c:54:e8:c0:14:06:49:c2:0a: 85:dd:25:b2:a3:83:de:8c:02:55:e4:41:41:e4:60:67:f8:35: 09:f0:b5:e6:d8:55:2b:90:9a:5b:bc:3d:4e:fb:bd:6f:07:29: ab:90:bf:da:bf:81:71:53:59:ba:4b:4f:c0:d7:e8:4f:f5:db: c3:cf:ae:55:52:f3:bd:22:ee:04:aa:96:7b:0d:d9:fc:e8:43: e9:ad:47:30:60:11:15:13:6e:4d:a3:25:00:db:72:67:54:47: 18:d6:09:90:8f:b1:f9:68:db:da:b6:82:17:35:1d:7c:d8:eb: 40:d6:b8:7a:21:c9:e8:0a:a2:4e:d3:a1:c1:cd:2e:36:36:5b: 9f:0f:62:6f:6b:5b:48:aa:4c:7a:da:b3:f3:7a:f6:f2:dd:85: 6c:e5:db:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70HbaiF8pagxP1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDAxZTRlY2UtN2M3Ni00NjYzLTg1NTYtNjM5OTdiN2M0MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTP8EqIQ8jZfxmDBRdTFj2id7q7T3juapLfA YKnMrf8Ke9uiu4j3pqMsNWloAhBYV7+UK6CubusQulee+cX8bqap+vjwvHaun2Dy MPM810HG9NWpbq4lCe5k5W3vmChrPwAhzjnu/a55dSWNdsaIi17Iv2MGjnlx+UG4 fYam3ulM2J75Gqh2CCYLu7hlEH6h/AIvCJyI594dviNBJcaNsa08akNSaXcR0teA xzI19okj+eVYgQ/wmdPJAJ6KkFHzurer7Jr0Ldvei5DH1xphwBTGChPZ1fzhUpZG wy6PfVIll/wlO1RUl5YZaeAynY6ei2mm4rjVTTYO5eSrDJyPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI/lW2hrbkFUWBrJ7jHK2+AiPIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmJkMDk5NzAtYzUzYS0z YjM0LThlNTMtODFmYjQ5ZWM1MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNMkKyeg/zAsm4XICp6UhY31kUh+YiqRy63Rf2iXIavm/s/yaLtn/g8 3VeNkzv5GLXDJ6AAORRtJD6UDTK3Incf/icXZAqruTz4HI15GQ6iCHsV6iFJaJln JP8TsrXYMat46DxU6MAUBknCCoXdJbKjg96MAlXkQUHkYGf4NQnwtebYVSuQmlu8 PU77vW8HKauQv9q/gXFTWbpLT8DX6E/128PPrlVS870i7gSqlnsN2fzoQ+mtRzBg ERUTbk2jJQDbcmdURxjWCZCPsflo29q2ghc1HXzY60DWuHohyegKok7TocHNLjY2 W58PYm9rW0iqTHras/N69vLdhWzl200= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:21 2025 by rpki-client