$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd0aa55b-a194-3938-b50d-fe77d2f03a14.roa File: dd0aa55b-a194-3938-b50d-fe77d2f03a14.roa (raw, json) Hash identifier: QKVUYsLgyNcoORQzLxh3IwsCOv3vsoKJ6le7bThxdGA= Subject key identifier: B4:07:4A:99:F4:01:B5:AC:E7:10:8C:0F:6C:56:9C:16:04:78:B3:78 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849674EF86A55647B5A9ACD8B80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd0aa55b-a194-3938-b50d-fe77d2f03a14.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 7018 IP address blocks: 172.96.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f8:6a:55:64:7b:5a:9a:cd:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=dc71e4ef-9d2e-46c5-b29a-0dffb21ee5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:29:44:27:de:49:33:4d:8f:90:b4:09:f0: 88:eb:c2:b1:d4:fb:6e:34:c0:10:30:8d:32:b0:4b: 50:e3:fd:0b:9c:2b:67:b2:9f:ab:b9:f6:99:c8:38: 5f:0b:03:21:e5:b6:b9:a5:af:06:a6:19:c6:39:3e: 29:9d:b2:7b:0c:00:1d:a1:d3:0b:6a:ad:94:d4:6a: f8:53:ef:1f:8c:e9:6d:de:d1:00:23:eb:bf:f2:0d: c4:51:d6:e6:5d:30:23:2c:9a:f0:9b:ab:d3:8d:9e: 9f:2f:2b:d0:d5:66:2a:85:da:0a:b1:a8:e9:da:67: a4:f6:84:3f:ad:6c:40:64:3c:ec:0b:76:a9:c9:d0: 1b:d2:61:0f:5b:59:5e:4e:f1:a1:b9:78:32:ff:e9: b5:ac:f9:83:54:1c:d2:f1:45:98:50:58:dc:88:f1: a8:98:dd:70:3d:05:b4:e5:11:85:68:c4:33:47:65: 19:6c:2d:22:10:fd:00:af:21:9f:57:f4:4c:9f:2d: a1:e2:ff:5d:e8:82:bd:9f:65:cf:d5:07:22:3c:cb: bf:f5:ad:9f:90:f2:ba:f5:af:71:bf:33:8d:9f:a4: a7:a0:d7:32:d7:87:e6:67:37:87:26:60:4b:18:00: ab:96:a1:35:6e:25:01:62:70:00:29:46:26:03:dd: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:4A:99:F4:01:B5:AC:E7:10:8C:0F:6C:56:9C:16:04:78:B3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd0aa55b-a194-3938-b50d-fe77d2f03a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:1d:93:42:84:75:66:dc:ac:04:82:2f:76:9e:e2:fd:4e:ea: 01:31:d3:1d:01:77:79:53:35:39:47:c7:6a:41:f6:4a:6d:49: b9:80:5d:df:08:45:06:1c:c0:37:9a:04:29:82:8c:61:68:c1: 53:77:ed:d1:cd:7f:03:12:81:83:f9:75:3a:18:9f:10:6e:f8: 12:ac:a5:4a:8b:8c:74:6a:06:51:ab:fb:ad:0c:9b:e1:3a:f7: b8:c6:cb:59:3b:b5:cd:98:b3:63:4e:bd:32:9f:a9:70:67:bd: 78:d0:7e:c6:fe:10:5b:c4:9c:91:85:67:3e:bf:41:33:b1:4a: 78:57:67:b3:09:b2:c1:9d:09:f7:8f:00:af:db:3e:eb:2b:6a: a8:d8:ba:bf:78:c3:76:ed:65:2b:7e:3b:13:6b:b5:74:76:61: 06:9c:23:15:f3:90:23:64:ba:83:bc:7a:00:38:ba:6a:b4:be: c9:79:1e:a6:6d:b4:3a:1c:30:3b:ce:c7:79:60:dd:46:3c:4c: b6:47:2a:33:c5:54:f9:26:50:cd:5f:42:0f:2f:62:43:3d:93: e7:5f:88:3a:e7:5d:a2:df:06:66:5a:05:04:33:2c:ec:f2:af: 65:d9:5a:04:65:9a:4f:81:68:46:d1:e0:25:bd:2d:eb:58:b7: 75:a5:c4:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvhqVWR7WprNi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZGM3MWU0ZWYtOWQyZS00NmM1LWIyOWEtMGRmZmIyMWVlNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5UpRCfeSTNNj5C0CfCI68Kx1PtuNMAQMI0y sEtQ4/0LnCtnsp+rufaZyDhfCwMh5ba5pa8GphnGOT4pnbJ7DAAdodMLaq2U1Gr4 U+8fjOlt3tEAI+u/8g3EUdbmXTAjLJrwm6vTjZ6fLyvQ1WYqhdoKsajp2mek9oQ/ rWxAZDzsC3apydAb0mEPW1leTvGhuXgy/+m1rPmDVBzS8UWYUFjciPGomN1wPQW0 5RGFaMQzR2UZbC0iEP0AryGfV/RMny2h4v9d6IK9n2XP1QciPMu/9a2fkPK69a9x vzONn6SnoNcy14fmZzeHJmBLGACrlqE1biUBYnAAKUYmA927dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQHSpn0AbWs5xCMD2xWnBYEeLN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGQwYWE1NWItYTE5NC0z OTM4LWI1MGQtZmU3N2QyZjAzYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMdk0KEdWbcrASCL3ae4v1O6gEx0x0Bd3lTNTlHx2pB9kptSbmAXd8I RQYcwDeaBCmCjGFowVN37dHNfwMSgYP5dToYnxBu+BKspUqLjHRqBlGr+60Mm+E6 97jGy1k7tc2Ys2NOvTKfqXBnvXjQfsb+EFvEnJGFZz6/QTOxSnhXZ7MJssGdCfeP AK/bPusraqjYur94w3btZSt+OxNrtXR2YQacIxXzkCNkuoO8egA4umq0vsl5HqZt tDocMDvOx3lg3UY8TLZHKjPFVPkmUM1fQg8vYkM9k+dfiDrnXaLfBmZaBQQzLOzy r2XZWgRlmk+BaEbR4CW9LetYt3WlxEw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:37 2025 by rpki-client