$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa File: 28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa (raw, json) Hash identifier: qTUEKLgPeeuD/kQEY3sAME+zBJOWjDIYc3+rdERCf8s= Subject key identifier: D2:21:A9:1B:68:54:46:CE:3F:D0:08:CC:EA:84:15:00:B3:26:2E:AB Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F432858496FAF04B4D7B6F4F71F1D3780 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 162.254.0.0/21 maxlen: 24 216.185.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:04:b4:d7:b6:f4:f7:1f:1d:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=5e7e2043-9f5b-4edd-a81d-249135234f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:40:84:48:aa:e6:1e:64:b7:f4:ef:84:81: c5:0a:f8:21:a3:be:0e:05:9e:73:9a:98:db:cf:9a: df:8a:65:fd:cf:81:61:85:b2:d5:74:64:a3:9d:fe: d6:cc:1b:a1:01:29:92:7b:e3:a5:5a:d5:5f:90:53: 3e:d1:25:33:2b:e4:3b:64:40:c1:02:53:fe:ba:1b: 96:49:c5:18:0c:6c:02:57:ca:c1:35:a4:5e:f6:06: 87:e0:67:69:7a:be:99:cc:63:70:a4:c6:e0:0f:2f: e1:c1:56:d9:10:41:c7:aa:8f:c7:3a:90:c4:69:0f: 19:f9:1f:f2:7e:82:31:a1:ed:c1:4f:9e:69:2c:f4: fe:4e:c7:b6:b4:bb:1b:dc:5f:11:92:c6:8d:72:c6: fa:69:20:cf:9e:1d:af:5a:94:0e:a6:36:d3:80:8d: 7d:63:24:f7:93:ef:08:01:35:de:8b:f5:71:27:f9: db:29:b7:a2:d6:d9:62:49:40:21:1a:59:08:71:b7: b9:e1:5f:e9:90:44:e4:05:6a:f5:38:40:08:1b:bb: 00:45:f3:47:c6:da:dd:32:16:a2:91:95:12:45:fb: c7:18:a6:07:58:b9:ad:6e:42:ae:2e:74:f8:61:e4: e1:2e:e2:bd:aa:0f:94:1d:0a:ec:48:9e:00:0e:db: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:21:A9:1B:68:54:46:CE:3F:D0:08:CC:EA:84:15:00:B3:26:2E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/28edd7bd-f6fd-32a9-8e85-f98b3b5e41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 162.254.0.0/21 216.185.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b9:db:27:1a:a8:30:ee:10:07:81:ae:cf:83:6a:c6:dd:f0: 7b:eb:87:bb:87:8c:2a:85:c1:e4:31:94:80:0b:ed:aa:9f:4d: 5b:70:27:a5:f7:27:5a:0e:ca:d8:bd:74:67:31:0f:bf:8d:98: 2b:04:fd:f0:14:92:f0:51:8f:0a:66:3c:a9:75:78:a1:15:92: a6:21:26:d5:d3:d8:b2:43:13:24:e8:c7:03:a1:a0:b8:c2:76: 46:6d:e7:10:42:40:fa:e7:94:1f:66:8a:a6:49:d7:c9:53:2e: af:89:a2:45:f7:cf:8a:0c:91:32:d9:4d:f4:c7:0e:6f:7d:8f: ff:4a:8f:23:01:2c:dc:d8:45:88:4d:ff:64:4a:b3:24:d9:fe: 4e:8f:6e:2d:7e:f0:1a:9f:c6:10:2c:67:77:7b:fc:01:31:f4: a6:b0:2d:bb:f8:b5:af:bf:39:b2:b8:f9:26:4e:ef:52:7b:62: b5:51:7d:68:da:8c:4b:72:88:1c:79:86:d3:f9:c3:01:f2:93: c9:c2:e3:8c:dc:dd:47:b3:b3:ce:e3:fa:12:23:35:7e:4f:f5: 95:f9:49:7f:96:92:09:39:7a:3a:7c:9e:b9:ab:68:27:a7:53: 4f:56:ea:62:83:ce:30:37:3e:68:89:17:6b:2a:56:99:64:b3: 53:a1:2c:9b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElvrwS017b09x8dN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NWU3ZTIwNDMtOWY1Yi00ZWRkLWE4MWQtMjQ5MTM1MjM0ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oBAhEiq5h5kt/TvhIHFCvgho74OBZ5zmpjb z5rfimX9z4FhhbLVdGSjnf7WzBuhASmSe+OlWtVfkFM+0SUzK+Q7ZEDBAlP+uhuW ScUYDGwCV8rBNaRe9gaH4Gdper6ZzGNwpMbgDy/hwVbZEEHHqo/HOpDEaQ8Z+R/y foIxoe3BT55pLPT+Tse2tLsb3F8RksaNcsb6aSDPnh2vWpQOpjbTgI19YyT3k+8I ATXei/VxJ/nbKbei1tliSUAhGlkIcbe54V/pkETkBWr1OEAIG7sARfNHxtrdMhai kZUSRfvHGKYHWLmtbkKuLnT4YeThLuK9qg+UHQrsSJ4ADtv1EQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNIhqRtoVEbOP9AIzOqEFQCzJi6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvMjhlZGQ3YmQtZjZmZC0z MmE5LThlODUtZjk4YjNiNWU0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov4AAwQC 2LncMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFq52ycaqDDuEAeBrs+Dasbd8Hvrh7uHjCqFweQxlIAL7aqf TVtwJ6X3J1oOyti9dGcxD7+NmCsE/fAUkvBRjwpmPKl1eKEVkqYhJtXT2LJDEyTo xwOhoLjCdkZt5xBCQPrnlB9miqZJ18lTLq+JokX3z4oMkTLZTfTHDm99j/9KjyMB LNzYRYhN/2RKsyTZ/k6Pbi1+8BqfxhAsZ3d7/AEx9KawLbv4ta+/ObK4+SZO71J7 YrVRfWjajEtyiBx5htP5wwHyk8nC44zc3Uezs87j+hIjNX5P9ZX5SX+Wkgk5ejp8 nrmraCenU09W6mKDzjA3PmiJF2sqVplks1OhLJs= -----END CERTIFICATE-----Generated at Sun Apr 27 02:00:40 2025 by rpki-client