$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b4daa8aa-d636-30fb-b4e4-ded10691ffcc.roa File: b4daa8aa-d636-30fb-b4e4-ded10691ffcc.roa (raw, json) Hash identifier: MdihVC8lxfFmrnfs1xo7a96vWZLFNk6poHfLmR74fF8= Subject key identifier: B1:0E:65:EA:88:D8:96:97:73:6E:00:3E:64:1A:F9:6D:18:B8:57:28 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584981D456C9A7B7C93106E6B400 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b4daa8aa-d636-30fb-b4e4-ded10691ffcc.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 19437 IP address blocks: 200.229.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:56:c9:a7:b7:c9:31:06:e6:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=eda151ca-e3e1-44bb-8859-223ec77f3edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:7b:ea:57:d6:ec:54:e7:06:b4:fe:c6:44: 1f:e9:30:fd:28:07:f7:60:b9:a9:41:4f:3e:61:de: 8b:55:56:09:5e:dc:14:24:a0:bb:43:bb:26:51:36: e1:0a:d9:9f:14:b5:92:93:3f:9b:3b:f6:3a:25:04: 15:01:5d:ac:d7:2e:12:2c:bf:2d:78:d0:a3:f0:8a: 6f:17:af:70:9a:f8:8d:be:64:26:3a:c7:1e:7a:8f: c2:b9:79:d5:f7:3d:28:18:06:05:33:5f:2d:30:f1: 21:42:a5:a0:4e:60:52:d1:c6:9c:d7:49:8c:00:6f: ca:02:2e:95:3e:07:61:1c:89:2a:12:a6:80:c5:86: 24:d2:c5:e3:a6:78:59:d1:a3:21:92:7c:cb:6d:e2: 6b:4f:35:76:af:58:90:a1:5a:00:23:f6:86:7a:5b: ff:d3:9b:09:00:5f:e9:a6:3f:53:a5:bc:2c:82:81: bf:1d:c6:8e:23:2d:82:09:2c:c0:d8:85:da:f7:fd: 63:99:0b:cf:86:ba:c4:fd:df:92:6f:90:ff:0d:3e: b8:56:de:7e:09:08:d6:ef:0f:91:26:9c:f7:68:47: f3:4c:1e:c8:f6:93:16:dd:33:3a:70:6c:1c:07:6c: 41:03:8c:65:14:9d:76:29:e4:2a:78:ef:0a:47:11: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0E:65:EA:88:D8:96:97:73:6E:00:3E:64:1A:F9:6D:18:B8:57:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b4daa8aa-d636-30fb-b4e4-ded10691ffcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cd:e6:ab:98:1d:b0:8c:7b:fd:c6:55:76:d0:65:9f:6f:b2: 6f:49:34:c8:86:e9:05:6a:39:fe:4d:3f:de:2d:4a:86:78:2c: aa:2a:0c:ef:cc:c6:7a:4d:ae:17:10:7e:db:c7:05:c1:06:19: a2:da:94:e0:ea:0c:b8:87:fc:b3:08:7f:90:67:0b:76:a6:3d: 31:b2:32:a0:df:9e:73:b3:e1:e8:d6:15:2a:00:49:d9:ac:2d: 34:62:d5:54:28:ec:0e:5c:80:cb:d3:0d:eb:02:5a:0f:d3:d4: 6b:46:e9:ed:7c:42:97:8e:94:fe:3f:41:63:5e:7a:7d:d3:f9: 05:c2:88:bb:57:5e:76:ed:ac:6e:0d:1e:27:0b:b9:7c:db:b3: 74:52:94:b3:a7:c4:d8:d2:c2:99:51:07:a3:6f:2f:37:7e:5b: 6e:37:09:ae:ea:9c:a3:e8:d9:e0:03:8e:89:08:f0:15:7f:72: 9c:e0:42:b8:b3:73:9d:7a:72:16:ee:5b:f4:b7:24:56:24:b3: 0f:1c:90:26:91:8a:72:e0:84:e4:85:7f:27:b6:53:93:2e:57: 8d:3f:39:73:52:fd:ca:77:03:17:08:70:07:3d:c5:dd:8c:20: b3:43:73:f4:7e:8b:52:84:9f:22:ab:f2:5e:af:62:aa:c9:6e: f5:3b:81:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FbJp7fJMQbmtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk ZWRhMTUxY2EtZTNlMS00NGJiLTg4NTktMjIzZWM3N2YzZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipZ76lfW7FTnBrT+xkQf6TD9KAf3YLmpQU8+ Yd6LVVYJXtwUJKC7Q7smUTbhCtmfFLWSkz+bO/Y6JQQVAV2s1y4SLL8teNCj8Ipv F69wmviNvmQmOsceeo/CuXnV9z0oGAYFM18tMPEhQqWgTmBS0cac10mMAG/KAi6V PgdhHIkqEqaAxYYk0sXjpnhZ0aMhknzLbeJrTzV2r1iQoVoAI/aGelv/05sJAF/p pj9TpbwsgoG/HcaOIy2CCSzA2IXa9/1jmQvPhrrE/d+Sb5D/DT64Vt5+CQjW7w+R Jpz3aEfzTB7I9pMW3TM6cGwcB2xBA4xlFJ12KeQqeO8KRxHS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEOZeqI2JaXc24APmQa+W0YuFcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYjRkYWE4YWEtZDYzNi0z MGZiLWI0ZTQtZGVkMTA2OTFmZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDN5quYHbCMe/3GVXbQZZ9vsm9JNMiG6QVqOf5NP94tSoZ4LKoqDO/M xnpNrhcQftvHBcEGGaLalODqDLiH/LMIf5BnC3amPTGyMqDfnnOz4ejWFSoASdms LTRi1VQo7A5cgMvTDesCWg/T1GtG6e18QpeOlP4/QWNeen3T+QXCiLtXXnbtrG4N HicLuXzbs3RSlLOnxNjSwplRB6NvLzd+W243Ca7qnKPo2eADjokI8BV/cpzgQriz c516chbuW/S3JFYksw8ckCaRinLghOSFfye2U5MuV40/OXNS/cp3AxcIcAc9xd2M ILNDc/R+i1KEnyKr8l6vYqrJbvU7gY4= -----END CERTIFICATE-----Generated at Sun Apr 27 03:02:29 2025 by rpki-client