$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa File: d7175206-08f3-3c69-a0cf-cef08664a79f.roa (raw, json) Hash identifier: TQD1kEWSGhcKbuCwCvoCFijXnWe6j1VIP6nh/wxb8Dw= Subject key identifier: 4E:DF:68:17:33:23:3F:7A:B3:49:8E:0D:A2:1B:A9:81:50:9F:42:93 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849088169B19EF145A9A120CB80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 20454 IP address blocks: 209.188.28.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:69:b1:9e:f1:45:a9:a1:20:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=15911e47-d8d6-4ce6-be14-ec19bb4b349b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:96:83:48:9a:84:82:9e:cc:50:88:7b:81: 30:6d:22:0a:9c:19:cd:7e:71:4c:54:93:6e:f8:e4: a4:37:4e:6c:30:36:a7:67:e8:de:b0:0e:90:06:77: 4c:4e:5a:40:a1:39:ad:1b:a2:50:d7:f6:20:5d:40: 98:80:99:4b:6a:11:91:17:2b:f5:d1:6e:b8:c4:45: 47:d2:f1:22:dd:6a:2e:8f:2f:a8:9a:15:03:26:af: 74:4f:6f:0f:ac:43:67:cc:23:4f:dc:fb:09:85:14: 0c:dc:00:7a:0f:12:57:17:cf:2e:d8:a8:aa:30:9f: ba:a8:fe:a1:cf:24:07:b6:41:3f:03:c8:5e:80:dc: ab:28:e4:15:29:c7:5a:63:fc:d2:52:63:fa:28:c0: 5e:28:8c:76:f5:16:bb:62:ac:b9:63:0a:c0:76:c4: 56:83:c8:c0:df:e8:b8:12:ad:f6:0c:25:58:f6:ce: 5b:cc:17:3b:dd:10:25:ab:5e:c5:09:cc:f2:b5:47: b1:e1:18:3d:18:57:66:61:cd:e6:30:1a:e2:72:85: 19:34:8e:5c:df:69:74:74:14:e0:37:39:91:75:8f: ac:1a:0c:53:49:e6:00:0e:11:0b:09:17:14:6f:d6: 2f:84:7e:d3:74:ba:0c:7e:83:3f:f0:96:5b:f6:45: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DF:68:17:33:23:3F:7A:B3:49:8E:0D:A2:1B:A9:81:50:9F:42:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cb:53:7d:b7:56:fe:a7:77:00:eb:94:63:b6:47:23:9d:59: 60:2c:1c:29:37:da:c0:90:28:59:c1:9e:76:28:c7:7a:fb:4c: 31:4a:b8:83:d6:35:9f:02:fb:fe:90:e3:3b:e6:2c:96:54:07: 80:7c:3a:e9:d6:dc:be:28:68:0a:d6:2b:65:d1:72:87:a7:37: 32:44:40:ed:b6:8e:66:f4:c9:e6:73:1f:5c:77:db:e5:b4:57: 26:77:3c:af:6d:1f:f1:d5:1f:54:fa:1c:1a:8d:60:ea:ae:dd: 11:eb:fc:cc:71:f2:bb:04:c3:8c:68:bf:45:03:1e:f5:03:07: 20:d1:ff:06:d3:6c:45:82:86:fe:22:95:e5:34:4a:6e:d4:e4: 51:2e:68:ac:6f:86:e6:1c:ad:a7:5d:27:fc:da:ba:e9:14:67: 25:02:ec:ef:53:e2:93:58:57:ef:14:69:13:c9:fa:9c:b4:4d: 85:7b:22:d4:a7:b8:e3:0a:73:7a:d4:77:84:fa:ab:35:fd:30: d7:aa:7e:14:97:c6:53:e3:1a:ee:4b:80:7c:d9:43:63:c9:77: 05:50:e8:ec:99:4b:76:f4:f2:ad:34:0f:48:e6:e4:f0:1d:90: f0:f6:be:b5:0a:04:63:6e:b0:9f:8b:e7:6b:5c:6a:0d:dd:cf: 50:75:18:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWmxnvFFqaEgy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MTU5MTFlNDctZDhkNi00Y2U2LWJlMTQtZWMxOWJiNGIzNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYWWg0iahIKezFCIe4EwbSIKnBnNfnFMVJNu +OSkN05sMDanZ+jesA6QBndMTlpAoTmtG6JQ1/YgXUCYgJlLahGRFyv10W64xEVH 0vEi3Woujy+omhUDJq90T28PrENnzCNP3PsJhRQM3AB6DxJXF88u2KiqMJ+6qP6h zyQHtkE/A8hegNyrKOQVKcdaY/zSUmP6KMBeKIx29Ra7Yqy5YwrAdsRWg8jA3+i4 Eq32DCVY9s5bzBc73RAlq17FCczytUex4Rg9GFdmYc3mMBricoUZNI5c32l0dBTg NzmRdY+sGgxTSeYADhELCRcUb9YvhH7TdLoMfoM/8JZb9kWWCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7faBczIz96s0mODaIbqYFQn0KTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDcxNzUyMDYtMDhmMy0z YzY5LWEwY2YtY2VmMDg2NjRhNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3LU323Vv6ndwDrlGO2RyOdWWAsHCk32sCQKFnBnnYox3r7TDFKuIPW NZ8C+/6Q4zvmLJZUB4B8OunW3L4oaArWK2XRcoenNzJEQO22jmb0yeZzH1x32+W0 VyZ3PK9tH/HVH1T6HBqNYOqu3RHr/Mxx8rsEw4xov0UDHvUDByDR/wbTbEWChv4i leU0Sm7U5FEuaKxvhuYcraddJ/zauukUZyUC7O9T4pNYV+8UaRPJ+py0TYV7ItSn uOMKc3rUd4T6qzX9MNeqfhSXxlPjGu5LgHzZQ2PJdwVQ6OyZS3b08q00D0jm5PAd kPD2vrUKBGNusJ+L52tcag3dz1B1GAw= -----END CERTIFICATE-----Generated at Mon Apr 28 07:52:19 2025 by rpki-client