$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa File: d01de867-d842-3f15-838a-d66341794f48.roa (raw, json) Hash identifier: 7M034cdsWD6N8tMq3PitCvA7pAODDDnTsNyQlwBRxt4= Subject key identifier: 42:64:C5:AF:40:57:48:53:85:8D:9E:7B:85:38:D3:EE:AA:51:30:A8 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F43285849913912B2A12500DEA2227920 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa Signing time: Fri 18 Apr 2025 13:21:02 +0000 ROA not before: Fri 18 Apr 2025 13:21:02 +0000 ROA not after: Thu 17 Jul 2025 13:21:02 +0000 asID: 16509 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:39:12:b2:a1:25:00:de:a2:22:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Apr 18 13:21:02 2025 GMT Not After : Jul 17 13:21:02 2025 GMT Subject: CN=61d3f979-4f83-42f7-9d0e-fe30e16ece67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:81:bf:f5:15:69:c3:fc:ee:e2:ed:b8:39: 8d:44:4d:84:9d:26:01:62:4a:ee:de:d9:8a:d7:f3: 77:1a:86:cc:e6:a5:52:3f:ec:00:67:39:27:b9:33: 1c:5a:db:29:e8:fc:b9:e1:fa:7a:de:b5:bd:a8:6d: 31:29:80:ae:f5:f3:dd:97:01:7a:90:55:4a:8a:1b: 96:ea:b5:22:f8:ce:b3:9e:5e:10:f0:22:f7:13:b2: d1:1c:15:96:fe:13:4b:b1:8f:c8:67:dd:ef:e8:83: ac:d9:4b:99:1e:ba:2e:07:4e:40:0e:2f:94:f9:30: e8:02:a7:2e:13:56:46:ee:cc:a2:7b:3b:f2:7d:3f: 00:f1:e5:db:79:a5:ad:1e:24:7f:5e:e2:a2:10:3d: 2e:9c:3b:33:f0:98:61:ea:ca:4e:01:47:8d:74:4d: 3a:a0:fa:fb:ff:d8:a2:a6:fb:6e:8b:a7:af:65:93: 29:5a:b6:7b:5b:9b:a5:6d:ec:37:0e:46:41:93:12: 7d:76:7e:73:2b:2a:25:33:bf:5f:6d:f1:61:cb:9f: 6b:84:b4:40:1a:2e:09:49:e4:7a:88:c2:6b:ba:48: ae:81:24:9f:f2:26:68:bd:76:36:db:37:41:7d:f6: d6:cb:5b:f1:8d:a3:8a:00:df:b6:dd:95:eb:57:e6: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:64:C5:AF:40:57:48:53:85:8D:9E:7B:85:38:D3:EE:AA:51:30:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:68:3f:23:f1:47:35:f7:1b:a6:d7:23:7f:fa:20:9c:b8:f4: 2b:0e:c0:2a:55:96:f9:d8:a5:b7:d8:72:74:e5:c1:5f:4b:92: 88:42:e3:01:43:19:3b:f9:cb:4a:da:73:6e:be:2d:41:4d:92: 35:75:62:3d:a3:6c:4f:59:64:29:3e:b6:4e:15:82:57:33:7a: 3e:e9:62:b2:ea:dc:e6:13:5e:0a:f8:09:6c:55:a3:d4:5b:25: a5:f6:3e:18:6e:03:6c:c8:36:bb:61:39:86:a8:8a:fd:81:c2: 8f:5f:f3:28:89:db:ab:b1:0a:ee:a0:77:95:86:f7:02:03:23: 6e:03:9c:b4:ea:8e:5c:92:3d:12:9a:06:dd:ce:18:8b:f9:a5: ea:0c:45:e9:d2:75:05:7c:27:18:d7:cd:3f:52:90:55:ae:c8: 3c:d8:0e:8a:6a:61:17:3b:b0:88:3e:06:54:d2:e4:ca:0b:ee: dc:6a:16:6b:10:6d:bb:ac:6b:e7:95:fd:0f:94:79:d4:a2:b0: 59:54:c8:79:cb:81:e0:3e:31:a2:4d:0c:6c:bc:8c:0f:c0:ee: b5:21:76:25:90:4a:ba:5e:7b:8f:7d:48:5c:fe:b9:14:9b:16: 3d:aa:0e:20:f6:09:35:db:60:11:31:86:df:2c:12:39:a5:50: 7c:c3:48:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRORKyoSUA3qIieSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDQxODEzMjEwMloXDTI1MDcxNzEzMjEwMlowLzEtMCsGA1UEAxMk NjFkM2Y5NzktNGY4My00MmY3LTlkMGUtZmUzMGUxNmVjZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigeBv/UVacP87uLtuDmNRE2EnSYBYkru3tmK 1/N3GobM5qVSP+wAZzknuTMcWtsp6Py54fp63rW9qG0xKYCu9fPdlwF6kFVKihuW 6rUi+M6znl4Q8CL3E7LRHBWW/hNLsY/IZ93v6IOs2UuZHrouB05ADi+U+TDoAqcu E1ZG7syiezvyfT8A8eXbeaWtHiR/XuKiED0unDsz8Jhh6spOAUeNdE06oPr7/9ii pvtui6evZZMpWrZ7W5ulbew3DkZBkxJ9dn5zKyolM79fbfFhy59rhLRAGi4JSeR6 iMJrukiugSSf8iZovXY22zdBffbWy1vxjaOKAN+23ZXrV+YdBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJkxa9AV0hThY2ee4U40+6qUTCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDAxZGU4NjctZDg0Mi0z ZjE1LTgzOGEtZDY2MzQxNzk0ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABoPyPxRzX3G6bXI3/6IJy49CsOwCpVlvnYpbfYcnTlwV9LkohC4wFD GTv5y0rac26+LUFNkjV1Yj2jbE9ZZCk+tk4Vglczej7pYrLq3OYTXgr4CWxVo9Rb JaX2PhhuA2zINrthOYaoiv2Bwo9f8yiJ26uxCu6gd5WG9wIDI24DnLTqjlySPRKa Bt3OGIv5peoMRenSdQV8JxjXzT9SkFWuyDzYDopqYRc7sIg+BlTS5MoL7txqFmsQ bbusa+eV/Q+UedSisFlUyHnLgeA+MaJNDGy8jA/A7rUhdiWQSrpee499SFz+uRSb Fj2qDiD2CTXbYBExht8sEjmlUHzDSLA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:19 2025 by rpki-client