$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa File: 28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa (raw, json) Hash identifier: 0dCWjWXa/2mHjv8K0/nzTKTwR+eLwd1if7ViOXUsGzY= Subject key identifier: F4:90:9B:4E:6A:82:0B:9A:95:F8:A8:36:67:03:00:B1:4D:2A:7A:40 Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584905B6B52C514F9B6DBDF7C480 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 26946 IP address blocks: 205.221.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b5:2c:51:4f:9b:6d:bd:f7:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=6d904e6d-7990-405f-9d11-dd6d1050236e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:24:9f:7d:5f:da:6b:9f:ed:4d:b0:4d:50:08: e5:9e:a8:4d:01:64:a1:98:04:1b:82:e0:04:25:77: 1d:d5:1f:44:55:a1:11:66:c9:03:ae:4c:23:e9:1e: 02:06:16:45:0e:c2:0b:a2:72:a0:60:27:be:fb:85: df:29:69:3f:d6:d9:07:ac:dd:3e:c3:7d:ac:f6:84: ff:55:9f:bb:60:af:28:9d:b9:b6:9b:06:ef:94:d9: 8a:32:5b:f7:51:be:59:d7:79:e2:65:6d:7c:0d:c9: 3e:65:7f:39:c6:ef:37:19:8b:16:5c:4e:07:f7:fd: fd:b6:c3:73:a7:9c:81:c5:e0:cb:7a:63:2d:cc:5e: 33:86:6c:a0:0d:0b:3f:1b:85:c6:6a:25:5d:1f:58: c6:c3:14:f4:e4:5f:44:69:dd:7c:82:88:a2:48:28: a4:5b:66:70:de:50:67:88:a5:71:f1:41:a0:5c:10: cd:d2:61:ba:15:99:49:d7:f0:4f:91:44:9a:d2:a3: 04:13:a1:92:47:9d:ce:ed:b8:b4:52:e5:b0:8f:52: 6d:e1:a6:52:b7:22:d6:d7:68:53:f8:66:c1:c0:06: b0:82:e6:3a:ec:ac:04:37:78:eb:02:16:3a:bb:8c: 07:f9:38:b5:e3:5f:df:03:3d:2d:33:59:5e:51:0d: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:9B:4E:6A:82:0B:9A:95:F8:A8:36:67:03:00:B1:4D:2A:7A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 205.221.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f4:83:3a:85:0c:52:7f:01:9e:7d:ab:35:06:1f:24:1f:d7: 83:b3:5c:86:64:78:13:d4:d6:09:37:16:bd:c9:d2:cc:15:4d: 93:5f:8e:8c:98:78:ee:d6:d5:36:75:65:96:a4:9e:91:56:3b: 7b:d0:d8:54:d2:72:4d:d0:84:44:e4:af:3b:8d:b1:eb:ac:92: 9d:3c:f6:ad:96:28:20:64:ff:ea:8f:c9:1e:1c:63:c1:a9:5a: e0:d6:81:78:b9:6d:59:f3:9e:17:e2:e0:68:cd:10:b3:aa:b0: 85:1a:4c:ab:7f:60:de:b4:3b:98:bd:77:a8:99:cb:a3:e1:3e: 70:67:ee:49:da:c5:9a:1c:2c:6f:a4:ec:3a:f3:8d:30:75:17: ca:cd:81:b4:d9:8e:4d:bc:6b:d1:b1:a0:3d:a0:2e:f3:f2:14: c0:f8:c8:2d:0e:b8:4d:a8:66:0f:cf:af:74:c1:34:c3:fc:2a: 95:be:d6:70:9d:c7:96:d6:9f:55:2c:39:29:d9:70:c1:2d:11: c7:6d:4c:86:c1:5e:41:83:8d:3a:78:12:2c:b6:cd:9a:f8:40: 2d:a9:f5:7e:9b:b3:32:c3:b0:15:4f:ca:7f:43:f6:dc:40:18: 7c:ad:08:9c:c7:94:c9:ec:8f:28:fc:35:0a:f0:19:6b:35:04: c6:73:18:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrUsUU+bbb33xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NmQ5MDRlNmQtNzk5MC00MDVmLTlkMTEtZGQ2ZDEwNTAyMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiSffV/aa5/tTbBNUAjlnqhNAWShmAQbguAE JXcd1R9EVaERZskDrkwj6R4CBhZFDsILonKgYCe++4XfKWk/1tkHrN0+w32s9oT/ VZ+7YK8onbm2mwbvlNmKMlv3Ub5Z13niZW18Dck+ZX85xu83GYsWXE4H9/39tsNz p5yBxeDLemMtzF4zhmygDQs/G4XGaiVdH1jGwxT05F9Ead18goiiSCikW2Zw3lBn iKVx8UGgXBDN0mG6FZlJ1/BPkUSa0qMEE6GSR53O7bi0UuWwj1Jt4aZStyLW12hT +GbBwAawguY67KwEN3jrAhY6u4wH+Ti141/fAz0tM1leUQ1KGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSQm05qggualfioNmcDALFNKnpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvMjhkZjVmNjQtMjIxYS0z NmY2LWJkMGItZmY5MmNhNDg2NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzd0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD0gzqFDFJ/AZ59qzUGHyQf14OzXIZkeBPU1gk3Fr3J0swVTZNfjoyY eO7W1TZ1ZZaknpFWO3vQ2FTSck3QhETkrzuNseuskp089q2WKCBk/+qPyR4cY8Gp WuDWgXi5bVnznhfi4GjNELOqsIUaTKt/YN60O5i9d6iZy6PhPnBn7knaxZocLG+k 7DrzjTB1F8rNgbTZjk28a9GxoD2gLvPyFMD4yC0OuE2oZg/Pr3TBNMP8KpW+1nCd x5bWn1UsOSnZcMEtEcdtTIbBXkGDjTp4Eiy2zZr4QC2p9X6bszLDsBVPyn9D9txA GHytCJzHlMnsjyj8NQrwGWs1BMZzGFU= -----END CERTIFICATE-----Generated at Tue Apr 29 02:23:27 2025 by rpki-client