$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json) Hash identifier: FJ4c+b/AhyBYg9P0ieEl3gUJ496+3dzw1yTU4Wq1yBc= Subject key identifier: 76:D0:B0:81:78:89:61:66:8B:6A:2E:F3:F0:26:9E:D2:62:45:5C:1C Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F432858499F24947393ABE47C56057120 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 400211 IP address blocks: 142.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:94:73:93:ab:e4:7c:56:05:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8601eb7b-7404-49b4-979d-2669cf67c537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:6e:03:24:00:ab:69:82:20:25:18:09:7f: 95:a5:60:73:c9:da:f9:ad:73:dd:52:fe:08:a1:97: 3d:a5:a8:43:97:e7:de:8d:29:c7:45:5b:04:b0:29: b5:40:10:8a:01:99:fb:23:f1:66:5f:92:1c:b1:13: 43:17:8b:3f:49:1a:ca:60:bd:1c:61:3a:1c:65:1e: a9:3e:5e:ee:63:31:06:dd:87:22:99:1b:7a:73:6e: 18:3e:a8:df:25:73:0f:f0:9e:35:38:69:97:93:d4: 55:26:94:9f:49:4a:6e:dd:65:f6:44:f4:70:f1:42: ae:e5:68:51:be:14:be:ee:57:29:93:21:b1:ab:63: 70:a4:25:a8:55:80:eb:be:13:20:bc:d2:d3:67:6d: 32:ed:7c:a1:29:84:3a:a7:8a:2d:c2:87:79:a1:f5: 25:9b:ce:a5:48:ca:75:a2:7a:a0:33:ee:bc:94:d5: 44:1f:22:06:80:f2:7b:30:39:bb:72:c0:63:3f:8d: 68:78:36:65:1f:76:2a:36:ca:f1:b7:03:38:38:0a: e1:b5:b6:c9:b4:97:01:95:16:d6:a9:58:71:11:16: 02:61:cb:0b:71:b8:4d:a8:e0:ce:1e:7a:25:c5:e6: f5:5f:90:20:c1:b7:d4:08:bc:6d:82:09:ab:f1:54: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D0:B0:81:78:89:61:66:8B:6A:2E:F3:F0:26:9E:D2:62:45:5C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cd:62:76:37:61:9d:ca:a8:5c:09:1f:ed:26:ae:a3:8b:82: 59:a8:68:3a:fd:cd:27:92:04:d9:dd:b3:d4:16:c5:5e:7b:11: 1a:e3:9d:c7:94:49:81:df:34:17:1e:51:b2:ab:bf:88:89:15: c5:8e:c3:9b:0e:d1:fc:2a:3f:b0:d5:2d:d7:43:d2:42:b7:bd: de:99:35:34:de:66:b9:e3:7d:66:f6:f7:38:95:c4:c5:6b:84: a6:52:1b:c4:07:c0:cc:e3:9a:03:df:5c:5b:ab:a8:dc:0f:59: 34:17:63:8f:8a:b2:5d:da:0e:02:6a:c3:4a:6a:28:ef:f9:e4: 60:92:94:8c:60:10:90:c7:26:cb:a4:55:63:59:f8:e9:50:e6: a1:ab:67:86:f5:c3:49:40:38:fb:7f:8d:2d:41:1d:d4:c3:20: d2:21:ee:17:20:0d:62:d8:92:49:17:11:ab:e9:eb:7b:e0:7b: c8:63:1e:2f:ab:08:11:8a:51:e8:55:0b:7e:9f:99:98:72:eb: fa:b1:9f:ea:91:25:34:c6:cd:bd:d1:6e:90:cb:43:88:4e:f9: 9a:44:a7:23:e8:b3:a6:20:c3:10:3f:86:d2:13:7f:2c:b4:72: 23:45:1b:70:f4:89:30:eb:87:0a:ab:53:37:a9:2c:69:2c:36: 2f:dd:e1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJRzk6vkfFYFcSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODYwMWViN2ItNzQwNC00OWI0LTk3OWQtMjY2OWNmNjdjNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgduAyQAq2mCICUYCX+VpWBzydr5rXPdUv4I oZc9pahDl+fejSnHRVsEsCm1QBCKAZn7I/FmX5IcsRNDF4s/SRrKYL0cYTocZR6p Pl7uYzEG3YcimRt6c24YPqjfJXMP8J41OGmXk9RVJpSfSUpu3WX2RPRw8UKu5WhR vhS+7lcpkyGxq2NwpCWoVYDrvhMgvNLTZ20y7XyhKYQ6p4otwod5ofUlm86lSMp1 onqgM+68lNVEHyIGgPJ7MDm7csBjP41oeDZlH3YqNsrxtwM4OArhtbbJtJcBlRbW qVhxERYCYcsLcbhNqODOHnolxeb1X5AgwbfUCLxtggmr8VSCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbQsIF4iWFmi2ou8/AmntJiRVwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvOGM3ZTI3ZDMtYTM4NS0z ZDI2LTlkYmYtMGE4M2RjNjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjNYnY3YZ3KqFwJH+0mrqOLglmoaDr9zSeSBNnds9QWxV57ERrjnceU SYHfNBceUbKrv4iJFcWOw5sO0fwqP7DVLddD0kK3vd6ZNTTeZrnjfWb29ziVxMVr hKZSG8QHwMzjmgPfXFurqNwPWTQXY4+Ksl3aDgJqw0pqKO/55GCSlIxgEJDHJsuk VWNZ+OlQ5qGrZ4b1w0lAOPt/jS1BHdTDINIh7hcgDWLYkkkXEavp63vge8hjHi+r CBGKUehVC36fmZhy6/qxn+qRJTTGzb3RbpDLQ4hO+ZpEpyPos6YgwxA/htITfyy0 ciNFG3D0iTDrhwqrUzepLGksNi/d4QI= -----END CERTIFICATE-----Generated at Tue Apr 29 02:13:57 2025 by rpki-client