$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/74e26e07-097a-3ada-85dc-03126df34d3c.roa File: 74e26e07-097a-3ada-85dc-03126df34d3c.roa (raw, json) Hash identifier: 5uBbt88gX+INKK++IlHGGHNPC3mNUoyQFqqa1Zx8QwU= Subject key identifier: 16:34:61:78:8C:0E:CD:29:37:C1:A1:8D:C4:41:4E:DE:69:1C:94:D1 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F43285849A1EF76F0D563D469154E2400 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/74e26e07-097a-3ada-85dc-03126df34d3c.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 6079 IP address blocks: 23.28.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:f0:d5:63:d4:69:15:4e:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=e62da9c9-14d4-412b-944b-7482e18f6e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:d1:1b:0d:0f:c4:68:e1:6c:ff:cb:fd:38: 45:4e:69:f6:b9:7a:b2:98:73:6d:af:22:94:9c:49: 64:76:4b:ee:d5:0a:f6:18:e5:9e:11:bc:6d:e5:a5: 66:f8:c4:3c:12:9d:6c:7e:0a:26:91:58:dc:7d:b2: 97:b8:80:2a:4b:45:9b:6b:a0:32:f6:d6:9f:68:cd: 17:22:82:37:97:36:a6:4f:92:25:59:21:f6:2f:e6: 3c:0d:8a:1f:3f:d6:bb:31:76:eb:a3:83:25:d4:9c: 57:6c:f1:66:35:4e:0e:f3:cc:3d:f5:e7:5c:85:35: 06:1e:42:03:82:1f:50:40:53:00:ce:32:56:eb:a8: 14:b3:30:f8:cd:19:89:12:a5:a0:0b:ba:fa:99:61: f4:e2:31:e0:31:bc:ab:fd:29:f8:ba:c3:2c:8f:8b: 9c:6b:be:e5:c6:5c:ad:d3:0a:e3:ea:d0:21:a8:d4: 1b:73:8c:a3:4a:0a:de:12:cd:d2:ef:c2:92:6b:4c: 4c:7c:1b:f7:2c:ec:54:20:65:e5:79:fc:cd:d8:0b: 1f:e7:41:c1:aa:63:05:ca:4d:74:00:aa:2a:71:6d: 29:f8:b5:5d:3d:bd:db:14:7a:37:59:86:2d:ab:e5: f8:5e:eb:d1:02:f2:48:ec:c2:eb:c8:8f:4e:b2:27: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:34:61:78:8C:0E:CD:29:37:C1:A1:8D:C4:41:4E:DE:69:1C:94:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/74e26e07-097a-3ada-85dc-03126df34d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 23.28.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:79:fb:29:f7:d1:ef:c4:af:ee:3e:63:00:83:6c:bd:6c:ba: 4f:02:a8:db:01:e3:47:c5:0e:34:cd:ca:4a:2b:f6:68:04:70: 81:ce:b7:b5:11:3f:24:5e:f2:d6:0c:97:0c:dd:38:4d:13:2c: 76:2a:01:c6:3c:b2:25:a0:29:c6:b0:c2:3a:35:06:bd:86:ac: 63:3e:57:0c:44:50:5d:41:61:60:48:96:4e:59:7d:11:a4:50: bf:c8:db:4c:63:54:52:7f:6c:8e:59:04:0f:53:86:70:20:50: 2f:2b:6c:c0:52:e5:9c:f6:1c:2f:0a:6a:ba:d9:27:9c:df:36: 67:68:18:92:3a:9f:d5:34:72:02:43:10:02:1f:0e:88:ed:42: 5b:20:95:d7:0d:1e:48:af:f3:a9:4e:76:5e:29:2a:c9:b5:f3: 51:de:d0:4d:2f:ce:4c:7a:ef:35:18:77:1c:da:82:43:df:aa: 81:0e:9a:6b:72:10:61:65:3e:4f:f6:d2:30:6a:0c:57:94:60: 14:d2:ba:9c:d5:cd:40:b2:bc:93:0c:ab:be:6e:7f:01:67:9f: 68:00:a7:f3:38:18:f7:e9:28:07:b1:12:b8:ea:89:ba:0d:62: e9:e6:8e:89:e8:45:e3:73:57:63:9a:74:0b:79:07:e7:24:55: 7a:ea:b4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73bw1WPUaRVOJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTYyZGE5YzktMTRkNC00MTJiLTk0NGItNzQ4MmUxOGY2ZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMnRGw0PxGjhbP/L/ThFTmn2uXqymHNtryKU nElkdkvu1Qr2GOWeEbxt5aVm+MQ8Ep1sfgomkVjcfbKXuIAqS0Wba6Ay9tafaM0X IoI3lzamT5IlWSH2L+Y8DYofP9a7MXbro4Ml1JxXbPFmNU4O88w99edchTUGHkID gh9QQFMAzjJW66gUszD4zRmJEqWgC7r6mWH04jHgMbyr/Sn4usMsj4uca77lxlyt 0wrj6tAhqNQbc4yjSgreEs3S78KSa0xMfBv3LOxUIGXlefzN2Asf50HBqmMFyk10 AKoqcW0p+LVdPb3bFHo3WYYtq+X4XuvRAvJI7MLryI9Osifa4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY0YXiMDs0pN8GhjcRBTt5pHJTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNzRlMjZlMDctMDk3YS0z YWRhLTg1ZGMtMDMxMjZkZjM0ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGFxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMF5+yn30e/Er+4+YwCDbL1suk8CqNsB40fFDjTNykor9mgEcIHOt7UR PyRe8tYMlwzdOE0TLHYqAcY8siWgKcawwjo1Br2GrGM+VwxEUF1BYWBIlk5ZfRGk UL/I20xjVFJ/bI5ZBA9ThnAgUC8rbMBS5Zz2HC8KarrZJ5zfNmdoGJI6n9U0cgJD EAIfDojtQlsgldcNHkiv86lOdl4pKsm181He0E0vzkx67zUYdxzagkPfqoEOmmty EGFlPk/20jBqDFeUYBTSupzVzUCyvJMMq75ufwFnn2gAp/M4GPfpKAexErjqiboN YunmjonoReNzV2OadAt5B+ckVXrqtO8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:56:41 2025 by rpki-client