$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa File: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (raw, json) Hash identifier: 3hPIpNoW+ARhvo25AVLotoQCzzjQUiMJ2imdaSq+NCI= Subject key identifier: 5F:F2:58:80:C6:24:E4:71:7F:0E:3F:0F:85:22:3C:1F:25:C5:4C:58 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F432858499F2493FBD03F0325B3268F80 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 4185 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:93:fb:d0:3f:03:25:b3:26:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=581ea4aa-2320-42f6-8e47-987b60585622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2b:a6:79:81:89:3c:69:71:94:ad:cf:0a:7c: 99:9d:cb:33:40:cf:c7:0e:ee:b8:66:29:45:ee:9a: dc:ad:1a:f1:32:d1:57:34:34:e9:86:26:03:0c:f5: ba:66:b8:5d:cc:7a:2c:2a:8a:4d:9a:f8:32:23:2f: 7b:4b:da:6d:1d:97:92:33:45:72:c9:cb:4a:98:9a: 29:b1:b5:c0:01:4a:a9:e8:bb:11:3d:28:e9:c3:da: c3:a6:0e:75:a4:8a:83:42:b5:35:6d:b3:71:84:e9: 4b:2c:d8:ef:14:9b:54:9e:47:a8:7a:75:09:99:a3: 56:40:97:54:e3:7f:fe:05:f0:ba:2f:61:72:38:28: 01:c3:84:3b:0e:8a:f8:d9:79:db:b8:ec:56:91:e5: 8f:c3:75:79:04:2a:79:70:46:77:8c:ff:0c:04:2a: 30:95:93:09:00:49:64:29:99:ca:cb:95:41:a6:99: db:0e:fa:1b:47:fe:c1:d0:c9:6b:f3:cb:8b:a6:c4: e2:e9:10:8b:9c:cf:0c:51:ff:98:b5:bb:36:59:9a: be:0e:78:2c:21:7f:7e:90:fd:e3:94:87:89:ad:38: a9:c6:fa:29:b9:87:4f:11:c9:88:91:44:04:04:c9: 9b:88:b5:cf:8a:3f:46:6a:7f:7e:4d:3b:e3:0e:f0: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:58:80:C6:24:E4:71:7F:0E:3F:0F:85:22:3C:1F:25:C5:4C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:02:7a:80:f4:59:5d:4d:26:64:4c:c3:ef:c5:99:87:2e:49: 16:55:49:dd:a0:1d:cd:11:e1:e6:99:14:26:d0:ed:fa:9b:63: c1:f5:2c:e0:96:7f:c2:e9:c8:8f:66:79:25:7e:e4:af:96:8e: 73:7b:f4:dc:5e:db:8a:10:42:03:c6:03:e5:71:0c:cc:68:33: 03:21:b5:f3:d0:43:19:76:9a:4a:d6:44:3f:67:96:f5:fb:13: 1d:98:b0:fc:8c:89:22:87:8f:a8:70:d8:ed:3b:6c:d0:2d:6c: b6:44:2e:3a:81:25:d4:7c:ba:3f:6d:fe:00:09:01:51:b7:14: e9:86:ee:bf:99:dd:a7:93:ec:6f:39:14:0e:9f:73:a2:d4:25: 03:0d:60:5d:37:8b:b1:f4:e3:fa:c0:f4:2b:fa:93:ca:86:0d: 76:f1:fd:f1:19:cc:d0:35:c5:92:63:74:dd:16:df:ec:94:83: a9:02:d9:b3:13:a1:de:0c:61:0e:7c:56:ac:00:b6:a2:54:96: 95:31:bf:94:59:d9:5e:ad:ad:f7:ce:8a:be:c0:54:8f:e3:e7: a6:53:e9:5d:b0:7b:b2:e7:38:8a:32:b2:58:e2:1b:4d:96:be: 7a:8e:cf:e3:06:e5:68:59:98:82:5c:26:10:fa:ba:0b:71:00: a3:e3:fb:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJP70D8DJbMmj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTgxZWE0YWEtMjMyMC00MmY2LThlNDctOTg3YjYwNTg1NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iumeYGJPGlxlK3PCnyZncszQM/HDu64ZilF 7prcrRrxMtFXNDTphiYDDPW6ZrhdzHosKopNmvgyIy97S9ptHZeSM0VyyctKmJop sbXAAUqp6LsRPSjpw9rDpg51pIqDQrU1bbNxhOlLLNjvFJtUnkeoenUJmaNWQJdU 43/+BfC6L2FyOCgBw4Q7Dor42XnbuOxWkeWPw3V5BCp5cEZ3jP8MBCowlZMJAElk KZnKy5VBppnbDvobR/7B0Mlr88uLpsTi6RCLnM8MUf+Ytbs2WZq+DngsIX9+kP3j lIeJrTipxvopuYdPEcmIkUQEBMmbiLXPij9Gan9+TTvjDvCt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/yWIDGJORxfw4/D4UiPB8lxUxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMDFjZDE3OTMtZjhmYy0z MDkzLTg1MGItMGIwZWJkYmYyOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0CeoD0WV1NJmRMw+/FmYcuSRZVSd2gHc0R4eaZFCbQ7fqbY8H1LOCW f8LpyI9meSV+5K+WjnN79Nxe24oQQgPGA+VxDMxoMwMhtfPQQxl2mkrWRD9nlvX7 Ex2YsPyMiSKHj6hw2O07bNAtbLZELjqBJdR8uj9t/gAJAVG3FOmG7r+Z3aeT7G85 FA6fc6LUJQMNYF03i7H04/rA9Cv6k8qGDXbx/fEZzNA1xZJjdN0W3+yUg6kC2bMT od4MYQ58VqwAtqJUlpUxv5RZ2V6trffOir7AVI/j56ZT6V2we7LnOIoysljiG02W vnqOz+MG5WhZmIJcJhD6ugtxAKPj+4s= -----END CERTIFICATE-----Generated at Wed Apr 30 22:01:21 2025 by rpki-client