$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: 0gEb5zX1WU/eQUhzzHhhYG4Y/7lAoi64/AkxzjVmqMA= Subject key identifier: ED:D0:18:49:DE:93:69:07:D0:02:6C:56:C2:4E:4A:1F:51:99:96:5D Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F432858499F2493D89096C67D3558A600 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:93:d8:90:96:c6:7d:35:58:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=993fabbf-9cd1-47b0-813b-0a2a216935ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:53:1a:cc:7b:5a:85:5b:af:4b:84:c6:3c: df:07:39:84:0b:a3:d9:91:b7:9e:a0:8b:49:6f:0f: f0:66:26:46:9e:47:0f:e6:ea:2e:a7:d8:e2:d6:b9: d4:cc:0a:20:7f:ff:1a:8b:d8:47:28:96:de:c1:8d: 06:18:64:6b:b3:75:4a:39:6a:54:96:90:77:67:b5: eb:77:5b:e5:b8:a7:32:8a:48:2f:aa:b1:f9:93:30: 80:6c:76:ac:e0:6e:45:31:5f:cd:f9:b4:dd:18:3b: 60:89:76:7a:c5:0e:39:e7:cf:81:08:0b:e9:ce:4b: 9c:83:bc:57:cc:b1:69:23:a0:a5:4b:b7:88:16:dc: f1:e1:01:5c:6f:b5:43:fd:01:86:7a:18:62:3b:83: 45:3b:22:bb:34:c7:57:37:99:c5:5d:89:93:ae:6c: fb:f9:aa:9a:6c:0d:8e:f7:1c:4a:43:5d:9c:17:5f: 71:80:cb:00:7a:48:d2:d6:1f:b1:9b:8a:11:e7:9f: 34:b5:73:c3:f6:8d:ba:2e:88:b8:09:a0:3b:b9:72: 57:e7:82:74:4e:87:53:37:9f:2e:e7:36:cc:66:bc: bb:8e:36:78:0a:fa:19:f4:af:b0:20:d0:f9:5d:18: 32:89:f8:e8:f0:12:4f:4c:b6:1d:f6:4a:31:4a:ff: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D0:18:49:DE:93:69:07:D0:02:6C:56:C2:4E:4A:1F:51:99:96:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c8:93:3a:8e:d0:02:63:02:01:04:95:78:ad:25:23:c7:34: 9e:4e:84:f3:82:f9:b7:20:13:68:bc:b1:0a:7e:dd:58:2d:6c: cd:cb:2f:66:ca:bb:5d:9e:30:2d:c3:cb:16:39:32:4d:aa:d0: c8:0b:79:89:74:63:9c:9e:93:08:7e:a0:6a:ec:e6:ee:cd:07: 3e:4b:0a:60:98:8d:65:f1:3c:e5:ea:22:38:8f:95:72:97:89: e4:3b:54:25:80:24:8f:59:4a:13:4b:40:4c:ed:cd:8d:0f:0f: 23:64:ed:2c:2a:ab:cc:04:05:91:22:13:47:40:e4:2c:60:3c: 3d:32:6f:b2:b0:f6:90:71:11:97:ea:69:72:da:85:d8:1e:c0: db:4f:62:a1:b6:7a:9c:0f:a9:e1:67:81:a4:87:38:50:b1:14: 27:7c:f0:ae:00:67:28:79:a7:6a:65:85:a1:c8:0e:30:50:5c: 96:69:d8:18:16:34:29:b4:d8:91:2f:8a:79:85:66:f0:1d:bf: 6f:a6:3b:ce:82:e0:31:0d:2f:de:bd:0b:54:03:65:b2:14:81: b7:bd:3e:93:b3:40:bc:35:de:59:c3:75:9d:2b:2b:0b:66:06: 82:10:9f:e3:74:ca:0b:82:9f:e7:b1:25:de:7d:af:af:fe:bd: fd:21:7b:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJPYkJbGfTVYpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTkzZmFiYmYtOWNkMS00N2IwLTgxM2ItMGEyYTIxNjkzNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwhTGsx7WoVbr0uExjzfBzmEC6PZkbeeoItJ bw/wZiZGnkcP5uoup9ji1rnUzAogf/8ai9hHKJbewY0GGGRrs3VKOWpUlpB3Z7Xr d1vluKcyikgvqrH5kzCAbHas4G5FMV/N+bTdGDtgiXZ6xQ4558+BCAvpzkucg7xX zLFpI6ClS7eIFtzx4QFcb7VD/QGGehhiO4NFOyK7NMdXN5nFXYmTrmz7+aqabA2O 9xxKQ12cF19xgMsAekjS1h+xm4oR5580tXPD9o26Loi4CaA7uXJX54J0TodTN58u 5zbMZry7jjZ4CvoZ9K+wIND5XRgyifjo8BJPTLYd9koxSv8Q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3QGEnek2kH0AJsVsJOSh9RmZZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfIkzqO0AJjAgEElXitJSPHNJ5OhPOC+bcgE2i8sQp+3VgtbM3LL2bK u12eMC3DyxY5Mk2q0MgLeYl0Y5yekwh+oGrs5u7NBz5LCmCYjWXxPOXqIjiPlXKX ieQ7VCWAJI9ZShNLQEztzY0PDyNk7Swqq8wEBZEiE0dA5CxgPD0yb7Kw9pBxEZfq aXLahdgewNtPYqG2epwPqeFngaSHOFCxFCd88K4AZyh5p2plhaHIDjBQXJZp2BgW NCm02JEvinmFZvAdv2+mO86C4DENL969C1QDZbIUgbe9PpOzQLw13lnDdZ0rKwtm BoIQn+N0yguCn+exJd59r6/+vf0he8M= -----END CERTIFICATE-----Generated at Tue Apr 29 23:59:50 2025 by rpki-client