$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa File: 282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa (raw, json) Hash identifier: ZKCYUpi7hXLiQPq3tB5nnAyY0sA0tPkC653pktYUDec= Subject key identifier: 0B:A8:62:8A:59:30:12:EB:D6:23:55:27:DA:D1:FC:E1:ED:48:CF:47 Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F4328584902EC2EC81F35619CB9BA9C20 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14618 IP address blocks: 198.252.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2e:c8:1f:35:61:9c:b9:ba:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=83d6474c-6589-48b6-8961-eb8605873642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:d3:0b:1d:f9:26:c3:e0:b5:a9:55:ea:7c: 11:40:0b:ac:5c:8f:05:62:f1:ec:31:8c:3c:ed:fc: 0b:4a:ef:1c:3f:c3:4e:07:57:12:2d:41:42:c2:8b: 5b:35:33:a1:a4:d2:22:cb:d3:0a:95:39:05:1e:8e: cc:35:8e:8b:a7:9c:bc:b7:5e:02:80:16:37:56:7e: a9:21:99:2b:02:ee:69:ad:84:68:80:1d:c6:1a:92: 0e:36:5e:48:0c:b0:28:18:e3:73:17:a6:5e:2a:c8: 45:3c:1a:69:5d:4c:79:5f:c5:1d:26:f5:dc:55:96: 05:c9:a6:5b:f0:95:11:82:df:4e:6e:b1:09:ee:de: 7d:01:1b:78:b9:e6:f9:99:9a:e6:2f:bb:4e:1a:5f: 3f:3e:fa:59:04:84:9c:d8:68:df:ad:5e:8e:46:18: 7c:d7:85:93:9f:bd:f7:2e:43:af:f5:c8:f1:e9:65: e6:a8:b6:16:eb:78:4f:6a:6b:0f:a4:c8:cc:b1:01: 34:31:0d:e3:68:a7:8b:84:0b:42:ab:81:8d:e1:70: a6:2a:2f:fd:94:2f:b0:3d:d8:4c:ff:8c:61:fa:c1: a6:d1:66:c3:95:d4:f1:50:9a:94:61:e8:2b:15:72: ce:eb:f2:c0:92:38:ca:1a:f7:38:69:ed:1a:75:a8: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A8:62:8A:59:30:12:EB:D6:23:55:27:DA:D1:FC:E1:ED:48:CF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 198.252.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:aa:de:01:63:9e:43:b1:68:da:f5:55:7d:2f:f5:2c:14:b9: 07:55:40:9e:1e:47:66:dd:f3:e1:90:f7:00:16:e6:84:63:b5: ef:e3:53:4f:28:04:29:4b:bf:32:af:67:92:07:fe:1c:34:3d: 73:4d:00:9e:f6:8d:cf:05:37:8e:f4:30:8c:b1:f1:00:a3:c6: fa:c2:4c:dd:fc:e4:17:66:c7:9c:99:dd:e9:a3:ee:c5:14:ae: 04:e5:11:5b:c3:f9:1e:d0:e1:1b:9b:cc:3a:57:06:16:60:a7: 33:d6:88:62:6a:de:04:35:bc:4a:76:ac:34:bc:b4:1f:96:a1: 77:47:d7:e0:03:b6:be:0a:4a:00:49:43:a6:df:99:0f:f7:94: 20:82:15:12:a3:09:55:b1:93:52:ef:33:4b:db:b3:20:c5:72: fd:36:73:82:f4:d5:b8:cb:c3:ac:4f:66:6b:5d:e6:56:2b:97: 50:46:fe:5c:a8:e0:26:a0:1a:57:f8:8a:b6:2b:fc:3e:8b:ce: 06:97:fd:c0:04:82:b4:e8:e6:2e:53:8b:ab:33:37:bc:35:7c: 20:e0:e0:bd:fc:22:fc:ce:61:2c:79:d0:a4:6e:67:bd:c7:4d: f8:7d:41:f7:4c:8c:15:26:81:67:b6:18:3a:95:de:8e:11:47: 65:91:07:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C7IHzVhnLm6nCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ODNkNjQ3NGMtNjU4OS00OGI2LTg5NjEtZWI4NjA1ODczNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU3TCx35JsPgtalV6nwRQAusXI8FYvHsMYw8 7fwLSu8cP8NOB1cSLUFCwotbNTOhpNIiy9MKlTkFHo7MNY6Lp5y8t14CgBY3Vn6p IZkrAu5prYRogB3GGpIONl5IDLAoGONzF6ZeKshFPBppXUx5X8UdJvXcVZYFyaZb 8JURgt9ObrEJ7t59ARt4ueb5mZrmL7tOGl8/PvpZBISc2GjfrV6ORhh814WTn733 LkOv9cjx6WXmqLYW63hPamsPpMjMsQE0MQ3jaKeLhAtCq4GN4XCmKi/9lC+wPdhM /4xh+sGm0WbDldTxUJqUYegrFXLO6/LAkjjKGvc4ae0adagO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuoYopZMBLr1iNVJ9rR/OHtSM9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvMjgyZjllMzQtZWU4NC0z ZGI2LWJmYTUtM2M2MmQ3YTQ5NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOq3gFjnkOxaNr1VX0v9SwUuQdVQJ4eR2bd8+GQ9wAW5oRjte/jU08o BClLvzKvZ5IH/hw0PXNNAJ72jc8FN470MIyx8QCjxvrCTN385Bdmx5yZ3emj7sUU rgTlEVvD+R7Q4RubzDpXBhZgpzPWiGJq3gQ1vEp2rDS8tB+WoXdH1+ADtr4KSgBJ Q6bfmQ/3lCCCFRKjCVWxk1LvM0vbsyDFcv02c4L01bjLw6xPZmtd5lYrl1BG/lyo 4CagGlf4irYr/D6LzgaX/cAEgrTo5i5Ti6szN7w1fCDg4L38IvzOYSx50KRuZ73H Tfh9QfdMjBUmgWe2GDqV3o4RR2WRB/U= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:15 2025 by rpki-client