$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa File: 975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa (raw, json) Hash identifier: zydmJwL8YatNcbF7Bxdi9a0EgA0IIH+n9pgkFviypVg= Subject key identifier: 7A:8B:34:4F:4B:0B:11:02:91:C5:3E:A9:95:B9:0C:19:2A:4A:39:F2 Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F432858495ABEC1E49ABC3E0CC1264990 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 23491 IP address blocks: 198.252.136.0/24 maxlen: 24 204.152.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c1:e4:9a:bc:3e:0c:c1:26:49:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=51d9803d-3f14-41aa-ad1d-4c823336da0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:0d:48:44:b0:79:89:b9:30:5d:16:b8:60: 22:55:ce:81:e8:70:fd:ef:f2:12:b1:05:d7:f1:52: 77:ff:a6:c5:00:4a:10:64:c2:db:a6:81:d5:7f:c1: 0f:88:d6:1f:90:03:56:f3:a5:62:2c:ea:6c:79:b0: c3:83:df:73:f9:45:e9:43:17:61:9f:7a:d3:a4:5c: c4:13:74:9d:1e:6f:9b:56:ba:64:f1:ea:4a:56:73: 2d:31:1f:de:40:6e:fa:b4:ec:5e:2b:3d:d7:55:03: d7:2d:4a:94:7e:fc:c4:41:95:30:f1:d4:ea:d9:c5: 34:2e:e9:1c:c7:12:00:4d:04:cd:ed:87:c4:a3:a3: f5:9c:4b:95:6d:cc:8d:ae:31:eb:76:75:ee:92:1c: f1:10:68:ca:45:db:f9:ce:b2:ad:88:29:d1:6a:b0: 50:79:88:6a:8c:bd:f4:19:67:ae:f6:ca:b8:48:3d: d3:37:86:5c:b9:c8:28:59:54:a7:00:83:2b:6a:20: bc:94:be:d7:a8:3d:76:76:ad:1a:61:bb:69:7a:a8: 00:58:3e:30:83:da:21:cf:5b:37:4a:fa:11:f9:82: 62:00:25:e2:06:ce:41:d4:40:85:06:10:29:0d:bc: 81:76:5a:7b:1e:5d:43:2c:57:45:bf:cd:33:c3:86: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:34:4F:4B:0B:11:02:91:C5:3E:A9:95:B9:0C:19:2A:4A:39:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/975416ca-3764-3fb0-91a9-a7e762bbbe6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 198.252.136.0/24 204.152.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a8:92:1e:34:d2:cf:07:46:4b:a5:84:98:e4:17:6e:3d:a5: d6:43:93:c0:d8:56:11:72:26:8d:0f:42:40:e5:df:c8:ab:0f: 1e:60:87:41:fb:9c:46:1a:36:ed:fe:bb:2c:91:ac:2c:ca:a9: 1f:1f:45:f3:3d:44:ba:1f:d8:69:6d:5e:ba:c2:33:09:c0:18: 70:6c:33:26:1a:4f:57:23:6c:c6:6d:d8:f1:68:f8:74:1d:fc: b3:7e:23:d7:47:7b:6f:e7:03:08:6c:4e:f0:07:75:fa:14:00: c0:4d:15:c7:f7:39:c6:f6:6b:8b:dd:0d:a1:15:1d:05:da:c6: 66:ee:64:d2:02:0a:44:92:87:2e:69:be:c8:4d:6b:dd:35:72: 58:7e:08:8d:45:03:62:22:fb:82:0e:40:0d:8b:8a:ad:32:90: 6d:d0:c2:f9:c5:0b:d2:c2:f1:da:8b:0f:d0:60:27:a7:83:ed: 61:cf:38:50:8c:fc:8f:fd:0d:8c:c3:df:7b:b4:43:d1:33:bd: 6d:0e:fd:b5:8d:e9:02:bc:f0:f6:00:68:50:ac:47:77:69:32: 6a:84:60:5b:63:a3:59:7d:31:10:40:5e:99:a3:15:3d:a7:8a: ce:64:15:e0:1e:00:10:12:73:4b:b4:82:cb:76:79:17:d3:5b: 05:d0:f9:8b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElavsHkmrw+DMEmSZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NTFkOTgwM2QtM2YxNC00MWFhLWFkMWQtNGM4MjMzMzZkYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0wNSESweYm5MF0WuGAiVc6B6HD97/ISsQXX 8VJ3/6bFAEoQZMLbpoHVf8EPiNYfkANW86ViLOpsebDDg99z+UXpQxdhn3rTpFzE E3SdHm+bVrpk8epKVnMtMR/eQG76tOxeKz3XVQPXLUqUfvzEQZUw8dTq2cU0Lukc xxIATQTN7YfEo6P1nEuVbcyNrjHrdnXukhzxEGjKRdv5zrKtiCnRarBQeYhqjL30 GWeu9sq4SD3TN4ZcucgoWVSnAIMraiC8lL7XqD12dq0aYbtpeqgAWD4wg9ohz1s3 SvoR+YJiACXiBs5B1ECFBhApDbyBdlp7Hl1DLFdFv80zw4bHuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHqLNE9LCxECkcU+qZW5DBkqSjnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvOTc1NDE2Y2EtMzc2NC0z ZmIwLTkxYTktYTdlNzYyYmJiZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxvyIAwQA zJh3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB+okh400s8HRkulhJjkF249pdZDk8DYVhFyJo0PQkDl38ir Dx5gh0H7nEYaNu3+uyyRrCzKqR8fRfM9RLof2GltXrrCMwnAGHBsMyYaT1cjbMZt 2PFo+HQd/LN+I9dHe2/nAwhsTvAHdfoUAMBNFcf3Ocb2a4vdDaEVHQXaxmbuZNIC CkSShy5pvshNa901clh+CI1FA2Ii+4IOQA2Liq0ykG3QwvnFC9LC8dqLD9BgJ6eD 7WHPOFCM/I/9DYzD33u0Q9EzvW0O/bWN6QK88PYAaFCsR3dpMmqEYFtjo1l9MRBA XpmjFT2nis5kFeAeABASc0u0gst2eRfTWwXQ+Ys= -----END CERTIFICATE-----Generated at Sun Apr 27 04:12:46 2025 by rpki-client