$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa File: d50fa22c-28fc-3c4e-b12d-4de891836c64.roa (raw, json) Hash identifier: POjZoMuxKnNvR2ZC1MrnTtGf05sh3xqYoIB4O/2SPp4= Subject key identifier: 5D:69:00:64:90:96:27:03:84:48:59:CA:72:0E:3E:9C:89:4F:19:AE Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F432858498E647D0691FE86BA11BD3080 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 400446 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7d:06:91:fe:86:ba:11:bd:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=a0264b0a-6472-467c-b72d-4d0d21d73fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:7f:84:02:70:b5:c4:db:31:b3:19:63:05: a5:ef:b4:a7:36:90:30:6d:ba:d5:52:5d:cf:73:97: a6:77:67:78:93:92:b6:e7:bb:ce:6a:5d:4b:ff:3c: e7:67:2c:8d:be:b8:e8:09:65:b7:70:04:1a:50:e1: 29:35:cd:24:eb:88:08:f1:ee:d1:e8:fe:93:21:bf: 6c:b3:09:db:88:e2:0f:05:5d:a7:06:c8:05:86:dc: 0e:31:54:bc:f4:23:c6:cb:bb:8d:f3:96:c3:dd:52: e4:fe:71:47:90:7a:30:59:23:22:66:f8:22:d8:28: 27:5a:52:1b:f3:71:bc:cf:5c:45:db:e5:59:f5:ba: 49:55:0a:b4:f5:a9:14:cc:b2:23:f0:c8:4e:b3:21: 6b:e3:d3:e0:06:bd:ab:3e:3e:ea:c0:72:15:5b:12: de:3d:20:23:70:75:5c:2a:6e:c7:f8:65:f8:fe:84: 38:59:3e:a0:00:fd:ab:8b:e8:ec:bc:85:b2:18:7a: 1b:7d:0a:31:d9:14:64:ee:c1:11:02:a5:f7:2c:91: 77:7f:eb:93:ee:bb:28:6b:c6:f8:0e:e3:c6:6a:29: 23:ef:78:e6:e5:c1:93:21:9b:99:38:ce:ba:48:0a: 20:29:c2:aa:06:d2:42:69:d4:94:39:9e:87:8a:d1: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:69:00:64:90:96:27:03:84:48:59:CA:72:0E:3E:9C:89:4F:19:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:12:c4:06:37:ff:69:ab:c8:63:df:3d:7a:92:0c:49:db:6a: 29:bf:73:3c:06:ab:59:ac:24:a1:28:d3:cf:6a:3c:19:99:ef: bd:ce:48:82:e5:16:6a:b2:e1:fa:69:4a:d2:5b:6f:a1:86:99: 88:6f:25:34:f2:df:68:e5:50:05:bf:77:06:64:50:a7:f6:3d: 80:27:18:86:8e:b3:7a:b8:36:5f:db:73:8b:6e:72:66:d6:f9: 69:a7:af:42:2a:d6:ef:f1:91:dd:30:28:58:9f:b4:70:53:a2: a4:26:26:92:bb:bd:e6:d0:f8:59:8b:ec:3b:06:48:7f:8e:38: 8f:fc:17:8c:df:13:21:3d:67:fa:60:ee:43:95:1f:65:2f:bf: 3e:ad:cc:85:9a:c7:aa:e1:08:bc:e6:df:21:5b:39:ea:01:a5: 3a:0a:be:9e:6c:5e:ee:6b:e4:1f:9c:13:b8:b9:a9:4a:96:c4: 0e:0c:cb:62:bf:ae:bc:7b:20:84:66:e1:b0:a2:20:7f:2e:30: 17:b9:bd:2d:69:da:47:8b:70:72:e3:08:c9:a2:f8:d7:b6:a5: 17:32:4b:24:8c:15:3c:41:cb:45:31:a5:9c:dc:5f:78:19:a3: f9:ba:37:34:e5:ae:19:c0:ac:b5:89:e1:88:42:6c:ab:d3:0f: 69:c3:b8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZH0Gkf6GuhG9MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YTAyNjRiMGEtNjQ3Mi00NjdjLWI3MmQtNGQwZDIxZDczZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubZ/hAJwtcTbMbMZYwWl77SnNpAwbbrVUl3P c5emd2d4k5K257vOal1L/zznZyyNvrjoCWW3cAQaUOEpNc0k64gI8e7R6P6TIb9s swnbiOIPBV2nBsgFhtwOMVS89CPGy7uN85bD3VLk/nFHkHowWSMiZvgi2CgnWlIb 83G8z1xF2+VZ9bpJVQq09akUzLIj8MhOsyFr49PgBr2rPj7qwHIVWxLePSAjcHVc Km7H+GX4/oQ4WT6gAP2ri+jsvIWyGHobfQox2RRk7sERAqX3LJF3f+uT7rsoa8b4 DuPGaikj73jm5cGTIZuZOM66SAogKcKqBtJCadSUOZ6HitEBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1pAGSQlicDhEhZynIOPpyJTxmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDUwZmEyMmMtMjhmYy0z YzRlLWIxMmQtNGRlODkxODM2YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoSxAY3/2mryGPfPXqSDEnbaim/czwGq1msJKEo089qPBmZ773OSILl Fmqy4fppStJbb6GGmYhvJTTy32jlUAW/dwZkUKf2PYAnGIaOs3q4Nl/bc4tucmbW +Wmnr0Iq1u/xkd0wKFiftHBToqQmJpK7vebQ+FmL7DsGSH+OOI/8F4zfEyE9Z/pg 7kOVH2Uvvz6tzIWax6rhCLzm3yFbOeoBpToKvp5sXu5r5B+cE7i5qUqWxA4My2K/ rrx7IIRm4bCiIH8uMBe5vS1p2keLcHLjCMmi+Ne2pRcySySMFTxBy0UxpZzcX3gZ o/m6NzTlrhnArLWJ4YhCbKvTD2nDuEE= -----END CERTIFICATE-----Generated at Sun Apr 27 22:57:13 2025 by rpki-client