$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa File: d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa (raw, json) Hash identifier: a4jFBmoLY+S5qcH6bon8DJB8T8ogHD6+zWtcWNzazl4= Subject key identifier: 5F:BD:DF:A3:0E:41:10:ED:03:4A:DC:B4:DD:1A:71:C3:62:EA:BB:6C Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F432858498E64813F84BE97DDCEEF1580 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18943 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:81:3f:84:be:97:dd:ce:ef:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=8b7b6c86-ff7e-4627-860e-9529a8df824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:70:88:49:72:05:88:67:b0:da:0b:b4:85: fa:cb:36:17:6c:2e:b7:28:ca:1c:f9:31:49:b3:74: 4b:bc:92:7b:61:f1:32:9d:c2:a4:9d:9b:e7:63:1f: 93:bd:1b:8d:6b:28:f7:1d:f4:cb:21:a5:e6:08:64: cc:07:27:98:7b:47:1b:c0:e8:b6:e3:75:65:69:16: 96:6f:79:bf:1c:8f:a8:37:d0:34:76:ea:d6:d7:04: 61:d1:34:14:9c:56:46:11:01:61:c6:ed:5a:71:98: c9:70:2e:e0:4e:87:10:8b:3f:63:f3:17:e7:09:43: 74:fe:c4:39:22:31:fe:34:16:f8:72:fe:8d:58:7a: 71:00:02:12:a8:b2:e4:fa:61:5c:5a:ae:27:cb:9a: 9d:ae:37:64:6a:a4:c0:14:11:ef:e6:dd:ce:6b:d2: 4a:87:54:71:f9:de:0a:30:f0:63:12:93:63:47:97: 3d:9c:70:fb:c5:19:3f:35:61:36:9b:9c:8d:fc:20: a7:5c:b7:24:79:09:f9:c4:1a:49:67:1c:14:50:12: f5:25:c7:f6:47:0a:ee:2d:a3:63:7c:2a:fe:e5:e9: 68:d5:9c:74:71:27:9d:13:c7:df:c8:ae:d7:f1:73: c7:c9:e7:c2:be:18:1f:6e:9c:ab:ac:69:ce:8d:cb: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BD:DF:A3:0E:41:10:ED:03:4A:DC:B4:DD:1A:71:C3:62:EA:BB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b6:65:fb:dd:bd:fe:31:72:f2:07:6e:6d:5e:77:b3:0e:44: 7c:fd:36:79:0c:89:13:3f:a4:06:a5:78:ab:e4:87:f6:28:58: a5:13:1c:b6:12:35:99:7e:9a:d8:5f:d5:9d:56:a5:d7:ca:10: 1d:64:e0:ca:48:67:af:a0:b4:7a:6c:65:70:f0:b2:6d:08:cd: b1:67:ff:7a:50:7f:16:6e:9d:98:b0:27:4f:12:07:9d:b2:15: 9f:7c:f7:e2:be:26:75:57:d2:38:99:37:e2:7b:1d:88:68:ce: 2f:fc:8f:51:4c:9b:9e:e0:70:23:eb:33:40:21:ed:fb:36:1f: 8a:13:84:b7:f4:10:d2:25:34:c1:90:c2:5c:d9:2d:73:1f:22: d3:42:35:dc:0f:76:bc:f9:cf:27:25:35:41:2a:0a:07:48:d8: 73:c9:b2:b9:fc:2f:eb:f3:79:32:db:57:3f:31:08:2f:87:fa: 10:de:82:02:a5:8b:52:c0:07:24:2e:ea:ce:9b:dc:b2:09:2f: 12:ca:d2:a3:44:5c:26:35:d2:b7:c4:aa:06:dd:eb:cb:df:0d: 01:2a:63:7a:9c:e5:28:a3:4d:0d:62:b8:c3:5b:96:f7:41:4b: fb:a3:f1:e6:0b:eb:a7:54:b7:25:00:8a:27:b4:40:c0:20:3e: 2d:06:71:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIE/hL6X3c7vFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OGI3YjZjODYtZmY3ZS00NjI3LTg2MGUtOTUyOWE4ZGY4MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv25wiElyBYhnsNoLtIX6yzYXbC63KMoc+TFJ s3RLvJJ7YfEyncKknZvnYx+TvRuNayj3HfTLIaXmCGTMByeYe0cbwOi243VlaRaW b3m/HI+oN9A0durW1wRh0TQUnFZGEQFhxu1acZjJcC7gTocQiz9j8xfnCUN0/sQ5 IjH+NBb4cv6NWHpxAAISqLLk+mFcWq4ny5qdrjdkaqTAFBHv5t3Oa9JKh1Rx+d4K MPBjEpNjR5c9nHD7xRk/NWE2m5yN/CCnXLckeQn5xBpJZxwUUBL1Jcf2RwruLaNj fCr+5elo1Zx0cSedE8ffyK7X8XPHyefCvhgfbpyrrGnOjcs+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+936MOQRDtA0rctN0accNi6rtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDgyOGMyMmYtZTNiMy0z YmIxLWIxNjQtOGRjMzBkYTVhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe2Zfvdvf4xcvIHbm1ed7MORHz9NnkMiRM/pAaleKvkh/YoWKUTHLYS NZl+mthf1Z1WpdfKEB1k4MpIZ6+gtHpsZXDwsm0IzbFn/3pQfxZunZiwJ08SB52y FZ989+K+JnVX0jiZN+J7HYhozi/8j1FMm57gcCPrM0Ah7fs2H4oThLf0ENIlNMGQ wlzZLXMfItNCNdwPdrz5zyclNUEqCgdI2HPJsrn8L+vzeTLbVz8xCC+H+hDeggKl i1LAByQu6s6b3LIJLxLK0qNEXCY10rfEqgbd68vfDQEqY3qc5SijTQ1iuMNblvdB S/uj8eYL66dUtyUAiie0QMAgPi0GcQs= -----END CERTIFICATE-----Generated at Mon Apr 28 10:56:32 2025 by rpki-client