$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa File: 4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa (raw, json) Hash identifier: +bLwP+6Tz0JVdJ86jz4xmXslcA7VO1+ZPHUjkKY9zSc= Subject key identifier: B3:F4:80:4F:30:45:C1:12:90:3D:C8:E7:A7:84:6D:18:A8:70:D3:21 Certificate issuer: /CN=2011e64c-7c9c-4249-87ab-c66e2076120e Certificate serial: 010D0C9F43285849A8E9DE29DA7C74ADFC7CCCE0 Authority key identifier: 50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 8075 IP address blocks: 198.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:de:29:da:7c:74:ad:fc:7c:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2011e64c-7c9c-4249-87ab-c66e2076120e Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=e3c993c5-387f-49ff-a81e-94bf6e8119ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:73:71:27:76:2a:51:11:26:b1:66:22:24: ef:1a:05:bf:f6:4f:06:d5:cd:2e:a0:57:2a:c2:10: 50:a8:6e:57:0a:1a:74:1a:43:42:83:d0:29:88:4b: 76:d9:2b:3c:9d:ce:a4:9e:7c:9f:20:ff:1d:bf:9c: 80:cb:7b:99:30:fb:71:e8:07:27:1b:de:ad:3b:64: 6d:be:fb:81:64:20:6a:6f:3d:fd:fe:96:fb:e7:84: 17:cc:f9:3d:20:ee:d4:9f:10:c0:10:65:37:6b:df: 50:86:72:87:17:be:a1:85:d6:0a:1b:73:bf:8d:01: 86:eb:9b:f2:f7:75:c1:29:ee:62:2d:25:9a:e8:3c: 07:d1:91:01:8c:7b:16:3a:49:12:39:9a:7a:33:42: 2b:13:b4:c8:c7:e7:b4:e3:34:88:db:a3:2f:fe:e3: 58:c6:f2:02:4b:ce:08:cc:58:4e:39:62:d0:80:af: 10:7f:47:14:19:85:11:10:d9:9c:f5:c2:08:b1:8d: 3d:a3:5e:70:ed:1b:37:62:eb:2d:38:ba:1c:76:0b: 7c:57:d2:c5:a3:5d:18:d0:de:14:2b:66:5e:a3:3b: c5:4e:17:c9:86:96:59:c0:d2:41:be:a0:b3:d6:cd: e4:19:a6:00:76:8c:7a:df:5d:34:03:d7:48:e5:71: 76:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F4:80:4F:30:45:C1:12:90:3D:C8:E7:A7:84:6D:18:A8:70:D3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/4f1c7b6d-8473-3b05-a097-e90b27e8c142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.crl X509v3 Authority Key Identifier: keyid:50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer sbgp-ipAddrBlock: critical IPv4: 198.167.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3c:58:01:bb:0f:d1:a5:9c:c6:de:7a:9e:37:ff:22:02:fc: 76:3e:1d:87:bb:c6:ee:55:24:a6:da:02:e6:d2:32:07:98:52: e7:81:e0:f8:48:54:d8:4a:36:d1:10:e7:a0:71:10:de:ed:d4: a3:c3:2b:f7:b5:48:9c:4d:a5:b0:40:ff:62:2a:c7:4e:a1:b2: dc:77:6f:34:d6:7f:61:70:59:d2:94:be:64:52:07:c1:2f:d9: 2f:1b:6d:77:f8:aa:5b:9e:07:40:9d:27:26:4c:6a:a4:28:37: 9e:cf:dd:11:9c:e6:29:3a:8a:fb:86:04:33:eb:ce:e5:5e:4e: b6:7c:e4:1f:59:27:67:df:41:bf:51:a0:4c:e3:07:fc:6c:c4: 1d:42:c0:cb:19:41:34:e9:bd:cf:fe:b8:b0:d4:d0:0d:eb:2c: 1e:48:4c:f2:0c:b8:2f:db:ac:86:98:a5:85:7f:ae:3e:48:b5: d8:a1:1e:69:6b:3e:36:13:f7:db:bd:68:c5:f4:94:78:80:0b: 32:0f:2b:83:a4:8e:ad:e7:01:f0:c3:34:3e:49:cf:1e:5c:99: 37:db:b9:8d:ca:a6:ae:af:f5:d4:24:c3:e1:c7:92:13:8e:70: a0:94:65:8c:ac:35:0d:51:58:45:36:30:a5:49:b1:cb:76:af: a2:95:d2:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6d4p2nx0rfx8zOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAxMWU2NGMtN2M5Yy00MjQ5LTg3YWItYzY2ZTIwNzYx MjBlMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk ZTNjOTkzYzUtMzg3Zi00OWZmLWE4MWUtOTRiZjZlODExOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmftzcSd2KlERJrFmIiTvGgW/9k8G1c0uoFcq whBQqG5XChp0GkNCg9ApiEt22Ss8nc6knnyfIP8dv5yAy3uZMPtx6AcnG96tO2Rt vvuBZCBqbz39/pb754QXzPk9IO7UnxDAEGU3a99QhnKHF76hhdYKG3O/jQGG65vy 93XBKe5iLSWa6DwH0ZEBjHsWOkkSOZp6M0IrE7TIx+e04zSI26Mv/uNYxvICS84I zFhOOWLQgK8Qf0cUGYURENmc9cIIsY09o15w7Rs3YustOLocdgt8V9LFo10Y0N4U K2ZeozvFThfJhpZZwNJBvqCz1s3kGaYAdox63100A9dI5XF2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP0gE8wRcESkD3I56eEbRiocNMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDEx ZTY0Yy03YzljLTQyNDktODdhYi1jNjZlMjA3NjEyMGUvNGYxYzdiNmQtODQ3My0z YjA1LWEwOTctZTkwYjI3ZThjMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjAxMWU2NGMtN2M5Yy00MjQ5LTg3 YWItYzY2ZTIwNzYxMjBlLzIwMTFlNjRjLTdjOWMtNDI0OS04N2FiLWM2NmUyMDc2 MTIwZS5jcmwwHwYDVR0jBBgwFoAUUDZdYSfSvJP81d6moDBM+w7Tk20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDExZTY0Yy03YzljLTQyNDktODdhYi1jNjZl MjA3NjEyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ8WAG7D9GlnMbeep43/yIC/HY+HYe7xu5VJKbaAubSMgeYUueB4PhI VNhKNtEQ56BxEN7t1KPDK/e1SJxNpbBA/2Iqx06hstx3bzTWf2FwWdKUvmRSB8Ev 2S8bbXf4qlueB0CdJyZMaqQoN57P3RGc5ik6ivuGBDPrzuVeTrZ85B9ZJ2ffQb9R oEzjB/xsxB1CwMsZQTTpvc/+uLDU0A3rLB5ITPIMuC/brIaYpYV/rj5ItdihHmlr PjYT99u9aMX0lHiACzIPK4Okjq3nAfDDND5Jzx5cmTfbuY3Kpq6v9dQkw+HHkhOO cKCUZYysNQ1RWEU2MKVJsct2r6KV0hk= -----END CERTIFICATE-----Generated at Mon Apr 28 14:01:01 2025 by rpki-client