$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa File: 8bc8180d-ca82-3197-a1df-9a917b8db27b.roa (raw, json) Hash identifier: ShW5SAFXnxmOh9j4pi37pEEb8ph+fpKgiv80mkP0ID8= Subject key identifier: FF:CC:31:3A:1D:1A:6E:A2:A6:62:B4:1A:F9:03:F7:30:7A:9F:60:77 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F43285849446934A3D247F033B4FBA580 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 2495 IP address blocks: 198.248.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:34:a3:d2:47:f0:33:b4:fb:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=324a26f1-461a-4af1-a7f7-d848339b848c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:b3:25:07:d7:56:b5:aa:31:98:7e:64:20: 10:19:e7:7a:28:11:d1:5d:17:f4:4e:42:41:95:45: dd:67:cc:4b:8f:03:c3:87:e3:da:a3:1b:7b:d2:fb: 59:ed:cf:1d:23:04:d6:d1:25:8f:4b:01:37:e2:92: 7b:1d:0a:9a:09:02:0b:db:c1:e6:44:ae:1f:e4:d4: 8f:45:d4:9f:58:98:1a:8a:91:e2:11:3d:af:f1:f3: 41:46:25:5b:ea:2d:7a:00:14:72:51:4a:ed:cc:0f: 35:27:08:a7:64:0a:c4:7b:d2:7f:5f:0a:07:10:8a: 50:f6:44:f7:f5:17:a4:7e:5b:39:14:24:64:96:c8: bf:bf:9c:44:fc:75:02:b3:39:29:77:78:9e:e0:73: 19:c8:34:b9:cf:13:c0:b2:34:5e:18:b0:bf:0c:01: b5:1e:c8:d4:97:89:19:ec:15:9c:9f:33:2b:7b:7b: c3:58:d6:97:87:48:37:c1:68:96:c9:fa:0c:35:c9: e9:7d:38:ed:19:69:a2:b2:fd:be:22:9f:bd:70:1b: 16:f1:ed:c5:c5:12:6b:80:07:3a:f9:ba:96:2c:d2: 66:2d:3b:ab:1e:25:d1:65:a1:fc:62:f1:50:ae:69: 05:f3:46:6c:bb:2c:61:84:01:df:64:3a:5e:aa:cd: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CC:31:3A:1D:1A:6E:A2:A6:62:B4:1A:F9:03:F7:30:7A:9F:60:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b1:27:fb:a1:1e:04:ec:a2:72:bd:c9:22:68:0b:f7:59:28: a7:97:ad:51:eb:3a:f5:38:9c:27:d9:93:08:81:cf:99:f8:7c: 4d:7d:c4:71:de:27:08:19:d3:8c:83:1c:e0:59:d6:54:e4:b2: 18:e6:84:0b:02:bf:16:40:0d:ba:d7:1c:90:dc:93:7f:b7:5a: 61:f8:d9:6e:cf:a5:28:fe:d3:b9:61:3c:43:f1:51:44:f8:9e: a4:76:e0:66:28:a3:e8:5e:27:82:84:56:7e:31:36:f4:d8:db: f1:1b:86:df:35:b7:b8:78:4b:4d:05:b4:d2:9c:84:e1:d2:7b: 68:50:d4:7f:ec:54:a9:69:75:71:e1:bc:69:30:1f:66:1c:fb: 1e:91:38:f8:43:f9:3f:7d:58:d0:cd:5c:df:00:6a:d0:9e:c8: 6c:dd:23:ac:f0:99:ec:ba:23:c3:2a:c1:bd:1e:74:b9:3d:3a: dc:8f:1e:f1:94:8a:e0:21:14:d7:f8:eb:55:c9:a9:39:9a:58: 0b:24:ef:18:f6:25:72:20:38:d3:d3:3f:2d:cd:ba:c6:77:e8: 7f:c5:d3:c0:14:36:5d:11:41:76:d6:43:6a:94:83:1c:70:3e: b5:24:67:8e:d8:ff:67:14:b8:2c:4e:b3:70:09:e6:52:67:bf: a9:16:38:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTSj0kfwM7T7pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MzI0YTI2ZjEtNDYxYS00YWYxLWE3ZjctZDg0ODMzOWI4NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+yzJQfXVrWqMZh+ZCAQGed6KBHRXRf0TkJB lUXdZ8xLjwPDh+Paoxt70vtZ7c8dIwTW0SWPSwE34pJ7HQqaCQIL28HmRK4f5NSP RdSfWJgaipHiET2v8fNBRiVb6i16ABRyUUrtzA81JwinZArEe9J/XwoHEIpQ9kT3 9Rekfls5FCRklsi/v5xE/HUCszkpd3ie4HMZyDS5zxPAsjReGLC/DAG1HsjUl4kZ 7BWcnzMre3vDWNaXh0g3wWiWyfoMNcnpfTjtGWmisv2+Ip+9cBsW8e3FxRJrgAc6 +bqWLNJmLTurHiXRZaH8YvFQrmkF80ZsuyxhhAHfZDpeqs2jBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/MMTodGm6ipmK0GvkD9zB6n2B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvOGJjODE4MGQtY2E4Mi0z MTk3LWExZGYtOWE5MTdiOGRiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6xJ/uhHgTsonK9ySJoC/dZKKeXrVHrOvU4nCfZkwiBz5n4fE19xHHe JwgZ04yDHOBZ1lTkshjmhAsCvxZADbrXHJDck3+3WmH42W7PpSj+07lhPEPxUUT4 nqR24GYoo+heJ4KEVn4xNvTY2/Ebht81t7h4S00FtNKchOHSe2hQ1H/sVKlpdXHh vGkwH2Yc+x6ROPhD+T99WNDNXN8AatCeyGzdI6zwmey6I8Mqwb0edLk9OtyPHvGU iuAhFNf461XJqTmaWAsk7xj2JXIgONPTPy3NusZ36H/F08AUNl0RQXbWQ2qUgxxw PrUkZ47Y/2cUuCxOs3AJ5lJnv6kWOI8= -----END CERTIFICATE-----Generated at Mon Apr 28 21:44:55 2025 by rpki-client