$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa File: d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa (raw, json) Hash identifier: IRAUse0WbcVsoEbZ3vl+mBptxqCw4PgY+i9gxaqF2dA= Subject key identifier: 8C:36:22:F6:0F:C5:37:A7:3D:3A:6A:44:C3:31:95:7B:B9:24:A0:B6 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F43285849446934F40C2B36185C76C200 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 2495 IP address blocks: 198.248.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:34:f4:0c:2b:36:18:5c:76:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=70814a4f-bbbc-4057-8d2f-dbb19baa8fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5b:97:d3:7f:00:bc:a1:d4:64:7f:2e:41:b7: 2b:fb:99:39:a0:f0:4b:af:bb:84:10:da:74:6d:2f: 8f:93:55:41:45:7e:27:87:ad:65:43:ba:80:b1:a0: 57:62:5e:2c:04:4f:dc:a1:1c:2f:7a:df:16:62:d7: 2d:af:bf:22:83:5a:12:f4:cb:f0:61:ce:71:47:fe: 1a:12:f6:49:dd:a6:12:24:86:eb:db:f5:dd:09:0a: f3:ca:40:c5:0a:f2:59:9e:a2:dd:cd:82:f7:5f:39: 24:08:aa:a3:ff:82:e8:07:9f:f4:84:3c:56:c0:8d: ec:7e:db:33:59:16:cd:0a:fd:02:9c:3f:03:51:01: db:57:ae:7d:c9:44:ee:78:28:7d:ab:00:5d:49:d5: c1:c9:a8:3e:fe:74:d3:0a:fc:76:36:6c:09:61:29: 63:db:7f:52:5c:8e:12:86:9f:33:2d:61:26:d6:7a: df:4c:4b:fe:50:49:da:b7:b6:b0:1f:6e:c3:a0:ee: fc:3e:54:01:cc:e5:82:11:2a:42:e3:dd:d7:b8:9f: e1:3c:27:43:b5:8c:93:61:99:58:01:bd:85:3a:5e: 37:73:0c:f7:75:c6:9b:14:ee:a9:3f:cd:86:3f:eb: b6:96:83:02:d0:b9:d8:1d:b8:29:61:f5:27:0c:99: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:22:F6:0F:C5:37:A7:3D:3A:6A:44:C3:31:95:7B:B9:24:A0:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1e:f7:86:67:fc:4e:e8:54:c4:92:e3:89:3d:c8:ee:47:06: e9:f7:1b:ed:c6:68:48:d9:b8:b9:77:c5:9b:22:c2:b3:2c:da: e4:ec:17:aa:0a:46:6c:c9:5a:aa:db:f3:96:84:e8:dc:94:9b: e4:e7:3f:c2:8d:c9:c7:d2:cc:fb:e6:1e:0d:13:c2:8b:8d:7c: 70:7f:cc:d2:2c:aa:e5:b2:e6:c0:18:cc:a4:5c:8d:82:ff:83: ee:6c:b0:24:7c:a6:70:27:4a:0a:7c:a4:88:84:b7:8d:84:d1: ff:95:1a:fb:bb:f3:62:af:b3:1f:fd:e5:19:01:a9:5b:5f:97: df:08:2d:1c:1a:f0:f5:be:69:df:c9:f5:11:46:e8:d7:bc:b7: 03:32:e8:b2:6e:58:9b:e4:95:20:72:1b:86:6b:d1:b8:6b:9c: d1:22:a9:68:b3:27:45:86:0d:4c:02:9a:10:dd:31:c0:31:56: da:2d:2e:00:94:8c:b8:2c:63:f1:d9:b1:1c:87:b9:c2:11:1c: f0:80:6c:2b:dc:ac:bb:13:ca:f6:29:41:45:02:85:e3:44:2c: ee:58:3f:f6:a2:d1:7d:fc:3a:40:54:1a:52:3c:d1:72:b5:cc: 20:7f:cb:d8:fc:ce:0e:5a:96:55:6a:5d:b3:a4:1e:81:f2:5f: 18:1b:fe:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTT0DCs2GFx2wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NzA4MTRhNGYtYmJiYy00MDU3LThkMmYtZGJiMTliYWE4ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1uX038AvKHUZH8uQbcr+5k5oPBLr7uEENp0 bS+Pk1VBRX4nh61lQ7qAsaBXYl4sBE/coRwvet8WYtctr78ig1oS9MvwYc5xR/4a EvZJ3aYSJIbr2/XdCQrzykDFCvJZnqLdzYL3XzkkCKqj/4LoB5/0hDxWwI3sftsz WRbNCv0CnD8DUQHbV659yUTueCh9qwBdSdXByag+/nTTCvx2NmwJYSlj239SXI4S hp8zLWEm1nrfTEv+UEnat7awH27DoO78PlQBzOWCESpC493XuJ/hPCdDtYyTYZlY Ab2FOl43cwz3dcabFO6pP82GP+u2loMC0LnYHbgpYfUnDJlksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw2IvYPxTenPTpqRMMxlXu5JKC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZDVlNmZiNGUtZmY4MC0z ODY3LWE1MDItZWJhYTZlMDUwNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4e94Zn/E7oVMSS44k9yO5HBun3G+3GaEjZuLl3xZsiwrMs2uTsF6oK RmzJWqrb85aE6NyUm+TnP8KNycfSzPvmHg0TwouNfHB/zNIsquWy5sAYzKRcjYL/ g+5ssCR8pnAnSgp8pIiEt42E0f+VGvu782Kvsx/95RkBqVtfl98ILRwa8PW+ad/J 9RFG6Ne8twMy6LJuWJvklSByG4Zr0bhrnNEiqWizJ0WGDUwCmhDdMcAxVtotLgCU jLgsY/HZsRyHucIRHPCAbCvcrLsTyvYpQUUCheNELO5YP/ai0X38OkBUGlI80XK1 zCB/y9j8zg5allVqXbOkHoHyXxgb/kA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:01:58 2025 by rpki-client