$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa File: 07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa (raw, json) Hash identifier: G1VWOOlOak/laUpAc64pD+E5ESbG7FoUlaDKa06Doq0= Subject key identifier: 62:9D:73:1C:E3:2D:A5:3B:04:43:08:7F:35:BF:0B:9C:B1:CF:D8:2E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849ABB4ADA30F28A7EAF31B1600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20115 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ad:a3:0f:28:a7:ea:f3:1b:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=fef630f3-f78f-43fe-88ce-2f85b07c5f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:f6:f0:dd:31:3e:0a:f3:e9:c2:f2:31:09: ae:a1:fc:9c:28:7c:ae:79:6c:b5:23:98:65:93:4c: 1c:a5:51:9f:1b:8d:8b:6f:fb:8c:75:9f:b0:90:79: 93:54:97:09:ea:94:d5:62:f1:04:9b:84:6d:03:b4: 81:3a:2d:66:be:14:a1:cb:18:6c:7e:51:31:00:67: 20:0e:d4:7a:d6:9e:fd:05:28:84:56:a8:84:07:05: 25:e4:2e:be:4f:86:c4:a4:f1:b0:96:0a:2c:83:eb: ea:92:89:20:b3:15:06:63:66:8c:b3:ff:9e:3c:1a: f7:37:08:44:89:03:34:3c:5f:47:4a:93:f5:46:69: d9:92:19:ce:2c:9d:59:ef:ea:60:56:58:bb:60:5f: 8c:c3:5d:06:eb:18:90:11:e0:7f:7c:e3:92:60:78: 42:97:1f:ca:6e:1e:f8:9c:f6:78:5d:8a:65:1e:55: 5f:54:0b:10:04:04:58:2a:b6:23:4b:28:93:55:b2: 11:56:1b:03:2b:d3:c1:9e:d9:0b:7b:81:74:f0:c3: b7:4d:bb:ed:7b:da:1e:a4:41:b1:c4:64:f4:b0:c3: 27:1b:f8:a0:75:00:40:b5:47:2f:e0:5f:b2:68:3f: c6:13:cc:1b:42:78:36:68:dd:bd:59:da:14:b7:30: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9D:73:1C:E3:2D:A5:3B:04:43:08:7F:35:BF:0B:9C:B1:CF:D8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d7:16:6c:49:3c:a8:0f:35:cd:fb:e4:60:d8:b9:ea:3c:21: 83:f7:90:16:9b:b1:e9:48:e9:4d:1c:ad:ce:ab:c4:1f:7c:39: 7b:c9:c2:93:ae:59:8e:35:14:eb:89:f8:60:92:33:aa:5d:65: 61:6f:90:87:2f:b8:72:58:5b:e9:9c:17:2c:5a:b4:a0:4b:95: ea:bd:50:ff:12:ba:ff:89:20:31:cc:f0:63:8f:7e:f9:cb:c9: 96:59:bd:41:6a:12:62:6d:95:5a:65:16:3f:f7:70:ee:9c:1e: 84:43:cf:a7:00:ef:e0:d6:aa:4e:9a:44:0e:1d:04:4b:c8:25: fc:d7:b1:68:db:7f:c3:00:44:1b:d2:1a:4c:82:02:72:b8:2d: bd:77:15:09:1b:1e:ea:33:b4:eb:1d:03:ea:7e:87:cc:da:a6: d3:b3:b4:f6:ad:e9:d1:ba:69:50:02:cf:bc:14:ce:d1:b9:33: 7a:0f:93:3f:c5:1d:1d:d0:b7:c4:80:4c:b2:32:47:01:22:c7: b4:ed:52:15:02:51:1a:90:17:10:a2:79:5e:28:f8:80:7c:23: 92:e3:b3:62:50:5c:61:14:a0:9d:66:dd:0d:4d:4d:44:b1:11: 02:88:9d:ad:b3:9b:1a:4d:40:80:12:0e:e4:d0:fb:79:6a:b2: a1:02:c8:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmrtK2jDyin6vMbFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmVmNjMwZjMtZjc4Zi00M2ZlLTg4Y2UtMmY4NWIwN2M1ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCj28N0xPgrz6cLyMQmuofycKHyueWy1I5hl k0wcpVGfG42Lb/uMdZ+wkHmTVJcJ6pTVYvEEm4RtA7SBOi1mvhShyxhsflExAGcg DtR61p79BSiEVqiEBwUl5C6+T4bEpPGwlgosg+vqkokgsxUGY2aMs/+ePBr3NwhE iQM0PF9HSpP1RmnZkhnOLJ1Z7+pgVli7YF+Mw10G6xiQEeB/fOOSYHhClx/Kbh74 nPZ4XYplHlVfVAsQBARYKrYjSyiTVbIRVhsDK9PBntkLe4F08MO3Tbvte9oepEGx xGT0sMMnG/igdQBAtUcv4F+yaD/GE8wbQng2aN29WdoUtzDZXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGKdcxzjLaU7BEMIfzW/C5yxz9guMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDdhMjY1ZDktYWI3Ni0z YzZiLTllMzEtMDUzOTdlM2JkMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAX9cWbEk8qA81zfvkYNi56jwhg/eQFpux6UjpTRytzqvEH3w5e8nCk65Z jjUU64n4YJIzql1lYW+Qhy+4clhb6ZwXLFq0oEuV6r1Q/xK6/4kgMczwY49++cvJ llm9QWoSYm2VWmUWP/dw7pwehEPPpwDv4NaqTppEDh0ES8gl/NexaNt/wwBEG9Ia TIICcrgtvXcVCRse6jO06x0D6n6HzNqm07O09q3p0bppUALPvBTO0bkzeg+TP8Ud HdC3xIBMsjJHASLHtO1SFQJRGpAXEKJ5Xij4gHwjkuOzYlBcYRSgnWbdDU1NRLER AoidrbObGk1AgBIO5ND7eWqyoQLIgA== -----END CERTIFICATE-----Generated at Mon Apr 28 14:24:29 2025 by rpki-client