$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa File: 9c31740b-6dee-303e-a41e-afaf27f3c49e.roa (raw, json) Hash identifier: ATeRWFJbzMoRD6bZmPdpt6FZXWXsTUXD1PcvclhFpYE= Subject key identifier: DD:23:B5:81:5E:DD:03:3F:81:EF:7B:FF:5D:94:76:4D:E2:7A:FE:9F Certificate issuer: /CN=461640c3-4830-4680-b242-767100bf2245 Certificate serial: 010D0C9F432858494303F274DF6FCDB477DB2280 Authority key identifier: 1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 62807 IP address blocks: 128.254.168.0/22 maxlen: 24 192.84.255.0/24 maxlen: 24 198.54.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f2:74:df:6f:cd:b4:77:db:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461640c3-4830-4680-b242-767100bf2245 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=5798d7a8-a875-4a00-8190-7e2574fbd3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:d6:74:43:85:64:3f:a8:c4:f6:02:43:29: c2:68:00:f8:fc:80:49:5a:1b:6d:f1:f7:4e:74:c0: 52:e8:86:b5:30:5f:98:76:d1:c1:89:63:08:f3:83: 54:0e:67:05:3c:81:a1:a4:c8:ae:95:b2:04:89:18: 5c:8c:9a:89:fb:62:48:6c:5e:d6:42:44:fa:4e:86: e7:36:13:68:89:cc:61:3b:c0:ca:61:93:f3:fb:38: fb:7f:73:4c:d7:e0:71:34:64:0c:98:63:b3:b7:ea: 99:44:5e:c8:08:04:45:f8:21:27:74:83:db:ba:74: 5a:8d:78:c0:16:0a:c5:f4:da:7e:d7:45:2a:df:f5: d5:5c:8d:e4:eb:7e:f1:d1:c2:e7:6a:91:97:b3:e8: 74:d4:17:fc:0a:56:af:15:67:75:81:c9:2a:19:38: 51:e6:b8:3d:f5:a0:c2:3c:27:9c:95:e4:1e:22:c7: 8f:9d:1c:ba:d9:3f:a7:12:5d:f9:8a:2b:cd:01:0e: 67:88:f8:24:a0:3a:1f:58:c4:eb:2a:59:e1:f2:fd: 62:13:b6:ec:15:90:8f:be:7a:15:96:8d:08:7c:4b: a6:4b:46:18:c1:eb:d2:f9:fe:a7:44:7f:98:1a:c1: 00:b6:ca:f9:06:32:e4:ac:04:4e:f3:ac:cf:4e:a9: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:23:B5:81:5E:DD:03:3F:81:EF:7B:FF:5D:94:76:4D:E2:7A:FE:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.crl X509v3 Authority Key Identifier: keyid:1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer sbgp-ipAddrBlock: critical IPv4: 128.254.168.0/22 192.84.255.0/24 198.54.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:32:39:50:e1:2f:2b:69:80:33:8d:43:b1:76:77:d7:eb:b3: 0c:a5:a6:e1:0c:cf:b7:95:b3:ab:03:76:8a:4d:88:9f:78:68: e8:29:ee:13:72:f7:c5:a9:7b:0b:a5:da:36:1e:81:06:32:6a: 60:64:e7:85:c1:9b:31:63:69:fb:3a:23:ae:c3:ee:d3:30:7d: 8a:11:af:00:e3:19:ef:c1:8c:79:b5:8f:b3:6e:66:05:8f:6b: 8a:8a:9c:fe:5c:3c:a3:7e:d3:a7:db:10:73:01:23:1e:d6:48: 37:76:cf:e9:e4:03:67:74:58:73:1d:be:5c:e9:e7:53:66:21: ff:c7:11:91:0c:20:75:1a:f0:f8:85:c5:7b:8d:12:ec:4f:4e: 9c:98:69:ae:4e:67:27:53:e8:02:fc:30:ae:b5:2c:fe:23:de: 65:7c:cc:aa:39:c3:2a:19:20:0c:61:91:aa:38:3f:8b:2c:87: 9f:2c:2b:ae:89:26:78:8a:92:89:b8:36:87:18:79:96:b8:c6: 05:0e:97:32:d6:30:79:02:1f:83:c2:25:a7:3e:8c:6d:14:55: 07:d1:f8:0b:de:7b:30:31:8d:a7:8f:0d:b2:50:26:a4:d2:38: ad:e1:89:9d:68:ac:e6:5e:33:36:28:96:c2:6a:b9:23:65:62: 8c:83:90:73 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElDA/J032/NtHfbIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYxNjQwYzMtNDgzMC00NjgwLWIyNDItNzY3MTAwYmYy MjQ1MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk NTc5OGQ3YTgtYTg3NS00YTAwLTgxOTAtN2UyNTc0ZmJkM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5fWdEOFZD+oxPYCQynCaAD4/IBJWhtt8fdO dMBS6Ia1MF+YdtHBiWMI84NUDmcFPIGhpMiulbIEiRhcjJqJ+2JIbF7WQkT6Tobn NhNoicxhO8DKYZPz+zj7f3NM1+BxNGQMmGOzt+qZRF7ICARF+CEndIPbunRajXjA FgrF9Np+10Uq3/XVXI3k637x0cLnapGXs+h01Bf8ClavFWd1gckqGThR5rg99aDC PCecleQeIsePnRy62T+nEl35iivNAQ5niPgkoDofWMTrKlnh8v1iE7bsFZCPvnoV lo0IfEumS0YYwevS+f6nRH+YGsEAtsr5BjLkrARO86zPTqnVEwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFN0jtYFe3QM/ge97/12Udk3iev6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NjE2 NDBjMy00ODMwLTQ2ODAtYjI0Mi03NjcxMDBiZjIyNDUvOWMzMTc0MGItNmRlZS0z MDNlLWE0MWUtYWZhZjI3ZjNjNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDYxNjQwYzMtNDgzMC00NjgwLWIy NDItNzY3MTAwYmYyMjQ1LzQ2MTY0MGMzLTQ4MzAtNDY4MC1iMjQyLTc2NzEwMGJm MjI0NS5jcmwwHwYDVR0jBBgwFoAUGoD7/S8Xp8F80Lbt7OI8u30FR7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NjE2NDBjMy00ODMwLTQ2ODAtYjI0Mi03Njcx MDBiZjIyNDUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCgP6oAwQA wFT/AwQAxja2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKoyOVDhLytpgDONQ7F2d9frswylpuEMz7eVs6sD dopNiJ94aOgp7hNy98Wpewul2jYegQYyamBk54XBmzFjafs6I67D7tMwfYoRrwDj Ge/BjHm1j7NuZgWPa4qKnP5cPKN+06fbEHMBIx7WSDd2z+nkA2d0WHMdvlzp51Nm If/HEZEMIHUa8PiFxXuNEuxPTpyYaa5OZydT6AL8MK61LP4j3mV8zKo5wyoZIAxh kao4P4ssh58sK66JJniKkom4NocYeZa4xgUOlzLWMHkCH4PCJac+jG0UVQfR+Ave ezAxjaePDbJQJqTSOK3hiZ1orOZeMzYolsJquSNlYoyDkHM= -----END CERTIFICATE-----Generated at Thu May 1 17:02:08 2025 by rpki-client