$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa File: f3cb9022-330e-342b-b144-37ac3a7fc90d.roa (raw, json) Hash identifier: RVEP5YADRYaSY+U55nwlVOps98ih2EI0+BoUw6XAA/s= Subject key identifier: 55:3D:12:49:31:00:08:C1:B0:91:5D:46:7C:E4:4F:D5:83:2E:8A:D9 Certificate issuer: /CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507 Certificate serial: 010D0C9F432858498B99D12D306CB32B3B097000 Authority key identifier: 8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 271 IP address blocks: 198.162.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d1:2d:30:6c:b3:2b:3b:09:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=60993e71-798c-4a0e-b3e9-c0171cbf623e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:df:9c:74:dd:2c:0c:bb:1f:90:b4:d7:b3:ae: fe:fb:6d:f1:39:ab:bb:00:02:7b:a7:b1:8c:21:d4: 7b:d4:43:0a:ef:6d:12:09:9e:99:d7:cd:5b:eb:ba: bd:1e:45:8b:53:4f:fc:b2:a0:09:e1:82:36:17:a3: b9:2d:47:6d:d7:01:e1:e9:2b:73:cf:f5:ee:d3:ca: 59:a6:e5:b6:29:52:dc:9b:7d:b2:43:05:ed:7a:e1: 03:2b:6d:2c:f5:cc:e8:08:1e:bf:67:25:50:6d:ed: d9:7b:5c:a7:fd:5e:cc:13:24:41:54:1c:e7:0a:eb: 5c:6c:01:54:05:b2:c9:32:16:31:d2:bb:b3:3d:d4: 33:57:fa:e2:86:b1:aa:a6:cb:cc:aa:8f:e1:a8:01: 1c:65:fd:07:ca:9b:0b:b3:2d:ed:c4:08:39:22:e9: 07:60:d7:0b:77:61:d4:30:4e:c8:20:32:c2:db:c5: d7:34:a6:bc:fe:34:44:fd:45:12:ba:c2:70:87:41: 81:1c:41:cf:23:df:9d:52:cc:96:dc:54:f7:2c:ed: d8:24:ab:05:22:cf:19:7f:bf:bb:55:8d:0b:ca:d0: 31:24:39:95:77:3f:7b:c2:5f:4c:a4:5f:26:00:ae: 96:9c:d0:75:29:37:70:9a:0a:24:6b:83:36:49:03: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3D:12:49:31:00:08:C1:B0:91:5D:46:7C:E4:4F:D5:83:2E:8A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl X509v3 Authority Key Identifier: keyid:8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer sbgp-ipAddrBlock: critical IPv4: 198.162.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c0:ba:d5:b7:07:60:ba:cd:5f:77:dd:a8:2e:4b:73:e3:80: 97:76:e8:9e:6e:34:cc:3a:6e:3e:d2:af:be:2d:62:46:f3:1a: 43:6c:5d:35:20:ed:62:c2:45:0d:63:d3:74:d5:dd:92:e3:4f: 53:87:b4:2c:4f:fd:bd:52:bc:a6:d1:06:bd:95:42:d7:cf:4d: 3b:4c:ad:3d:ad:56:b1:42:c1:ec:a4:f1:20:33:9f:ba:9c:12: af:ba:87:3e:9b:3c:6e:20:36:4e:92:32:43:ca:45:5f:ed:ab: 81:07:07:c1:34:ec:0c:1e:87:b2:85:05:df:25:98:0c:1d:b8: 4d:c0:3f:44:d8:c2:c0:cf:93:34:cd:4e:a5:64:2e:b8:f0:8d: 0a:9b:e9:e6:59:f4:ac:5e:79:1c:18:ac:0c:01:fb:33:8d:1a: 64:55:60:e2:94:b2:e8:e5:1b:9b:cc:f8:3c:13:b3:bf:35:9b: d0:3b:87:91:f3:b1:83:dc:55:1f:15:34:72:b7:a8:2a:86:77: 9f:4a:23:62:80:65:ca:5f:c2:bf:10:a9:de:98:f9:a3:06:7f: fd:80:1f:a3:ba:55:c1:00:28:bd:09:54:86:fe:46:18:f1:29: 43:67:ea:fd:28:09:ac:8e:2c:79:ce:1e:05:28:64:ad:ad:92: f2:78:66:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmdEtMGyzKzsJcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjMTBkYTEtMGIxMy00NmY1LTgwZTMtYjNmOTE2NWM1 NTA3MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk NjA5OTNlNzEtNzk4Yy00YTBlLWIzZTktYzAxNzFjYmY2MjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39+cdN0sDLsfkLTXs67++23xOau7AAJ7p7GM IdR71EMK720SCZ6Z181b67q9HkWLU0/8sqAJ4YI2F6O5LUdt1wHh6Stzz/Xu08pZ puW2KVLcm32yQwXteuEDK20s9czoCB6/ZyVQbe3Ze1yn/V7MEyRBVBznCutcbAFU BbLJMhYx0ruzPdQzV/rihrGqpsvMqo/hqAEcZf0HypsLsy3txAg5IukHYNcLd2HU ME7IIDLC28XXNKa8/jRE/UUSusJwh0GBHEHPI9+dUsyW3FT3LO3YJKsFIs8Zf7+7 VY0LytAxJDmVdz97wl9MpF8mAK6WnNB1KTdwmgoka4M2SQMQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU9EkkxAAjBsJFdRnzkT9WDLorZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmMx MGRhMS0wYjEzLTQ2ZjUtODBlMy1iM2Y5MTY1YzU1MDcvZjNjYjkwMjItMzMwZS0z NDJiLWIxNDQtMzdhYzNhN2ZjOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JjMTBkYTEtMGIxMy00NmY1LTgw ZTMtYjNmOTE2NWM1NTA3LzdiYzEwZGExLTBiMTMtNDZmNS04MGUzLWIzZjkxNjVj NTUwNy5jcmwwHwYDVR0jBBgwFoAUjWGxRZQ8//5FpuP5OiOxHB4D7xcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmMxMGRhMS0wYjEzLTQ2ZjUtODBlMy1iM2Y5 MTY1YzU1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzAutW3B2C6zV933aguS3PjgJd26J5uNMw6bj7Sr74tYkbzGkNsXTUg 7WLCRQ1j03TV3ZLjT1OHtCxP/b1SvKbRBr2VQtfPTTtMrT2tVrFCweyk8SAzn7qc Eq+6hz6bPG4gNk6SMkPKRV/tq4EHB8E07Aweh7KFBd8lmAwduE3AP0TYwsDPkzTN TqVkLrjwjQqb6eZZ9KxeeRwYrAwB+zONGmRVYOKUsujlG5vM+DwTs781m9A7h5Hz sYPcVR8VNHK3qCqGd59KI2KAZcpfwr8Qqd6Y+aMGf/2AH6O6VcEAKL0JVIb+Rhjx KUNn6v0oCayOLHnOHgUoZK2tkvJ4Zrw= -----END CERTIFICATE-----Generated at Mon Apr 28 01:22:41 2025 by rpki-client