$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa File: fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa (raw, json) Hash identifier: 2aSMOzbgab1d8nbmiecqaxv9I5lcrzp9UF6sVw0o5+g= Subject key identifier: 76:84:1F:48:87:68:96:3B:13:42:79:CC:85:87:E3:CD:9F:03:65:BF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584965BA7A271874DC3EA6067900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa Signing time: Wed 02 Apr 2025 23:26:12 +0000 ROA not before: Wed 02 Apr 2025 23:26:12 +0000 ROA not after: Tue 01 Jul 2025 23:26:12 +0000 asID: 401152 IP address blocks: 198.20.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:ba:7a:27:18:74:dc:3e:a6:06:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 2 23:26:12 2025 GMT Not After : Jul 1 23:26:12 2025 GMT Subject: CN=2d7cb6d6-1d99-4c53-bc3d-61e92c2c3ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:9b:98:28:f9:fb:7b:b2:f7:5c:18:af:cb: 95:31:ad:82:b9:34:fd:3f:85:05:89:48:dd:b7:1f: cc:c6:71:d1:99:af:b7:18:ad:c8:58:7f:f5:81:3c: ec:5f:45:d8:12:c2:b8:ce:f2:6a:c3:3c:c3:65:b5: c2:81:ce:a4:7d:1e:c5:1e:6d:e7:54:c9:85:47:d3: 99:22:96:f6:eb:52:2b:d7:57:7f:a5:62:b8:a9:52: 78:2d:d3:0a:f0:fc:f4:83:89:88:70:73:e2:72:d2: 39:58:8e:34:50:8d:2c:8b:84:be:49:1c:32:19:70: 63:b8:c9:ec:ec:f1:de:53:cb:35:4c:72:93:a5:85: 9f:46:b5:6a:4c:9b:50:fd:5f:99:04:fc:c2:19:b2: 3d:66:f2:b2:91:72:d5:da:54:55:74:10:7e:92:c5: d4:5f:90:38:12:03:bd:aa:39:95:83:c7:ad:4b:20: 56:e1:ee:3e:67:18:2c:1b:78:a9:af:8b:6a:2b:fb: b2:34:ca:54:9d:96:7a:11:ab:9d:28:6c:0a:35:c9: df:1a:ab:60:e0:55:ae:9c:af:3e:72:d6:76:3f:23: 56:70:c4:ee:5f:1f:54:cc:be:6e:58:10:68:05:af: 96:e3:57:08:19:d0:15:7a:0b:b5:14:91:8e:5e:a8: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:1F:48:87:68:96:3B:13:42:79:CC:85:87:E3:CD:9F:03:65:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb33ff8c-105d-39ed-90ee-4e7cc628ad19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f8:48:a8:36:46:9c:6b:0a:e7:fb:b7:73:4d:b3:e7:e3:da: 5f:8b:eb:e3:1d:c4:fc:85:1a:92:dd:93:4d:91:f1:59:f2:52: b1:ae:9c:45:10:2d:3b:f3:61:2a:28:95:e7:45:86:6c:c4:17: 17:b8:25:a3:af:66:ac:f9:b6:88:65:ca:73:6a:a2:24:62:fd: 3d:68:4d:12:bd:8b:b1:10:b9:54:72:e6:14:ea:fd:1d:ac:c1: 31:11:08:3a:c6:72:6c:01:47:de:20:06:20:0c:e7:0a:2c:3c: fd:a9:bc:9f:67:b1:fe:40:75:bd:81:fa:b4:6e:4b:a4:c4:6c: a2:27:af:f9:aa:d0:28:5e:85:66:14:f2:58:3a:fc:d9:df:0b: 74:50:a2:03:00:c1:e5:6a:f9:fc:92:27:86:e3:d4:7f:d3:2d: a5:61:da:4f:4b:f0:34:ec:a9:52:bb:aa:fb:cf:89:07:d1:88: b8:4d:96:cf:ec:d6:70:97:7a:84:7a:cc:19:0d:a8:33:26:60: 04:24:8d:2c:4a:7e:3b:3d:47:f3:61:89:11:50:a3:75:3c:e3: cd:a2:62:b2:ea:71:86:53:f1:3a:98:64:d8:64:99:28:06:0f: 79:d7:20:5d:7e:cc:70:04:69:78:75:9e:7b:b6:5f:ad:9f:0f: ea:49:e2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEllunonGHTcPqYGeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMjIzMjYxMloXDTI1MDcwMTIzMjYxMlowLzEtMCsGA1UEAxMk MmQ3Y2I2ZDYtMWQ5OS00YzUzLWJjM2QtNjFlOTJjMmMzY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ObmCj5+3uy91wYr8uVMa2CuTT9P4UFiUjd tx/MxnHRma+3GK3IWH/1gTzsX0XYEsK4zvJqwzzDZbXCgc6kfR7FHm3nVMmFR9OZ Ipb261Ir11d/pWK4qVJ4LdMK8Pz0g4mIcHPictI5WI40UI0si4S+SRwyGXBjuMns 7PHeU8s1THKTpYWfRrVqTJtQ/V+ZBPzCGbI9ZvKykXLV2lRVdBB+ksXUX5A4EgO9 qjmVg8etSyBW4e4+ZxgsG3ipr4tqK/uyNMpUnZZ6EaudKGwKNcnfGqtg4FWunK8+ ctZ2PyNWcMTuXx9UzL5uWBBoBa+W41cIGdAVegu1FJGOXqiLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaEH0iHaJY7E0J5zIWH482fA2W/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmIzM2ZmOGMtMTA1ZC0z OWVkLTkwZWUtNGU3Y2M2MjhhZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz4SKg2RpxrCuf7t3NNs+fj2l+L6+MdxPyFGpLdk02R8VnyUrGunEUQ LTvzYSooledFhmzEFxe4JaOvZqz5tohlynNqoiRi/T1oTRK9i7EQuVRy5hTq/R2s wTERCDrGcmwBR94gBiAM5wosPP2pvJ9nsf5Adb2B+rRuS6TEbKInr/mq0ChehWYU 8lg6/NnfC3RQogMAweVq+fySJ4bj1H/TLaVh2k9L8DTsqVK7qvvPiQfRiLhNls/s 1nCXeoR6zBkNqDMmYAQkjSxKfjs9R/NhiRFQo3U8482iYrLqcYZT8TqYZNhkmSgG D3nXIF1+zHAEaXh1nnu2X62fD+pJ4tE= -----END CERTIFICATE-----Generated at Sun Apr 27 12:58:47 2025 by rpki-client