$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa File: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json) Hash identifier: MmeMCbZwpq7fWgYNSsYkHEgxiYNaG10TfXAKlodT+4A= Subject key identifier: A3:65:B0:4E:C2:B6:A5:78:69:5E:80:50:D0:75:4A:75:28:19:C1:BC Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584909E6A48918A76DCDDD21AF00 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 40583 IP address blocks: 198.236.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a4:89:18:a7:6d:cd:dd:21:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=bf2980ed-5dcf-4bc1-914a-e316171b66d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:9b:1f:42:b3:88:98:37:c3:05:fa:16:e6: a3:fb:12:fb:55:8a:3e:55:4a:19:35:27:87:a0:55: 0f:d8:9a:df:70:d6:ad:84:65:fe:83:e0:4d:6e:4a: 52:e2:bb:5e:86:b8:2d:36:b0:0c:0b:6d:49:6c:ec: 32:68:2c:35:b8:28:65:ae:53:a5:fc:fe:1c:01:41: f3:8a:d4:2d:d1:1a:db:3d:d7:d1:c0:ab:3e:5b:0d: c1:81:65:15:6f:1b:36:5d:be:95:8e:4a:7e:48:bb: 0e:ef:4f:13:5e:36:f4:9f:2c:45:f2:3f:6a:c7:9c: 7c:5f:94:90:fa:8c:cb:d7:d8:0c:b5:40:dc:8f:0d: d5:0b:48:d4:94:ca:d2:c0:1d:28:e2:ae:a8:e2:82: d8:be:c6:c9:e6:73:8c:cb:a1:2c:c0:45:66:3a:c7: b9:8b:96:08:49:d1:16:23:e8:10:8a:d5:48:5c:1f: 77:67:2c:d5:6d:00:d8:7f:79:9a:0c:1e:f0:c6:c6: 20:74:5d:d4:ba:c1:dc:50:e5:2a:fc:16:f0:f8:0b: e4:d2:d1:76:5e:bd:0f:c0:49:88:2e:0d:7d:ed:83: 42:69:8c:37:82:5e:eb:1a:bb:9e:0c:d4:d4:ee:44: 10:f9:95:b4:a7:28:e1:78:6f:56:3b:e5:43:ed:d9: 21:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:B0:4E:C2:B6:A5:78:69:5E:80:50:D0:75:4A:75:28:19:C1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: 198.236.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:d9:e8:d5:21:db:b8:04:10:bf:22:18:43:23:1d:bd:5d: 3c:cb:59:02:aa:77:6c:34:3b:b4:9d:11:49:55:10:49:19:33: a4:67:c5:54:cc:32:0f:aa:f9:cc:60:03:c7:31:c7:51:5e:99: 85:d0:27:39:15:02:28:e0:bc:5d:46:93:f5:b5:01:97:e4:e9: ec:96:91:61:cc:cb:fe:c3:3e:c7:95:55:6f:cf:20:70:e0:19: 58:10:ef:48:0a:fb:8c:68:61:8c:c5:af:6b:49:8d:23:2d:66: 8a:01:0e:4a:44:26:34:15:16:81:2e:34:56:39:b3:c4:02:8b: 55:4d:2e:b8:0e:b3:84:fb:5b:c6:8b:ee:7c:4b:51:3c:d4:9a: 91:f1:cb:fb:fe:e4:6d:79:9a:91:9f:e2:68:6e:bb:bb:7c:ee: 51:32:7c:da:c8:14:92:8f:af:1d:2a:ad:ea:53:08:a5:c5:43: 75:bd:0f:69:ab:54:57:5a:6a:bf:38:e3:ff:df:29:08:2b:1f: ce:fe:aa:db:9a:bd:13:07:d2:5b:2b:d8:c6:7a:69:eb:f6:9e: 73:5e:07:1e:87:82:18:f0:d2:09:fd:22:2a:b9:19:3e:9a:37: b2:84:c4:f6:8e:1b:de:81:25:c6:93:b1:1c:f7:12:6a:bc:58: c4:44:88:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qSJGKdtzd0hrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YmYyOTgwZWQtNWRjZi00YmMxLTkxNGEtZTMxNjE3MWI2NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqybH0KziJg3wwX6Fuaj+xL7VYo+VUoZNSeH oFUP2JrfcNathGX+g+BNbkpS4rtehrgtNrAMC21JbOwyaCw1uChlrlOl/P4cAUHz itQt0RrbPdfRwKs+Ww3BgWUVbxs2Xb6Vjkp+SLsO708TXjb0nyxF8j9qx5x8X5SQ +ozL19gMtUDcjw3VC0jUlMrSwB0o4q6o4oLYvsbJ5nOMy6EswEVmOse5i5YISdEW I+gQitVIXB93ZyzVbQDYf3maDB7wxsYgdF3UusHcUOUq/Bbw+Avk0tF2Xr0PwEmI Lg197YNCaYw3gl7rGrueDNTU7kQQ+ZW0pyjheG9WO+VD7dkhHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNlsE7CtqV4aV6AUNB1SnUoGcG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNDM5ZWU0NGQtMmY2My0z YzBlLTgwZGUtN2FkN2Y3Y2I2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETC2ejVIdu4BBC/IhhDIx29XTzLWQKqd2w0O7SdEUlVEEkZM6RnxVTM Mg+q+cxgA8cxx1FemYXQJzkVAijgvF1Gk/W1AZfk6eyWkWHMy/7DPseVVW/PIHDg GVgQ70gK+4xoYYzFr2tJjSMtZooBDkpEJjQVFoEuNFY5s8QCi1VNLrgOs4T7W8aL 7nxLUTzUmpHxy/v+5G15mpGf4mhuu7t87lEyfNrIFJKPrx0qrepTCKXFQ3W9D2mr VFdaar844//fKQgrH87+qtuavRMH0lsr2MZ6aev2nnNeBx6Hghjw0gn9Iiq5GT6a N7KExPaOG96BJcaTsRz3Emq8WMREiCQ= -----END CERTIFICATE-----Generated at Mon Apr 28 15:18:05 2025 by rpki-client