$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/c7b39dda-ea98-341d-b061-1d59b768de86.roa File: c7b39dda-ea98-341d-b061-1d59b768de86.roa (raw, json) Hash identifier: KjULk9z3oU8LO+5OO23TAhFbXWgwk0WQyqv+zeMLGmw= Subject key identifier: 42:D9:86:A7:69:52:C5:34:6D:C7:AE:B1:BF:4E:21:0C:E9:10:9A:97 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F43285849002165C2C405DA2752FDFB00 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/c7b39dda-ea98-341d-b061-1d59b768de86.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 611 IP address blocks: 198.164.80.0/24 maxlen: 24 198.164.81.0/24 maxlen: 24 198.164.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:65:c2:c4:05:da:27:52:fd:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=e17747a1-9d5a-438c-a503-a305d45abe43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:76:bf:3b:ff:d7:47:b9:ac:95:da:42:40: 79:b0:37:9d:48:82:c2:13:75:b1:08:19:b1:1e:d7: cc:69:52:d2:08:82:c1:cc:29:93:39:37:dc:70:3a: 11:89:48:22:e9:e5:4f:30:cf:68:7f:48:cf:1e:de: 2d:12:76:57:19:64:ea:91:65:51:62:93:1a:44:0d: 46:e6:46:46:de:28:f2:d3:95:c9:1c:a6:12:7d:f6: d5:e6:37:e6:5e:a2:dd:7b:35:a0:72:c9:74:ad:fa: 55:c1:96:15:f2:13:bd:9d:4d:f0:2e:20:0a:d0:62: 54:63:09:90:10:f8:9b:27:04:a1:3e:4a:9c:6b:67: 84:66:9d:ea:d6:dd:70:a4:fe:77:07:88:09:34:57: d4:08:72:b2:bf:68:54:09:67:35:36:82:b7:a1:7e: 79:ab:29:8c:e0:a2:20:8a:74:c2:f2:13:16:01:f6: 96:29:ec:35:da:e1:c6:0f:52:75:a4:64:8a:7f:f6: 30:38:7a:0d:50:06:e5:fc:3a:c0:f7:68:f6:e7:22: ee:e2:2c:59:22:45:23:9a:0e:31:d8:02:01:4c:44: 53:a9:23:f9:70:18:38:4c:b9:b3:2b:ed:a9:5b:cb: fa:24:49:da:9e:b1:79:81:f3:43:ef:a9:a8:c7:5b: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:86:A7:69:52:C5:34:6D:C7:AE:B1:BF:4E:21:0C:E9:10:9A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/c7b39dda-ea98-341d-b061-1d59b768de86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.80.0-198.164.82.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7c:6b:77:19:71:e9:c8:14:ee:8f:57:2d:92:96:fa:cb:c7: b8:fc:a5:ef:1f:45:04:28:06:c7:2b:7d:47:09:1d:8f:1b:c8: 47:77:f4:7b:bf:f3:7b:49:14:11:35:c3:6b:e3:92:6a:2a:7d: 15:a2:73:83:99:27:4e:d4:43:87:b9:c8:92:ae:19:ff:08:09: 2a:32:c9:d5:99:f6:dc:35:63:1a:3d:80:e6:74:26:4e:50:41: a6:b9:29:ee:37:4e:e4:fb:25:9a:93:ee:e0:23:f7:10:7d:82: c8:2e:3f:88:aa:7d:af:7d:cd:f7:6b:f7:53:21:9c:66:66:8b: 6f:17:e4:3d:e2:e9:a9:80:7d:db:b6:df:06:fb:5b:da:8e:02: dc:74:e4:ee:a3:db:91:e4:84:bf:ae:e8:78:0a:81:c9:ba:c6: 37:14:ad:ab:9f:25:11:40:ba:cf:2b:55:8b:89:17:7a:7a:12: d1:4d:df:e6:89:cb:f0:8b:c5:4d:6d:ef:17:08:2f:8a:88:b6: 18:86:bb:97:1d:36:8f:df:d8:1e:af:4c:2b:93:d0:73:f3:82: d4:c7:da:3b:40:3d:da:10:82:2b:cd:5e:89:ba:c0:cb:54:12: bd:8c:16:d6:56:d3:7e:b4:71:41:c7:8d:76:7e:a5:9f:58:1a: 07:df:a5:e3 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkAIWXCxAXaJ1L9+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZTE3NzQ3YTEtOWQ1YS00MzhjLWE1MDMtYTMwNWQ0NWFiZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh792vzv/10e5rJXaQkB5sDedSILCE3WxCBmx HtfMaVLSCILBzCmTOTfccDoRiUgi6eVPMM9of0jPHt4tEnZXGWTqkWVRYpMaRA1G 5kZG3ijy05XJHKYSffbV5jfmXqLdezWgcsl0rfpVwZYV8hO9nU3wLiAK0GJUYwmQ EPibJwShPkqca2eEZp3q1t1wpP53B4gJNFfUCHKyv2hUCWc1NoK3oX55qymM4KIg inTC8hMWAfaWKew12uHGD1J1pGSKf/YwOHoNUAbl/DrA92j25yLu4ixZIkUjmg4x 2AIBTERTqSP5cBg4TLmzK+2pW8v6JEnanrF5gfND76mox1s4lQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFELZhqdpUsU0bceusb9OIQzpEJqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvYzdiMzlkZGEtZWE5OC0z NDFkLWIwNjEtMWQ1OWI3NjhkZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATGpFAD BADGpFIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMXxrdxlx6cgU7o9XLZKW+svHuPyl7x9FBCgGxyt9Rwkd jxvIR3f0e7/ze0kUETXDa+OSaip9FaJzg5knTtRDh7nIkq4Z/wgJKjLJ1Zn23DVj Gj2A5nQmTlBBprkp7jdO5PslmpPu4CP3EH2CyC4/iKp9r33N92v3UyGcZmaLbxfk PeLpqYB927bfBvtb2o4C3HTk7qPbkeSEv67oeAqBybrGNxStq58lEUC6zytVi4kX enoS0U3f5onL8IvFTW3vFwgvioi2GIa7lx02j9/YHq9MK5PQc/OC1MfaO0A92hCC K81eibrAy1QSvYwW1lbTfrRxQceNdn6ln1gaB9+l4w== -----END CERTIFICATE-----Generated at Wed Apr 30 05:51:23 2025 by rpki-client