$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa File: 6ae41674-6179-31e6-b383-75fdb87cda25.roa (raw, json) Hash identifier: Z9xDB9a2Y50/T79GHLl9qLuhuKTCtOVik4ZwImR0ba4= Subject key identifier: EA:BF:9E:AF:24:38:A9:68:A2:50:74:0C:B4:94:F9:38:38:89:8A:50 Certificate issuer: /CN=9df74e6e-da16-4cba-a854-ee087e767113 Certificate serial: 010D0C9F4328584957F40620D26B6DDC5F47D400 Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 15318 IP address blocks: 198.168.128.0/19 maxlen: 19 198.168.160.0/20 maxlen: 20 198.168.176.0/21 maxlen: 21 198.168.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:06:20:d2:6b:6d:dc:5f:47:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=2ed0d2ca-9963-406b-9a35-01d3b886d7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:f5:e3:7f:45:97:d2:59:8e:48:cd:29:fd: ee:f1:ed:b1:ba:43:35:b6:56:43:bf:db:e9:05:0e: 27:dc:fe:38:9d:60:ed:4f:fe:4c:61:f0:d4:71:a9: cb:9b:c3:ff:7e:c8:6d:46:4a:23:6e:a5:e5:e6:b1: 40:d6:90:c2:5c:a0:f8:6d:27:92:b9:1a:13:52:17: 63:75:66:a1:cf:3e:c2:92:15:22:25:b4:d9:77:6e: 01:90:66:e6:99:6d:22:82:cb:f2:c1:67:24:81:9e: 5f:67:ab:cc:13:74:bb:d1:d4:c8:50:c9:e0:19:1a: b5:6a:2e:a2:f3:92:13:c9:71:3a:15:6c:c0:fc:dc: 11:0a:1b:31:85:b1:08:59:03:d9:cc:47:8d:78:3b: db:8b:93:90:6c:54:4d:c2:5e:db:01:2c:d9:cc:af: 66:32:3b:b7:3b:f6:b8:6d:a6:0a:ae:58:8a:77:d3: 03:22:d0:a2:35:83:9a:d0:ff:42:23:67:9f:1d:00: 01:c6:38:cf:73:c6:cb:42:4a:1b:1f:79:ee:0a:eb: 64:bc:46:a8:32:6b:bc:50:1a:93:18:53:0b:82:4d: 65:03:6a:91:67:cd:bb:84:85:df:b8:e5:63:ba:0d: 51:57:19:4a:46:b0:04:4a:26:51:28:29:a7:d9:20: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BF:9E:AF:24:38:A9:68:A2:50:74:0C:B4:94:F9:38:38:89:8A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl X509v3 Authority Key Identifier: keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer sbgp-ipAddrBlock: critical IPv4: 198.168.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d0:2e:83:17:98:24:38:86:8d:6f:be:e5:5a:23:f6:62:b4: a9:52:1f:49:95:a0:88:db:7f:5d:0d:c6:34:1a:bf:25:30:5d: ee:c0:d0:c6:db:af:ef:42:18:45:cc:a1:83:f2:4b:c2:fa:99: a9:dc:44:3e:4d:41:9e:12:9b:df:89:09:66:49:2a:0a:51:6a: 95:ed:7e:f7:c6:9e:3e:73:84:f1:10:55:b2:75:63:e3:b2:6c: 97:a8:27:9e:03:96:e5:77:0f:3e:ae:18:c8:5f:e1:d7:cf:1e: ca:38:07:3a:f1:ce:f6:79:b2:9d:e2:2a:43:5b:df:b4:67:4a: 95:61:03:5d:76:c1:5c:55:4b:ee:0c:63:5c:22:f6:7a:66:86: 97:fd:c6:66:10:df:21:20:62:ab:80:e3:72:6c:82:82:99:ec: a1:b7:2a:20:f8:f5:e8:b9:7d:f3:f9:c5:b6:ee:16:fc:43:de: 38:9d:13:7a:10:b6:37:0c:d5:60:49:56:7f:96:89:2c:69:eb: 9f:eb:5b:71:40:c3:ec:68:52:d0:6b:64:0a:20:89:82:22:d8: 3c:0e:88:f8:ef:f4:59:63:e5:e3:aa:b5:4f:c8:3a:5e:dd:b6: f6:9b:75:ff:4e:8e:ea:71:47:4e:b4:16:05:1f:70:e1:7a:89: 08:a7:40:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AYg0mtt3F9H1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmNzRlNmUtZGExNi00Y2JhLWE4NTQtZWUwODdlNzY3 MTEzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MmVkMGQyY2EtOTk2My00MDZiLTlhMzUtMDFkM2I4ODZkN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq31439Fl9JZjkjNKf3u8e2xukM1tlZDv9vp BQ4n3P44nWDtT/5MYfDUcanLm8P/fshtRkojbqXl5rFA1pDCXKD4bSeSuRoTUhdj dWahzz7CkhUiJbTZd24BkGbmmW0igsvywWckgZ5fZ6vME3S70dTIUMngGRq1ai6i 85ITyXE6FWzA/NwRChsxhbEIWQPZzEeNeDvbi5OQbFRNwl7bASzZzK9mMju3O/a4 baYKrliKd9MDItCiNYOa0P9CI2efHQABxjjPc8bLQkobH3nuCutkvEaoMmu8UBqT GFMLgk1lA2qRZ827hIXfuOVjug1RVxlKRrAESiZRKCmn2SABjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq/nq8kOKloolB0DLSU+Tg4iYpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZGY3 NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4N2U3NjcxMTMvNmFlNDE2NzQtNjE3OS0z MWU2LWIzODMtNzVmZGI4N2NkYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWRmNzRlNmUtZGExNi00Y2JhLWE4 NTQtZWUwODdlNzY3MTEzLzlkZjc0ZTZlLWRhMTYtNGNiYS1hODU0LWVlMDg3ZTc2 NzExMy5jcmwwHwYDVR0jBBgwFoAUEq4Uchdx/w2XT9UGiVP+2vDxfRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZGY3NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4 N2U3NjcxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxqiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPQLoMXmCQ4ho1vvuVaI/ZitKlSH0mVoIjbf10NxjQavyUwXe7A0Mbb r+9CGEXMoYPyS8L6mancRD5NQZ4Sm9+JCWZJKgpRapXtfvfGnj5zhPEQVbJ1Y+Oy bJeoJ54DluV3Dz6uGMhf4dfPHso4BzrxzvZ5sp3iKkNb37RnSpVhA112wVxVS+4M Y1wi9npmhpf9xmYQ3yEgYquA43JsgoKZ7KG3KiD49ei5ffP5xbbuFvxD3jidE3oQ tjcM1WBJVn+WiSxp65/rW3FAw+xoUtBrZAogiYIi2DwOiPjv9Flj5eOqtU/IOl7d tvabdf9OjupxR060FgUfcOF6iQinQM0= -----END CERTIFICATE-----Generated at Fri May 2 01:13:21 2025 by rpki-client