$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa File: 95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa (raw, json) Hash identifier: A9vYuPjfC89hVx0dramXra0Q4vEiTuNMHTZ4/wdpW50= Subject key identifier: 38:61:2C:9A:84:FF:6B:49:E3:53:37:E3:22:99:7B:5E:44:9A:38:A8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849674EED07716A6510431A5940 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 1239 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:ed:07:71:6a:65:10:43:1a:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=2c11455c-81c1-4f87-bb3e-b737d89e0d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:86:05:07:d7:9d:d4:5c:ef:1f:8c:bd:0d: 2a:d7:ab:31:55:50:41:de:5a:6b:62:8e:78:7c:21: fd:1a:20:e5:9c:63:f7:ec:2a:ce:16:13:d9:3a:22: 31:75:a7:d5:dc:4b:7d:fa:ec:52:9b:c9:86:22:b5: 68:d2:15:4f:5d:f3:2a:e4:ff:fe:e4:17:af:c6:a7: b1:e5:1d:26:fd:e4:19:c0:89:65:cb:5d:76:1f:59: 20:b5:36:f3:2c:9e:80:dd:90:fa:4e:0c:1c:9c:7c: 3a:df:08:85:84:17:09:d8:7d:19:71:2b:24:53:da: fd:03:8f:62:3d:90:0b:1a:83:3d:23:e8:9e:06:1d: 4b:a1:a8:90:f8:81:2d:ec:23:83:03:e3:de:8e:6d: ae:d5:66:19:c3:d9:b8:b6:c1:1c:a8:1d:f2:f5:f6: 2e:be:5e:99:91:7c:86:8d:bc:4b:e4:cb:9f:e1:74: b6:f5:67:57:13:80:eb:8f:b4:f9:8f:bb:c7:43:d3: c6:8b:59:cd:6f:4a:72:d5:2e:c3:c8:c7:4a:eb:6c: 43:29:ef:76:4a:20:6d:39:e4:48:01:c9:59:a0:8a: 0b:9f:ab:19:59:58:8d:72:d3:d9:e8:77:d0:c8:2e: 05:db:a8:8c:4b:3c:3a:60:31:3d:31:22:01:1d:78: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:61:2C:9A:84:FF:6B:49:E3:53:37:E3:22:99:7B:5E:44:9A:38:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/95d2c297-c4ee-395a-8a3f-a64b7c13fe81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:aa:d8:26:13:85:e5:92:8a:2f:2e:c2:7a:09:8d:9c:3f:c0: 48:ce:0b:2a:de:de:32:c1:7d:d5:7d:6c:ae:17:34:80:51:d8: af:d2:9c:02:1a:9a:2b:4e:6a:36:b9:9f:21:09:d8:01:4e:f9: be:12:3f:bc:c6:05:2e:26:0d:47:79:74:a6:71:4d:e2:b9:27: 5b:57:04:5e:35:a2:20:ea:39:e0:93:06:12:ac:4b:88:fb:74: 6c:81:46:d9:fd:55:a2:5a:38:62:ed:41:af:53:00:8c:8a:fe: 4c:6a:b7:58:3d:12:eb:14:b1:34:51:3c:2d:85:7e:ce:9d:74: 35:a5:54:b6:cc:44:39:18:74:a9:7d:13:43:c1:4d:3d:16:41: 4c:32:bb:73:fa:ff:dc:49:ac:fb:69:9c:63:5d:4a:79:19:80: 17:28:4a:93:e6:f8:41:c2:ef:73:6a:b4:52:84:f2:ac:f6:a8: 86:b2:ad:45:62:92:e7:74:01:13:3d:aa:19:3c:aa:30:86:3e: 14:6c:e1:33:1d:98:73:0c:3b:1b:d2:04:ad:06:92:de:b1:5f: d7:65:d1:cf:97:5d:49:83:10:e2:d3:8f:99:e4:d9:56:1a:8b: 22:96:ee:f7:0c:d2:ae:e6:7d:35:62:bc:30:84:86:a0:36:20: 18:32:c0:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTu0HcWplEEMaWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk MmMxMTQ1NWMtODFjMS00Zjg3LWJiM2UtYjczN2Q4OWUwZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimGGBQfXndRc7x+MvQ0q16sxVVBB3lprYo54 fCH9GiDlnGP37CrOFhPZOiIxdafV3Et9+uxSm8mGIrVo0hVPXfMq5P/+5Bevxqex 5R0m/eQZwIlly112H1kgtTbzLJ6A3ZD6TgwcnHw63wiFhBcJ2H0ZcSskU9r9A49i PZALGoM9I+ieBh1LoaiQ+IEt7CODA+Pejm2u1WYZw9m4tsEcqB3y9fYuvl6ZkXyG jbxL5Muf4XS29WdXE4Drj7T5j7vHQ9PGi1nNb0py1S7DyMdK62xDKe92SiBtOeRI AclZoIoLn6sZWViNctPZ6HfQyC4F26iMSzw6YDE9MSIBHXi1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhhLJqE/2tJ41M34yKZe15EmjioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOTVkMmMyOTctYzRlZS0z OTVhLThhM2YtYTY0YjdjMTNmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSq2CYTheWSii8uwnoJjZw/wEjOCyre3jLBfdV9bK4XNIBR2K/SnAIa mitOaja5nyEJ2AFO+b4SP7zGBS4mDUd5dKZxTeK5J1tXBF41oiDqOeCTBhKsS4j7 dGyBRtn9VaJaOGLtQa9TAIyK/kxqt1g9EusUsTRRPC2Ffs6ddDWlVLbMRDkYdKl9 E0PBTT0WQUwyu3P6/9xJrPtpnGNdSnkZgBcoSpPm+EHC73NqtFKE8qz2qIayrUVi kud0ARM9qhk8qjCGPhRs4TMdmHMMOxvSBK0Gkt6xX9dl0c+XXUmDEOLTj5nk2VYa iyKW7vcM0q7mfTVivDCEhqA2IBgywHs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:47:20 2025 by rpki-client