$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa File: dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa (raw, json) Hash identifier: bTH01nmTrL87ciR4FImTCD7WbeNdVaSZUbjgzz8bCiA= Subject key identifier: 00:24:C9:9E:5B:1D:28:79:C5:1C:E4:1D:BA:87:90:A5:36:6A:BB:94 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858498769AA14496D9F204FD83C60 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 1239 IP address blocks: 198.67.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:aa:14:49:6d:9f:20:4f:d8:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=7982b260-ba8c-4f64-9e37-c6eda65fd1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:54:a8:7a:00:8a:de:8f:b2:32:f3:6a:f6:1a: 5d:20:71:8d:72:0c:0a:c3:e5:23:53:57:6e:ea:cc: 47:55:1c:b2:df:90:ba:96:92:de:ba:d9:7c:ed:54: 71:f7:32:9e:d0:ff:3c:22:ea:d1:c2:dd:bc:a8:9b: 1e:30:31:54:46:f2:1b:d0:eb:13:23:3b:13:78:93: 49:89:6e:ce:35:31:0e:c1:71:01:bf:33:bf:62:5d: 7a:11:73:2c:eb:57:ef:ff:7d:fd:df:b6:75:b9:0b: d5:bb:80:03:88:6e:ef:e9:b6:a4:70:2f:a9:67:0c: 8a:0a:ea:ee:2b:98:21:4b:f2:09:1d:2d:42:b2:17: 9e:36:74:33:28:9f:c9:9c:f1:cd:5e:24:0d:bd:53: 22:d9:ab:03:d1:34:0c:29:53:9f:7a:a8:6a:ea:ad: 82:da:60:8b:f1:e6:71:d8:54:4b:c7:64:40:88:53: 63:20:30:e8:a6:bb:00:c0:e7:f6:a3:39:45:bd:7a: 8f:85:1c:b8:02:c3:18:f5:83:55:89:a7:67:a3:02: 53:c6:e5:4d:5e:21:73:28:cd:c4:fd:1d:7a:6a:7b: 8e:87:73:03:00:79:9f:ff:8a:e0:b7:43:cc:43:6b: 9a:f5:ab:8e:39:41:a5:fe:f1:4b:52:71:16:38:d9: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:C9:9E:5B:1D:28:79:C5:1C:E4:1D:BA:87:90:A5:36:6A:BB:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5e:ed:ee:18:46:ae:b6:fe:9c:30:08:a8:09:7a:1c:a9:80: 82:8e:9b:76:99:f7:35:e8:7c:cf:ea:93:32:62:1b:9a:ca:c3: fb:42:35:e4:8f:8a:d1:ce:38:78:08:0e:1c:00:de:7d:63:8e: 53:dc:b9:c0:28:87:c6:0a:a8:eb:39:46:2c:bb:95:7c:a4:40: f0:aa:39:0b:4e:30:db:08:2e:53:5a:d0:00:4a:36:4a:24:84: 1b:47:0d:82:bf:70:49:92:ea:81:1c:2e:6e:00:d9:2a:7f:93: d5:13:fc:c5:dc:b5:40:99:27:67:02:11:f2:73:85:9a:42:33: b6:4c:ae:48:02:99:e5:16:19:1e:6b:c5:e4:95:a1:39:4c:8d: 63:77:42:0a:b8:52:6e:56:19:12:3b:8c:93:85:36:91:82:ac: 89:b7:36:c0:5b:20:0f:83:47:1e:06:74:34:5a:a0:18:aa:cd: bf:68:45:7e:7c:1a:ae:c7:78:c2:0a:fa:78:6a:d1:4b:8d:40: 33:51:03:8b:da:9a:87:fd:f1:09:26:4c:c1:0b:a9:c3:d8:80: a2:8d:2b:8d:41:46:98:81:61:3c:9e:39:ed:34:79:61:4d:98: b2:18:96:08:21:0f:f8:d6:18:e4:86:62:4f:4e:42:c0:6e:4e: de:f2:15:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaaoUSW2fIE/YPGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk Nzk4MmIyNjAtYmE4Yy00ZjY0LTllMzctYzZlZGE2NWZkMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFSoegCK3o+yMvNq9hpdIHGNcgwKw+UjU1du 6sxHVRyy35C6lpLeutl87VRx9zKe0P88IurRwt28qJseMDFURvIb0OsTIzsTeJNJ iW7ONTEOwXEBvzO/Yl16EXMs61fv/33937Z1uQvVu4ADiG7v6bakcC+pZwyKCuru K5ghS/IJHS1CsheeNnQzKJ/JnPHNXiQNvVMi2asD0TQMKVOfeqhq6q2C2mCL8eZx 2FRLx2RAiFNjIDDoprsAwOf2ozlFvXqPhRy4AsMY9YNViadnowJTxuVNXiFzKM3E /R16anuOh3MDAHmf/4rgt0PMQ2ua9auOOUGl/vFLUnEWONnJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAkyZ5bHSh5xRzkHbqHkKU2aruUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZGQ0MGRiNTUtZWVlMy0z ZGZhLWI3OTYtN2Y1OWI1YmRkMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxe7e4YRq62/pwwCKgJehypgIKOm3aZ9zXofM/qkzJiG5rKw/tCNeSP itHOOHgIDhwA3n1jjlPcucAoh8YKqOs5Riy7lXykQPCqOQtOMNsILlNa0ABKNkok hBtHDYK/cEmS6oEcLm4A2Sp/k9UT/MXctUCZJ2cCEfJzhZpCM7ZMrkgCmeUWGR5r xeSVoTlMjWN3Qgq4Um5WGRI7jJOFNpGCrIm3NsBbIA+DRx4GdDRaoBiqzb9oRX58 Gq7HeMIK+nhq0UuNQDNRA4vamof98QkmTMELqcPYgKKNK41BRpiBYTyeOe00eWFN mLIYlgghD/jWGOSGYk9OQsBuTt7yFXQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:36 2025 by rpki-client