$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9404fcc7-0183-3a30-877b-74dd02d9117f.roa File: 9404fcc7-0183-3a30-877b-74dd02d9117f.roa (raw, json) Hash identifier: k1fuN7AB6D4f1iPd69HD3NrC159Fesk844jKOR7kKLc= Subject key identifier: FC:FC:08:AC:94:CC:2E:E8:52:7A:45:42:97:D4:1A:2F:F0:50:D2:91 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285849806F17D8A71B2C6C16D90D00 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9404fcc7-0183-3a30-877b-74dd02d9117f.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 62597 IP address blocks: 198.51.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:17:d8:a7:1b:2c:6c:16:d9:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=81cd25b7-df98-495e-b5ce-b522f4ad7423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:85:43:46:03:77:36:3b:da:26:9d:30:87:bb: 6c:15:dd:80:4f:6c:44:af:32:9d:a1:c2:f1:71:5d: 4e:00:8a:e3:3b:ae:c0:45:d5:e7:b9:07:05:d9:bf: 6d:b7:e2:0c:65:8f:e6:66:f0:6f:af:cf:7e:73:bb: a3:46:bb:6c:94:a1:b0:19:7e:ce:ac:e6:22:1a:88: 91:72:f0:c3:8e:fb:9b:1b:ac:d9:e7:1b:84:ad:53: 75:69:cc:a3:c5:24:be:17:18:56:13:5d:55:a6:b8: 96:49:be:1f:84:ea:b9:f6:91:99:b0:55:e7:08:17: b3:f1:ab:23:3d:81:98:9a:df:24:0f:29:46:bc:9d: 4e:10:cf:29:4f:bb:99:9f:d5:ee:56:d9:5a:a1:16: e3:e0:a7:47:34:8a:c0:e4:9c:e1:28:17:cb:32:22: 39:a2:cf:05:52:76:7a:03:0e:ea:d2:45:41:65:2b: f4:b8:69:fa:9c:48:de:fe:2f:fc:d0:d5:b9:ac:7a: b5:f6:c9:db:b1:10:23:fb:90:32:25:df:17:1d:58: c5:93:2a:8f:2c:5c:40:f9:8e:6b:52:bf:34:9e:dc: 82:0d:d5:b7:58:31:6e:3c:13:dc:8e:d9:94:34:a4: 20:77:84:24:6f:a7:22:e7:4c:da:b2:8c:1f:38:fd: 2e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:08:AC:94:CC:2E:E8:52:7A:45:42:97:D4:1A:2F:F0:50:D2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9404fcc7-0183-3a30-877b-74dd02d9117f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 198.51.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6c:ee:66:dd:69:7a:39:ae:f2:1d:26:c4:af:da:55:af:b2: 26:84:c1:55:45:2a:92:35:3a:97:c4:04:f1:57:bc:a1:63:d1: aa:7b:af:9c:c5:db:1b:22:93:b2:46:ab:85:97:4b:3b:b7:77: 20:fc:d1:f7:ad:4a:4b:41:b7:19:7e:36:2f:be:7d:c0:62:ca: 4f:34:92:21:43:74:2a:06:58:8c:7b:6e:5c:c5:ca:fa:d7:da: e6:6e:28:3f:f6:54:0f:97:29:ef:a1:33:a0:54:8b:89:d1:4e: 0e:3c:ef:d7:d2:54:96:36:6e:9d:1e:9c:df:e6:a9:a4:cb:ee: 7a:f9:93:01:1b:f0:6c:ae:30:88:32:c7:ff:12:54:17:f8:1d: 4a:25:2e:dd:01:2f:13:16:34:c7:72:3b:ff:a7:be:bf:00:3f: ca:97:85:6a:77:a3:f5:07:41:32:73:f1:13:7a:d7:d1:93:17: 5b:1e:1c:47:fa:a7:27:6f:7d:99:7b:72:c1:9b:50:3c:07:b6: 93:44:9b:66:27:96:a7:a4:4b:86:e4:24:39:99:78:95:c1:2a: e7:ab:16:db:2d:14:70:08:c0:f8:c9:2c:f5:ca:e9:80:f6:e2: fe:18:8a:ed:fe:a7:01:6b:aa:15:0c:99:89:2c:5e:42:0b:09: e5:8d:ef:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxfYpxssbBbZDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ODFjZDI1YjctZGY5OC00OTVlLWI1Y2UtYjUyMmY0YWQ3NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIVDRgN3NjvaJp0wh7tsFd2AT2xErzKdocLx cV1OAIrjO67ARdXnuQcF2b9tt+IMZY/mZvBvr89+c7ujRrtslKGwGX7OrOYiGoiR cvDDjvubG6zZ5xuErVN1acyjxSS+FxhWE11VpriWSb4fhOq59pGZsFXnCBez8asj PYGYmt8kDylGvJ1OEM8pT7uZn9XuVtlaoRbj4KdHNIrA5JzhKBfLMiI5os8FUnZ6 Aw7q0kVBZSv0uGn6nEje/i/80NW5rHq19snbsRAj+5AyJd8XHVjFkyqPLFxA+Y5r Ur80ntyCDdW3WDFuPBPcjtmUNKQgd4Qkb6ci50zasowfOP0ukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz8CKyUzC7oUnpFQpfUGi/wUNKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvOTQwNGZjYzctMDE4My0z YTMwLTg3N2ItNzRkZDAyZDkxMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZs7mbdaXo5rvIdJsSv2lWvsiaEwVVFKpI1OpfEBPFXvKFj0ap7r5zF 2xsik7JGq4WXSzu3dyD80fetSktBtxl+Ni++fcBiyk80kiFDdCoGWIx7blzFyvrX 2uZuKD/2VA+XKe+hM6BUi4nRTg4879fSVJY2bp0enN/mqaTL7nr5kwEb8GyuMIgy x/8SVBf4HUolLt0BLxMWNMdyO/+nvr8AP8qXhWp3o/UHQTJz8RN619GTF1seHEf6 pydvfZl7csGbUDwHtpNEm2YnlqekS4bkJDmZeJXBKuerFtstFHAIwPjJLPXK6YD2 4v4Yiu3+pwFrqhUMmYksXkILCeWN7ww= -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:49 2025 by rpki-client