$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa File: 19666efe-72d0-3e30-9419-d8cdfcea80a0.roa (raw, json) Hash identifier: +99fMtLRM6sizuf52ursLpY5tJMEiwjvgLafhGWxD1k= Subject key identifier: 45:CF:CB:25:A9:2D:4A:FE:F8:4D:CF:8B:D0:3C:24:7A:D8:2C:10:4F Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858498E648D7C58671EBC2718E680 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 142032 IP address blocks: 198.44.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8d:7c:58:67:1e:bc:27:18:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=8f33c489-2e55-4e26-9bf7-85adf5bb8a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:68:06:2d:fe:b6:31:30:5e:a2:e4:b5:42: f1:42:2b:1a:dd:4b:c0:ac:c1:c1:d2:e2:68:b1:94: fe:db:06:19:fb:89:99:49:81:bf:c5:98:a6:22:f5: a3:1b:54:ae:77:68:60:e3:02:9d:73:ce:3e:30:e5: 1c:a4:66:dc:74:5f:bb:8d:37:27:24:c4:08:0a:87: b2:c4:53:8a:76:bb:01:e3:36:dd:0c:64:34:b6:f8: 49:7c:21:07:7d:ac:6e:f5:1b:57:42:4b:c4:0f:9e: 1a:39:ff:3f:e3:66:71:4f:ca:7f:89:a6:20:c7:61: 12:c0:73:27:1e:d6:4c:6e:58:3a:bc:ce:13:b4:ea: c5:89:1b:52:24:bd:95:66:68:c6:ac:db:55:e7:a8: 88:9c:8e:61:ab:34:b2:2c:e8:20:f3:45:13:6f:5c: d0:f4:2b:1d:03:ca:74:ae:32:ec:d8:a1:e3:ea:e3: 64:73:d3:8a:2b:a4:00:af:f8:e4:b4:02:22:e5:72: de:03:1b:0d:e7:a8:18:e3:1f:74:76:42:6c:7f:a4: c2:5b:d0:b1:bd:b9:eb:6a:77:7d:1b:63:14:82:f6: 61:76:d2:0f:42:dd:6b:81:a5:53:d8:81:c0:74:6d: 34:3b:80:06:40:7f:af:c1:0d:4d:e1:8a:a5:6d:67: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CF:CB:25:A9:2D:4A:FE:F8:4D:CF:8B:D0:3C:24:7A:D8:2C:10:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1b:cb:44:c2:c1:66:2c:89:a6:10:55:4c:7c:a2:d7:2e:0f: e9:dc:94:9e:5c:88:a3:85:f0:2a:52:85:83:1d:2f:b7:9b:3c: 51:29:76:8a:e5:59:ee:79:2a:c7:79:13:f6:33:43:2c:18:b9: cb:b6:4d:3e:e0:21:e7:bd:81:a7:fa:e4:14:a4:1c:99:5d:da: 8b:d8:e6:4b:cc:10:5d:6f:4b:e7:2f:e9:48:7b:ff:1b:46:d6: 5a:99:f4:ab:9d:2d:23:e7:e2:7a:ca:c7:0a:eb:fd:b3:9f:4f: 2b:33:c3:d8:6f:86:c1:23:ba:3e:90:32:4b:1f:ab:91:a1:d6: 1f:2e:13:0b:bf:45:7d:f6:9d:05:59:c7:52:09:a2:30:24:12: 80:51:49:9f:5d:7f:63:94:10:70:22:26:ed:31:87:33:60:98: 88:2f:86:6b:fe:14:ca:78:a0:5b:ce:69:bb:a6:9a:00:83:ce: c4:bb:73:95:85:99:3b:9b:de:ec:cc:e3:3b:41:8d:fa:e4:69: 55:d0:3b:32:89:a1:27:66:20:2e:67:bc:5f:f1:10:ce:ea:64: 42:a8:bb:81:88:f0:07:7d:30:35:ea:a4:c8:ad:6e:62:54:08: e8:d7:d0:2d:4b:db:23:f3:9f:c9:af:f1:b6:ae:21:24:a9:6f: b3:40:98:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZI18WGcevCcY5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OGYzM2M0ODktMmU1NS00ZTI2LTliZjctODVhZGY1YmI4YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjpoBi3+tjEwXqLktULxQisa3UvArMHB0uJo sZT+2wYZ+4mZSYG/xZimIvWjG1Sud2hg4wKdc84+MOUcpGbcdF+7jTcnJMQICoey xFOKdrsB4zbdDGQ0tvhJfCEHfaxu9RtXQkvED54aOf8/42ZxT8p/iaYgx2ESwHMn HtZMblg6vM4TtOrFiRtSJL2VZmjGrNtV56iInI5hqzSyLOgg80UTb1zQ9CsdA8p0 rjLs2KHj6uNkc9OKK6QAr/jktAIi5XLeAxsN56gY4x90dkJsf6TCW9Cxvbnrand9 G2MUgvZhdtIPQt1rgaVT2IHAdG00O4AGQH+vwQ1N4YqlbWcRhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXPyyWpLUr++E3Pi9A8JHrYLBBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMTk2NjZlZmUtNzJkMC0z ZTMwLTk0MTktZDhjZGZjZWE4MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIby0TCwWYsiaYQVUx8otcuD+nclJ5ciKOF8CpShYMdL7ebPFEpdorl We55Ksd5E/YzQywYucu2TT7gIee9gaf65BSkHJld2ovY5kvMEF1vS+cv6Uh7/xtG 1lqZ9KudLSPn4nrKxwrr/bOfTyszw9hvhsEjuj6QMksfq5Gh1h8uEwu/RX32nQVZ x1IJojAkEoBRSZ9df2OUEHAiJu0xhzNgmIgvhmv+FMp4oFvOabummgCDzsS7c5WF mTub3uzM4ztBjfrkaVXQOzKJoSdmIC5nvF/xEM7qZEKou4GI8Ad9MDXqpMitbmJU COjX0C1L2yPzn8mv8bauISSpb7NAmIE= -----END CERTIFICATE-----Generated at Mon Apr 28 18:13:39 2025 by rpki-client