$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa File: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (raw, json) Hash identifier: r9Is0vt6m++s/77pcAn3NO94xjBpfrIlFoKjoG73bec= Subject key identifier: 14:7C:17:DB:67:5C:83:99:58:D5:29:F0:CF:03:A2:1F:A5:81:4C:F4 Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Certificate serial: 010D0C9F43285849218403192AF549B2D515ED40 Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16652 IP address blocks: 198.252.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:03:19:2a:f5:49:b2:d5:15:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=2c7755bc-d67c-4070-8ef9-63190ff238a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:bb:55:0a:70:1c:01:b7:f0:47:62:03:ea: 7f:51:ef:a7:55:b7:67:fa:6f:3f:e9:ea:1b:9c:8d: 02:04:4f:48:21:cb:be:24:ef:58:07:99:f8:1b:ee: 27:cc:f9:f9:2e:bc:6a:b2:2b:fc:1b:a5:15:6e:2a: 68:15:0f:cb:94:c3:d4:2d:0d:b5:a0:7d:f5:87:24: eb:28:c2:df:60:0d:ce:b2:8c:68:c8:3d:4c:3e:aa: f2:42:5f:36:24:53:77:0a:f4:24:fa:bd:9c:e5:89: 2d:82:77:d4:6d:4f:47:86:f8:75:89:b8:f3:47:be: 70:69:83:73:1b:e4:50:b9:17:06:52:0d:5f:81:2c: 77:cb:62:86:af:4d:22:07:eb:4a:8e:be:ec:13:49: 03:17:ef:3d:f0:1b:67:c7:7d:d8:de:c9:0e:f3:14: 22:f3:e0:99:ee:f5:0d:08:92:6f:41:13:92:7d:22: 99:ee:bb:fb:16:56:2d:df:09:25:fd:7e:bf:73:3a: f4:15:78:30:df:b4:c3:01:0d:ca:46:31:ec:5d:e4: 8d:9c:44:41:cb:7f:c3:1a:b1:fd:83:b1:e2:9b:0a: e1:54:3d:60:03:16:fe:94:29:34:82:4f:e0:da:17: 3a:55:34:f5:88:a6:f3:0b:a7:cf:bb:fa:2e:27:0f: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:17:DB:67:5C:83:99:58:D5:29:F0:CF:03:A2:1F:A5:81:4C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl X509v3 Authority Key Identifier: keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer sbgp-ipAddrBlock: critical IPv4: 198.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f3:1c:9f:7a:dc:c3:b2:df:8a:12:cc:9d:1d:57:c9:20:61: 8f:bd:17:77:e8:f2:2c:a7:bc:2c:7a:41:ee:ea:62:21:21:e5: 83:83:a0:bb:c9:4c:b4:d7:f5:b6:4d:68:cd:25:d0:49:01:fb: 17:48:35:31:6b:59:ae:4e:d4:5a:6a:35:cb:f9:ea:84:6d:72: 77:22:32:f3:c0:92:0b:74:33:81:0c:b1:3a:d7:fc:26:3c:4e: 99:04:b1:3b:e8:60:12:4a:43:b8:37:77:61:01:75:bd:f8:d1: e5:bc:ef:3b:17:7d:98:b5:02:29:26:3a:00:62:6b:d5:49:75: ff:1c:3d:6e:1d:26:a1:29:a8:b0:75:f0:1e:98:c0:32:8f:a1: bc:c3:e8:72:cf:b1:ec:2c:81:c7:3a:ef:dd:49:19:e0:0c:03: 49:6e:e6:b3:02:e8:ef:4c:33:9a:64:d9:03:4e:74:5d:f6:d7: 9a:96:16:58:50:88:85:e2:de:90:e0:1a:12:22:8d:06:0b:78: 87:b2:82:f4:13:3f:21:b2:00:ae:b1:f3:aa:c0:9c:23:cb:a7: 87:ac:26:39:6d:99:b5:52:fc:e7:a0:08:94:9f:71:3c:65:12: 30:fe:3d:d6:60:9e:19:f0:fa:98:2f:47:e9:9e:d7:56:dd:62: 41:9d:4f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAMZKvVJstUV7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4 ZWEzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MmM3NzU1YmMtZDY3Yy00MDcwLThlZjktNjMxOTBmZjIzOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC+7VQpwHAG38EdiA+p/Ue+nVbdn+m8/6eob nI0CBE9IIcu+JO9YB5n4G+4nzPn5Lrxqsiv8G6UVbipoFQ/LlMPULQ21oH31hyTr KMLfYA3OsoxoyD1MPqryQl82JFN3CvQk+r2c5YktgnfUbU9Hhvh1ibjzR75waYNz G+RQuRcGUg1fgSx3y2KGr00iB+tKjr7sE0kDF+898Btnx33Y3skO8xQi8+CZ7vUN CJJvQROSfSKZ7rv7FlYt3wkl/X6/czr0FXgw37TDAQ3KRjHsXeSNnERBy3/DGrH9 g7HimwrhVD1gAxb+lCk0gk/g2hc6VTT1iKbzC6fPu/ouJw889wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR8F9tnXIOZWNUp8M8Doh+lgUz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBh ODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvOGQ3ZGI3NDYtMzVmYi0z OTUyLWE0ZmUtNzNmZDI3ZjA0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjMwYTgzZmMtNTc1My00ZDk0LTg1 ZDEtMjY5MjRhZmE4ZWEzL2YzMGE4M2ZjLTU3NTMtNGQ5NC04NWQxLTI2OTI0YWZh OGVhMy5jcmwwHwYDVR0jBBgwFoAU8FBMFnRyiq26v7tn6h9pVELZXz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjky NGFmYThlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALzHJ963MOy34oSzJ0dV8kgYY+9F3fo8iynvCx6Qe7qYiEh5YODoLvJ TLTX9bZNaM0l0EkB+xdINTFrWa5O1FpqNcv56oRtcnciMvPAkgt0M4EMsTrX/CY8 TpkEsTvoYBJKQ7g3d2EBdb340eW87zsXfZi1AikmOgBia9VJdf8cPW4dJqEpqLB1 8B6YwDKPobzD6HLPsewsgcc6791JGeAMA0lu5rMC6O9MM5pk2QNOdF3215qWFlhQ iIXi3pDgGhIijQYLeIeygvQTPyGyAK6x86rAnCPLp4esJjltmbVS/OegCJSfcTxl EjD+PdZgnhnw+pgvR+me11bdYkGdT48= -----END CERTIFICATE-----Generated at Wed Apr 30 06:29:41 2025 by rpki-client