$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa File: 1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa (raw, json) Hash identifier: 2OQtkT0rRy4hWSE+um4afKXR/M59TpBBn5bDCIoSz5M= Subject key identifier: 58:54:AF:B4:19:C1:01:D5:9A:F4:4A:00:71:0D:64:D0:94:27:A8:6D Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F43285849203C1003F09457E9C86D4C80 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 19318 IP address blocks: 198.96.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:10:03:f0:94:57:e9:c8:6d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=dd53f928-e2a9-4f44-af58-6f5db090d78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:65:42:ff:09:08:64:e9:32:59:9f:18:97: c7:bb:33:b5:5d:dd:a6:05:c8:5c:ef:60:49:48:ad: e8:1f:69:de:42:97:e3:2a:a5:09:ab:53:b0:12:1d: b1:dd:9c:bf:63:c6:2a:4a:81:b3:8f:3c:fc:92:27: c3:05:28:eb:81:02:2c:e0:23:0c:de:98:c6:84:fa: dd:20:ac:eb:d1:e8:f6:ee:55:9f:8d:4d:06:82:9c: ab:f6:4f:7a:b7:aa:2a:dd:b6:23:e7:f9:27:5b:45: be:fb:25:85:f8:35:98:20:ec:82:53:1e:0f:70:39: bf:bf:f8:f5:bb:3c:53:b4:3d:96:57:9f:e4:11:91: 5e:a9:15:f1:f1:aa:1f:6f:c2:49:dd:d9:19:98:9e: 33:36:7e:17:67:af:f7:e0:a9:62:03:30:71:99:13: 96:f3:91:43:a8:82:fd:63:31:75:f2:bf:f6:12:4e: b0:fc:ae:1e:40:a7:9a:0d:0d:76:fb:3a:8b:b0:ed: c7:72:1f:41:f1:5c:60:f5:bc:0f:4c:dd:b3:bf:0c: c0:47:82:17:87:d4:fb:d8:dd:5e:e1:e6:bf:43:32: 96:11:38:7c:a6:8c:89:1d:46:81:cd:dd:13:b0:cc: 86:f1:17:2a:e5:26:8a:ef:8a:39:90:22:f0:4e:de: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:54:AF:B4:19:C1:01:D5:9A:F4:4A:00:71:0D:64:D0:94:27:A8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 198.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9c:00:7e:39:a5:33:ee:39:6f:fa:30:d2:10:40:66:63:4c: 2d:86:aa:cc:09:c9:29:48:7a:05:35:42:c6:26:d9:64:cb:9f: fc:34:6c:b9:5d:90:23:ab:2f:92:30:4f:f5:ff:3d:20:1a:27: a4:45:b3:b2:c6:d9:6b:ae:21:bf:2b:ce:8e:d1:78:d8:16:35: 94:1b:1b:4f:e0:c9:75:f7:88:8c:96:4b:68:bf:39:bb:cf:01: 4f:96:ee:e5:f5:9b:63:b0:91:c6:ac:de:46:bb:e0:7a:cd:0b: e1:27:be:2a:88:8a:a9:6f:4d:7d:93:e9:85:4a:db:ce:81:f4: 61:8d:70:a1:7a:a1:61:49:8f:69:b3:8b:0d:50:be:53:bb:a7: 8c:02:07:49:01:53:c3:ca:47:83:f6:8b:1c:50:ce:41:ad:78: 15:90:da:73:15:7e:50:6b:da:f2:62:27:1b:d4:f1:bd:ef:82: 26:02:2c:e7:9e:c7:74:b5:4c:c3:7d:37:28:1c:57:68:41:e8: 45:7a:ac:b2:6f:6f:00:1f:8b:f1:1f:d8:d3:25:cc:9c:c1:02: 10:ea:58:03:5c:3e:a5:3b:aa:2b:46:b9:f7:25:93:1d:ec:88: 2d:9b:d5:41:ad:1f:24:e0:32:ae:99:67:69:b2:70:7c:69:58: ea:de:71:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBAD8JRX6chtTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZGQ1M2Y5MjgtZTJhOS00ZjQ0LWFmNTgtNmY1ZGIwOTBkNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQdlQv8JCGTpMlmfGJfHuzO1Xd2mBchc72BJ SK3oH2neQpfjKqUJq1OwEh2x3Zy/Y8YqSoGzjzz8kifDBSjrgQIs4CMM3pjGhPrd IKzr0ej27lWfjU0Ggpyr9k96t6oq3bYj5/knW0W++yWF+DWYIOyCUx4PcDm/v/j1 uzxTtD2WV5/kEZFeqRXx8aofb8JJ3dkZmJ4zNn4XZ6/34KliAzBxmROW85FDqIL9 YzF18r/2Ek6w/K4eQKeaDQ12+zqLsO3Hch9B8Vxg9bwPTN2zvwzAR4IXh9T72N1e 4ea/QzKWETh8poyJHUaBzd0TsMyG8Rcq5SaK74o5kCLwTt7chQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhUr7QZwQHVmvRKAHENZNCUJ6htMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMWQxYmRlYzgtNGZkNi0z ZjcxLWE1YjctOWI4MGFkZGEwNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOcAH45pTPuOW/6MNIQQGZjTC2GqswJySlIegU1QsYm2WTLn/w0bLld kCOrL5IwT/X/PSAaJ6RFs7LG2WuuIb8rzo7ReNgWNZQbG0/gyXX3iIyWS2i/ObvP AU+W7uX1m2Owkcas3ka74HrNC+EnviqIiqlvTX2T6YVK286B9GGNcKF6oWFJj2mz iw1QvlO7p4wCB0kBU8PKR4P2ixxQzkGteBWQ2nMVflBr2vJiJxvU8b3vgiYCLOee x3S1TMN9NygcV2hB6EV6rLJvbwAfi/Ef2NMlzJzBAhDqWANcPqU7qitGufclkx3s iC2b1UGtHyTgMq6ZZ2mycHxpWOrecVg= -----END CERTIFICATE-----Generated at Tue Apr 29 09:16:01 2025 by rpki-client