$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa File: 18187cff-159b-3f88-aa27-6e6e06aa0b90.roa (raw, json) Hash identifier: q3Sp/JECK9hiPj8yuYJ4OZV87lRaoN/ybjwoC3HjwiY= Subject key identifier: 8C:BF:B5:5E:E9:E6:5F:D4:C8:E7:A2:E5:9C:02:62:64:D7:58:94:C9 Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F43285849B9AA08E53AB49F9A1C629B40 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 15191 IP address blocks: 198.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:08:e5:3a:b4:9f:9a:1c:62:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=f537ecd4-d717-4b46-a360-6e8215bb2df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:12:b3:52:65:34:72:a5:50:78:8e:fa:0a: f7:d7:24:4e:6d:8f:be:4b:66:c4:6c:9b:f2:44:25: 01:84:59:82:67:63:0c:6d:76:06:c9:75:9f:11:9d: 25:e6:79:f8:c0:78:72:66:3f:b0:f9:47:da:19:3a: b9:11:72:42:7a:bc:59:f4:65:57:de:9a:66:8c:c0: 5e:8c:07:7f:1b:28:b2:f0:5c:43:76:89:74:1c:8e: 4f:5a:43:68:b1:e1:5a:bc:18:4f:60:07:a6:36:40: 93:4d:01:70:c9:76:6e:2a:38:d2:70:9b:17:77:02: b4:fe:78:a4:8e:fb:46:54:54:58:98:76:44:47:f9: dd:5c:5f:73:1b:cd:88:1a:1c:6d:62:75:e2:52:19: a5:52:b8:61:a6:60:23:50:04:98:79:41:1f:7e:d0: e4:22:43:11:03:4c:92:7b:bb:8a:30:d1:e9:51:37: df:61:53:2a:88:c6:8b:d3:05:01:9e:b7:52:ac:ca: f9:37:2f:60:6c:84:10:ea:7a:e1:00:98:70:3c:dc: 2c:74:c2:4e:64:80:0f:2a:06:06:c1:8a:62:36:9f: 94:df:61:28:c6:a2:37:90:84:43:d0:dc:52:f2:2b: 88:fb:d0:52:0c:6f:7f:be:03:2f:1c:fc:10:95:0b: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BF:B5:5E:E9:E6:5F:D4:C8:E7:A2:E5:9C:02:62:64:D7:58:94:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d2:6d:e4:a8:fc:5a:be:3f:e4:bc:cb:70:59:42:a2:25:d8: c5:76:da:88:5b:f6:67:c2:1e:67:7f:8c:8f:9b:48:8b:49:92: 33:16:f3:4f:71:0a:c9:64:a0:9b:3d:93:f2:90:2a:cc:d9:66: 11:27:7f:51:18:b8:bc:3b:1a:5e:1b:2e:44:90:9d:b2:79:38: a1:62:2f:13:12:a6:f1:0b:da:2b:30:b5:8d:07:f6:24:47:13: 46:bc:c0:e1:b8:10:d4:5f:bc:e1:f3:e3:93:e3:aa:37:f9:67: fc:f4:c4:c2:37:d6:95:f0:1b:cf:52:ee:7f:70:07:49:11:08: 0d:9d:01:de:83:aa:ac:18:fc:2a:e3:63:11:8b:df:d6:3a:6d: f5:e5:99:4b:79:9f:4d:59:54:ff:f3:8a:09:0b:e2:82:1b:07: 01:3f:da:23:67:cc:09:cb:c2:3c:09:90:64:39:bc:b0:ae:5a: 56:ff:c2:72:56:42:18:a0:a0:d5:18:2d:af:ed:ac:cc:09:f7: c1:17:f0:1e:3a:f6:f4:81:00:e3:42:b7:5a:08:05:23:9e:62: 6d:64:4d:a8:4c:48:49:29:6c:2b:46:44:ec:44:d4:4d:ac:8d: a4:60:eb:7f:a8:a0:9c:30:dd:9c:c3:00:50:8a:36:50:c6:e6: d1:1d:9d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgjlOrSfmhxim0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjUzN2VjZDQtZDcxNy00YjQ2LWEzNjAtNmU4MjE1YmIyZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnygSs1JlNHKlUHiO+gr31yRObY++S2bEbJvy RCUBhFmCZ2MMbXYGyXWfEZ0l5nn4wHhyZj+w+UfaGTq5EXJCerxZ9GVX3ppmjMBe jAd/Gyiy8FxDdol0HI5PWkNoseFavBhPYAemNkCTTQFwyXZuKjjScJsXdwK0/nik jvtGVFRYmHZER/ndXF9zG82IGhxtYnXiUhmlUrhhpmAjUASYeUEfftDkIkMRA0yS e7uKMNHpUTffYVMqiMaL0wUBnrdSrMr5Ny9gbIQQ6nrhAJhwPNwsdMJOZIAPKgYG wYpiNp+U32EoxqI3kIRD0NxS8iuI+9BSDG9/vgMvHPwQlQvRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy/tV7p5l/UyOei5ZwCYmTXWJTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMTgxODdjZmYtMTU5Yi0z Zjg4LWFhMjctNmU2ZTA2YWEwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExh0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnSbeSo/Fq+P+S8y3BZQqIl2MV22ohb9mfCHmd/jI+bSItJkjMW809x CslkoJs9k/KQKszZZhEnf1EYuLw7Gl4bLkSQnbJ5OKFiLxMSpvEL2iswtY0H9iRH E0a8wOG4ENRfvOHz45Pjqjf5Z/z0xMI31pXwG89S7n9wB0kRCA2dAd6DqqwY/Crj YxGL39Y6bfXlmUt5n01ZVP/zigkL4oIbBwE/2iNnzAnLwjwJkGQ5vLCuWlb/wnJW QhigoNUYLa/trMwJ98EX8B469vSBAONCt1oIBSOeYm1kTahMSEkpbCtGROxE1E2s jaRg63+ooJww3ZzDAFCKNlDG5tEdndY= -----END CERTIFICATE-----Generated at Sat May 3 05:19:28 2025 by rpki-client