$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa File: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (raw, json) Hash identifier: 4OxqZPnBcUlrxSHkWxbzBnb010JQYIxoYy7Qix8lpP0= Subject key identifier: 6C:6A:84:A9:A2:93:AF:7B:09:F9:95:E8:07:55:7B:DF:21:A2:D9:4F Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Certificate serial: 010D0C9F4328584965E9787D56C46B433B241800 Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 401438 IP address blocks: 198.200.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:78:7d:56:c4:6b:43:3b:24:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=6b9edc25-5820-4428-87c6-beedb8d6685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:60:1d:6c:95:59:cb:46:f0:e5:e5:5d:aa: 1e:70:8b:58:3a:61:fc:d5:2f:6e:1c:c9:33:af:dc: 72:92:27:a7:cc:8a:fd:b5:83:80:e4:28:ce:05:21: 90:bc:79:29:74:e9:92:0b:c0:8c:33:d6:b7:61:7d: 21:72:84:63:c0:0c:cd:eb:2d:23:75:18:a1:98:57: 51:7d:14:2a:cc:55:67:db:97:a0:6c:fe:ab:39:93: da:8d:77:92:db:f4:d0:b7:11:67:2f:5a:16:67:9c: e6:e1:f6:e0:55:8e:2f:c5:b6:19:14:d4:6b:8f:ce: 43:fe:d4:d0:74:70:2d:01:c7:d2:8a:24:c7:1b:f0: 36:ce:6d:d8:97:33:93:99:4b:45:f5:a1:1f:26:6a: aa:a2:93:df:b0:3a:57:06:21:e2:9b:17:52:b0:4a: 4c:2f:56:e4:38:a2:66:f7:2c:76:7b:9b:65:a7:8c: ad:5e:aa:9f:a0:d4:b6:bb:f4:07:3c:fe:68:33:10: 9a:bd:5c:50:b6:0f:00:73:8f:f2:3b:5b:fa:8c:e1: 02:d4:b5:5a:a5:59:49:87:33:c3:bf:c8:ea:10:38: 0e:79:5f:98:04:91:1a:7d:e1:bd:00:68:93:69:13: 58:9c:4a:77:a3:5f:93:73:d2:e5:cd:75:0c:09:62: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6A:84:A9:A2:93:AF:7B:09:F9:95:E8:07:55:7B:DF:21:A2:D9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl X509v3 Authority Key Identifier: keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer sbgp-ipAddrBlock: critical IPv4: 198.200.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4a:6e:76:4f:1d:f5:30:e2:55:bd:13:84:00:9f:56:8e:54: de:6f:81:27:df:08:c3:d4:76:27:38:5c:66:da:52:dc:b8:bb: c3:9f:79:6a:4a:59:a9:cb:99:3f:86:ef:f6:d1:b9:45:bf:5f: 7c:73:de:ac:38:ba:a1:56:7c:17:f7:fc:94:4d:d8:d1:af:9b: 71:9e:3d:93:88:b0:85:0f:76:9d:b8:dd:c4:3b:ae:41:dc:8e: fe:95:95:73:c5:c2:4b:c1:1e:ae:9a:ba:cb:dd:89:bc:4e:22: 48:73:c4:a1:90:46:e8:36:ed:5f:39:33:e3:98:90:6f:36:07: 7b:13:69:54:da:32:2a:62:f1:2c:98:cd:ff:f7:8c:43:83:32: 45:68:d4:40:2c:0d:c5:da:8e:b5:56:ee:7f:d7:80:69:51:41: 01:86:d5:20:15:a8:3f:ef:7e:90:21:69:24:40:f7:f9:ea:89: 4a:e0:9c:93:c1:35:a4:ac:b8:48:2a:e6:b6:60:83:32:06:2c: ee:ee:4b:2f:eb:1d:2b:71:5f:71:af:48:af:ae:f9:ba:23:19: 8a:e4:56:38:d4:fb:98:20:f4:e4:e1:80:8a:5a:d3:58:11:b2: ac:5f:ae:2b:ab:12:b3:af:11:46:45:60:ca:c0:bd:cd:8f:a9: f5:c9:32:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6Xh9VsRrQzskGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm NDkzMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NmI5ZWRjMjUtNTgyMC00NDI4LTg3YzYtYmVlZGI4ZDY2ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNdgHWyVWctG8OXlXaoecItYOmH81S9uHMkz r9xykienzIr9tYOA5CjOBSGQvHkpdOmSC8CMM9a3YX0hcoRjwAzN6y0jdRihmFdR fRQqzFVn25egbP6rOZPajXeS2/TQtxFnL1oWZ5zm4fbgVY4vxbYZFNRrj85D/tTQ dHAtAcfSiiTHG/A2zm3YlzOTmUtF9aEfJmqqopPfsDpXBiHimxdSsEpML1bkOKJm 9yx2e5tlp4ytXqqfoNS2u/QHPP5oMxCavVxQtg8Ac4/yO1v6jOEC1LVapVlJhzPD v8jqEDgOeV+YBJEafeG9AGiTaRNYnEp3o1+Tc9LlzXUMCWL3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxqhKmik697CfmV6AdVe98hotlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4 Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvNzQ3MmI0NDMtZDI2Zi0z ZDhmLThkODktYzJiOGRjMWRkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk ZWExZmY0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZKbnZPHfUw4lW9E4QAn1aOVN5vgSffCMPUdic4XGbaUty4u8OfeWpK WanLmT+G7/bRuUW/X3xz3qw4uqFWfBf3/JRN2NGvm3GePZOIsIUPdp243cQ7rkHc jv6VlXPFwkvBHq6ausvdibxOIkhzxKGQRug27V85M+OYkG82B3sTaVTaMipi8SyY zf/3jEODMkVo1EAsDcXajrVW7n/XgGlRQQGG1SAVqD/vfpAhaSRA9/nqiUrgnJPB NaSsuEgq5rZggzIGLO7uSy/rHStxX3GvSK+u+bojGYrkVjjU+5gg9OThgIpa01gR sqxfriurErOvEUZFYMrAvc2PqfXJMrU= -----END CERTIFICATE-----Generated at Sun Apr 27 19:10:20 2025 by rpki-client