$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa File: 8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa (raw, json) Hash identifier: xC0UhkOEUK0wr9hlY8X8Aggk+6HlXsOahL09n3tL9jU= Subject key identifier: C9:13:73:E5:07:B8:EB:1F:DE:3A:64:7C:01:3C:BC:DE:6D:F0:51:29 Certificate issuer: /CN=7cfe4957-5dcc-4e3d-8c92-31413817894b Certificate serial: 010D0C9F43285849797446CC104BAEABA8DC09B0 Authority key identifier: D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 31898 IP address blocks: 198.49.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:46:cc:10:4b:ae:ab:a8:dc:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfe4957-5dcc-4e3d-8c92-31413817894b Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=3dbc0853-07ba-4244-ad60-1b570dddb833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:16:8f:d7:ad:d6:04:29:06:3b:c5:17:24: 27:ae:0a:59:28:c5:89:28:ad:a7:53:db:21:93:ea: 2b:ac:43:69:0c:b5:92:6d:00:59:ff:e4:fb:a1:1d: 84:6c:80:cc:8e:e7:67:41:01:b3:a1:52:ec:33:2c: 11:19:f7:60:b6:c7:f6:5b:43:76:a3:a7:c9:44:0d: 00:8a:3f:51:8f:a3:e4:52:49:9f:f3:41:59:6b:30: 33:51:30:d0:d9:ee:9b:a1:1a:f4:77:a2:9c:05:b3: b3:7b:4c:4f:35:d9:dd:75:4a:af:47:8f:b3:76:e4: df:ae:73:dd:72:0e:5d:f7:75:38:63:81:58:42:21: d9:62:e0:d8:04:64:aa:eb:13:0d:37:f6:1a:a7:1e: b5:d1:fb:78:f5:a7:62:86:50:0f:03:cc:73:87:cd: 08:86:3f:a0:52:72:0b:a9:e2:66:de:12:b8:6a:7c: 0c:72:7e:b8:42:22:39:91:c6:26:b9:d7:b0:e5:e1: 01:64:4f:7f:c3:b1:60:e0:fa:3a:5d:dc:c2:f8:fd: 3a:05:7f:d8:80:41:bb:6f:2e:c4:6e:a1:ec:93:06: f6:81:cf:f1:53:6c:64:4a:9b:45:7f:a3:35:06:60: 60:de:b2:aa:25:68:cc:34:41:d4:f0:a7:86:13:46: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:13:73:E5:07:B8:EB:1F:DE:3A:64:7C:01:3C:BC:DE:6D:F0:51:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl X509v3 Authority Key Identifier: keyid:D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer sbgp-ipAddrBlock: critical IPv4: 198.49.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b2:d9:75:c1:1e:33:e5:c8:63:a6:52:60:11:ba:71:70:c0: 2f:78:86:b5:1c:70:cd:f8:78:64:bf:c3:b2:4a:66:ea:5b:5d: d9:b7:90:0c:37:7b:59:bd:d4:e4:32:b0:d7:4d:db:40:3f:86: 84:61:b3:a6:bc:44:57:07:40:37:eb:14:63:c4:b1:99:59:4a: fc:8e:be:8f:4c:49:e2:d6:67:e2:6f:be:83:1b:02:19:5e:9d: 6d:b7:51:34:59:7c:b8:8d:5c:54:fc:b9:96:31:5e:04:8d:a6: f5:c8:59:8a:78:e3:af:a8:a5:33:1c:e3:fe:65:0a:40:19:76: a0:01:96:76:d3:75:57:67:bf:fc:c3:2b:a3:06:d6:ae:6c:f1: b5:6b:ae:61:6e:e4:eb:3f:36:ad:6f:64:cf:0d:bb:ac:f0:b3: 30:79:11:6a:1b:be:0b:cd:c0:2d:50:d6:56:1b:1c:e4:26:8e: 67:fe:27:be:28:0f:bf:e6:49:1c:82:81:13:f7:9f:01:45:52: 97:09:42:28:66:d7:18:fa:fa:03:7e:4b:9c:80:72:7a:d3:a4: 5b:3a:45:77:54:b5:2d:e2:26:11:45:04:43:91:25:70:53:24: 9a:41:46:f7:3b:90:f1:02:69:0f:6d:5f:14:c0:fb:2e:e3:38: 91:d1:64:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEbMEEuuq6jcCbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NmZTQ5NTctNWRjYy00ZTNkLThjOTItMzE0MTM4MTc4 OTRiMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk M2RiYzA4NTMtMDdiYS00MjQ0LWFkNjAtMWI1NzBkZGRiODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8YWj9et1gQpBjvFFyQnrgpZKMWJKK2nU9sh k+orrENpDLWSbQBZ/+T7oR2EbIDMjudnQQGzoVLsMywRGfdgtsf2W0N2o6fJRA0A ij9Rj6PkUkmf80FZazAzUTDQ2e6boRr0d6KcBbOze0xPNdnddUqvR4+zduTfrnPd cg5d93U4Y4FYQiHZYuDYBGSq6xMNN/Yapx610ft49adihlAPA8xzh80Ihj+gUnIL qeJm3hK4anwMcn64QiI5kcYmudew5eEBZE9/w7Fg4Po6XdzC+P06BX/YgEG7by7E bqHskwb2gc/xU2xkSptFf6M1BmBg3rKqJWjMNEHU8KeGE0bZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkTc+UHuOsf3jpkfAE8vN5t8FEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83Y2Zl NDk1Ny01ZGNjLTRlM2QtOGM5Mi0zMTQxMzgxNzg5NGIvOGJiMjk5ZTEtZGMxYy0z ZjNlLTllZTYtMTAzNWNlOWExOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2NmZTQ5NTctNWRjYy00ZTNkLThj OTItMzE0MTM4MTc4OTRiLzdjZmU0OTU3LTVkY2MtNGUzZC04YzkyLTMxNDEzODE3 ODk0Yi5jcmwwHwYDVR0jBBgwFoAU0BI1Abxh7vgoThb/36AodeDbY84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83Y2ZlNDk1Ny01ZGNjLTRlM2QtOGM5Mi0zMTQx MzgxNzg5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2y2XXBHjPlyGOmUmARunFwwC94hrUccM34eGS/w7JKZupbXdm3kAw3 e1m91OQysNdN20A/hoRhs6a8RFcHQDfrFGPEsZlZSvyOvo9MSeLWZ+JvvoMbAhle nW23UTRZfLiNXFT8uZYxXgSNpvXIWYp446+opTMc4/5lCkAZdqABlnbTdVdnv/zD K6MG1q5s8bVrrmFu5Os/Nq1vZM8Nu6zwszB5EWobvgvNwC1Q1lYbHOQmjmf+J74o D7/mSRyCgRP3nwFFUpcJQihm1xj6+gN+S5yAcnrTpFs6RXdUtS3iJhFFBEORJXBT JJpBRvc7kPECaQ9tXxTA+y7jOJHRZBo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:27 2025 by rpki-client