$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa File: 0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa (raw, json) Hash identifier: nWm1nHB6u1ikJ0IQUxTdSbIv21hwTDORdUY6CncJLb4= Subject key identifier: 96:02:1B:2C:B4:CF:19:84:F1:42:FD:27:1E:7F:C0:AF:91:8C:35:4D Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F4328584961B99EBDBF7579992F9DAB30 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 8987 IP address blocks: 198.22.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9e:bd:bf:75:79:99:2f:9d:ab:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=f095c78d-f6a0-4491-a4da-969fb3ca03bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:b4:55:18:ad:3a:ed:ab:1c:0c:0d:f4:ab: 8d:0d:97:4b:24:7c:59:e3:86:67:4d:89:65:9c:71: eb:56:f1:14:85:90:b8:f5:87:21:61:24:e3:62:e1: ed:3e:3b:3a:8d:dc:5d:a3:56:d1:32:44:dd:ca:64: 7d:76:36:ae:48:dc:4d:65:12:c4:93:c8:48:8a:ae: d4:bd:ec:50:5e:b3:f0:04:6f:d4:54:b2:56:f6:ad: 9e:94:de:5e:db:87:24:dc:0e:4f:60:2a:25:52:6e: e3:3f:51:b1:ed:57:a4:0d:4d:84:d4:45:12:74:f5: cc:90:1b:08:ce:44:f3:ba:fa:37:3e:01:7e:3b:3d: 40:e3:0a:2d:76:4a:46:b6:4b:ec:51:3d:e2:74:52: c0:67:7a:af:73:44:1d:8b:30:c8:bc:75:40:b7:b1: bc:46:41:58:5a:81:66:92:5b:79:6d:9d:38:c8:eb: 3c:79:5d:fd:0e:4e:f2:4e:c0:a2:ad:45:30:ca:65: 26:a8:b5:d4:18:d8:bd:2e:58:25:65:68:fa:c1:9c: 77:06:3e:af:70:61:e2:14:6c:4d:7d:aa:14:9a:d1: ad:3f:f3:56:76:85:c1:c3:13:37:25:e0:94:87:f5: b6:ad:e6:48:0f:d4:ac:69:df:ca:8f:e3:90:2f:dd: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:02:1B:2C:B4:CF:19:84:F1:42:FD:27:1E:7F:C0:AF:91:8C:35:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.22.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:99:d8:fb:b3:f6:38:53:c4:f3:f3:99:e4:4a:8a:a7:20:61: 6a:4b:65:b9:e8:41:34:83:ae:39:a4:7e:70:cb:61:28:c9:75: e1:4e:1b:b8:5c:17:b1:d6:bc:95:69:03:59:64:53:1f:3a:89: dd:65:95:7d:f2:4d:4d:9c:50:c3:d9:d1:96:b5:c0:3c:61:c2: 8c:b4:50:97:bc:e6:a0:3b:67:ea:a0:4a:50:ab:9f:d3:88:63: 2a:31:ce:e5:41:48:5f:58:7d:bc:4d:d2:e8:6a:67:dc:81:03: 01:f4:01:35:d4:d8:84:f9:23:4a:80:82:56:0e:45:b2:9a:de: 2d:30:26:60:73:70:bb:99:29:f1:1d:e1:08:61:d6:4d:e2:2b: 10:5e:c2:51:2e:47:d6:70:10:f1:dc:35:fd:38:8c:29:b6:b7: 5f:da:f5:a5:90:b8:08:d1:1b:1b:28:01:a9:fa:db:a1:60:9a: 1a:fc:b7:db:e5:c1:69:7e:80:b4:7f:b1:01:33:53:f9:a7:8b: 31:de:76:79:d5:9a:da:50:fd:d5:1a:86:7a:94:c9:03:32:0b: 6e:e3:24:36:7e:67:4d:a8:47:59:01:47:2e:d4:92:0a:29:d9: b7:53:1d:5e:2c:29:86:7d:05:42:03:8c:25:9d:21:71:90:32: df:29:37:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ69v3V5mS+dqzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjA5NWM3OGQtZjZhMC00NDkxLWE0ZGEtOTY5ZmIzY2EwM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjK0VRitOu2rHAwN9KuNDZdLJHxZ44ZnTYll nHHrVvEUhZC49YchYSTjYuHtPjs6jdxdo1bRMkTdymR9djauSNxNZRLEk8hIiq7U vexQXrPwBG/UVLJW9q2elN5e24ck3A5PYColUm7jP1Gx7VekDU2E1EUSdPXMkBsI zkTzuvo3PgF+Oz1A4wotdkpGtkvsUT3idFLAZ3qvc0QdizDIvHVAt7G8RkFYWoFm klt5bZ04yOs8eV39Dk7yTsCirUUwymUmqLXUGNi9LlglZWj6wZx3Bj6vcGHiFGxN faoUmtGtP/NWdoXBwxM3JeCUh/W2reZID9Ssad/Kj+OQL90eoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYCGyy0zxmE8UL9Jx5/wK+RjDVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvMGRkYTc4MTAtNzU0MS0z OWMxLTk1YWQtOWNmOTJlNmU1OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOZ2Puz9jhTxPPzmeRKiqcgYWpLZbnoQTSDrjmkfnDLYSjJdeFOG7hc F7HWvJVpA1lkUx86id1llX3yTU2cUMPZ0Za1wDxhwoy0UJe85qA7Z+qgSlCrn9OI YyoxzuVBSF9YfbxN0uhqZ9yBAwH0ATXU2IT5I0qAglYORbKa3i0wJmBzcLuZKfEd 4Qhh1k3iKxBewlEuR9ZwEPHcNf04jCm2t1/a9aWQuAjRGxsoAan626Fgmhr8t9vl wWl+gLR/sQEzU/mnizHednnVmtpQ/dUahnqUyQMyC27jJDZ+Z02oR1kBRy7Ukgop 2bdTHV4sKYZ9BUIDjCWdIXGQMt8pN7U= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:06 2025 by rpki-client