$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa File: e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa (raw, json) Hash identifier: zdVic/JpTZrH8oYES7acd5kSuwD2PcX4h3w3kwQei20= Subject key identifier: A0:F2:1C:BD:91:0F:54:74:C0:68:45:96:DF:EE:B7:70:19:AD:E0:A6 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F43285849A089D34CB9DDE508DF1B46E8 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 8987 IP address blocks: 198.151.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d3:4c:b9:dd:e5:08:df:1b:46:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=76a8ac5d-ff3f-4f0b-967f-ed5c94919abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:44:3d:4c:25:38:15:19:65:cf:45:4f:4a:ed: 30:4e:46:39:81:a9:22:53:5c:64:81:b3:d1:f1:43: 4b:bb:76:99:7c:17:1f:39:e4:2a:0e:74:8f:79:1d: 0f:68:d1:6f:2a:5c:f8:f0:9f:2a:a2:06:cc:d8:cf: 4f:43:1e:5e:77:34:ed:fb:f3:94:6c:4e:5d:a4:79: 2a:63:23:f0:f2:9a:e5:76:c4:2a:68:50:b4:12:f2: ae:5d:78:9a:bf:f2:97:c7:51:16:4a:1e:6c:45:99: c2:5c:4d:e9:1c:38:12:50:50:01:5e:97:e4:49:21: aa:76:45:f0:5d:d4:ab:e3:80:eb:61:eb:37:c6:2c: 55:2b:11:ef:1c:83:d3:ce:57:03:0f:eb:21:af:4c: 29:51:91:66:6b:b7:3e:c0:ae:0d:69:2c:ec:6c:da: f2:a5:e7:27:65:de:4d:16:09:43:db:21:34:37:96: 44:a5:87:3d:e8:24:85:0d:ef:25:bf:04:c8:42:3c: 41:ee:af:56:57:7c:78:7d:e5:84:82:c7:3f:aa:d7: d0:19:70:1a:e9:af:af:76:8f:2c:0a:f3:f4:f6:66: a5:93:8d:b7:32:5b:0c:6c:e6:02:be:3e:3f:cb:2e: 06:26:53:37:a0:33:e4:f6:91:f2:d7:01:59:6d:13: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:1C:BD:91:0F:54:74:C0:68:45:96:DF:EE:B7:70:19:AD:E0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.151.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9d:3e:6c:3c:35:85:4c:93:f8:e3:a1:9b:40:99:75:72:2d: 2d:a8:f1:24:98:1e:80:3b:7b:5a:f8:dd:60:d0:36:12:15:c9: 85:4e:22:ef:3b:d7:39:29:f9:3b:45:42:22:4b:b2:69:70:6a: 4c:0c:cf:94:d4:62:54:87:7f:fc:af:aa:1f:9c:25:ab:c5:a7: c4:93:1f:7d:da:a5:8a:ab:57:48:a2:d7:6f:be:e2:35:36:20: 15:56:72:4a:43:04:96:8b:39:5c:30:46:06:f2:80:b2:10:f9: 11:4b:04:36:69:d9:26:85:6d:07:5b:70:e9:36:9e:f2:21:39: dc:9f:1e:48:16:63:e3:31:64:40:67:00:43:4c:ce:ef:bd:16: 7d:f0:90:93:f4:e1:db:b5:aa:23:2a:a8:2e:17:f1:a1:eb:1c: 0e:ed:11:bd:e2:4a:41:de:d2:30:32:1c:fc:19:c6:e6:ec:8e: df:6d:68:0e:cf:99:43:f5:e5:c0:9c:59:a5:62:ee:46:a3:a5: fb:6c:83:8a:17:b1:c3:61:74:1f:a7:e1:27:b9:ab:28:c9:cc: 94:86:d1:bb:b9:9e:43:39:b0:e9:92:24:10:33:7b:92:7b:63: dd:21:8c:49:32:21:dc:8d:39:24:e8:df:d7:2a:0a:f8:b2:c8: ad:82:6a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidNMud3lCN8bRugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NzZhOGFjNWQtZmYzZi00ZjBiLTk2N2YtZWQ1Yzk0OTE5YWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkQ9TCU4FRllz0VPSu0wTkY5gakiU1xkgbPR 8UNLu3aZfBcfOeQqDnSPeR0PaNFvKlz48J8qogbM2M9PQx5edzTt+/OUbE5dpHkq YyPw8prldsQqaFC0EvKuXXiav/KXx1EWSh5sRZnCXE3pHDgSUFABXpfkSSGqdkXw XdSr44DrYes3xixVKxHvHIPTzlcDD+shr0wpUZFma7c+wK4NaSzsbNrypecnZd5N FglD2yE0N5ZEpYc96CSFDe8lvwTIQjxB7q9WV3x4feWEgsc/qtfQGXAa6a+vdo8s CvP09malk423MlsMbOYCvj4/yy4GJlM3oDPk9pHy1wFZbRM2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDyHL2RD1R0wGhFlt/ut3AZreCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvZTRhY2FhNmEtOWIyMi0z NjVlLWE3ZDAtYThhNGRlMmU3NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxpcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEadPmw8NYVMk/jjoZtAmXVyLS2o8SSYHoA7e1r43WDQNhIVyYVOIu87 1zkp+TtFQiJLsmlwakwMz5TUYlSHf/yvqh+cJavFp8STH33apYqrV0ii12++4jU2 IBVWckpDBJaLOVwwRgbygLIQ+RFLBDZp2SaFbQdbcOk2nvIhOdyfHkgWY+MxZEBn AENMzu+9Fn3wkJP04du1qiMqqC4X8aHrHA7tEb3iSkHe0jAyHPwZxubsjt9taA7P mUP15cCcWaVi7kajpftsg4oXscNhdB+n4Se5qyjJzJSG0bu5nkM5sOmSJBAze5J7 Y90hjEkyIdyNOSTo39cqCviyyK2CajE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:50 2025 by rpki-client