$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a10750d3-81f3-303f-8889-3c2a737ac0dc.roa File: a10750d3-81f3-303f-8889-3c2a737ac0dc.roa (raw, json) Hash identifier: 7DhWVboW2Aw9osQH77BCwLQgIl8l9zOqc6JdXPLpf/4= Subject key identifier: B0:A4:6F:4E:DD:F3:62:DB:74:03:36:4A:1C:73:4A:46:CB:81:7E:A9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2F1B0AAD1A8B8BEB4DD00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a10750d3-81f3-303f-8889-3c2a737ac0dc.roa Signing time: Mon 07 Apr 2025 16:33:14 +0000 ROA not before: Mon 07 Apr 2025 16:33:14 +0000 ROA not after: Sun 06 Jul 2025 16:33:14 +0000 asID: 399050 IP address blocks: 198.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:f1:b0:aa:d1:a8:b8:be:b4:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:14 2025 GMT Not After : Jul 6 16:33:14 2025 GMT Subject: CN=e90e344b-62a3-41b0-bdc9-34b9dc0f52a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:36:f8:45:d4:4e:75:63:60:1d:04:2b:f5: 92:cd:4c:d7:cf:bd:08:4d:0d:42:5e:29:50:f0:06: 21:18:e8:e5:92:cd:ec:2b:72:96:62:d4:4c:e6:e9: 15:13:b1:4f:24:56:d1:d6:0a:e8:41:43:59:4b:cd: 2a:9c:70:88:8a:fc:03:fa:53:fe:3d:7f:ba:b5:33: a7:8a:96:09:aa:bb:c6:cc:ff:f5:8f:24:43:78:c9: 22:3f:a2:32:1c:d1:8b:cb:95:26:d3:08:e6:81:c4: c0:80:cc:b4:a7:6b:69:81:41:e3:3c:d4:55:6f:9c: 86:ea:c2:42:fc:f0:b5:ea:dd:ea:da:04:82:36:78: 42:a7:dc:96:8f:1a:3d:88:55:3f:e1:28:6d:d1:20: d0:23:d7:9b:bb:d9:6e:60:3a:dc:34:6f:82:e4:8d: 75:a9:e4:fe:9b:43:e0:67:b6:40:31:6c:b8:a2:39: 29:4e:61:1f:4b:03:1a:7e:aa:52:b6:61:52:69:b6: 77:96:35:11:3c:03:ec:7d:79:e6:df:ff:e9:4b:c9: 01:f0:69:d4:ba:b0:34:d6:4f:21:3a:c1:d4:1b:e3: da:aa:03:0f:07:b8:4a:f7:7d:38:db:1a:82:a3:ce: 4c:40:b0:de:3e:ab:8f:14:2b:87:d0:e1:03:dd:bb: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A4:6F:4E:DD:F3:62:DB:74:03:36:4A:1C:73:4A:46:CB:81:7E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a10750d3-81f3-303f-8889-3c2a737ac0dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2e:2b:c5:d6:b2:3f:a4:12:37:30:4b:47:3f:ca:0c:8b:f8: 5f:40:4c:fa:61:0c:2b:2d:41:da:b0:4d:2f:54:95:23:c7:85: d6:e1:47:1b:d4:f2:06:38:ae:10:c2:34:7f:c3:f8:00:30:05: 76:e8:bf:85:fb:2a:0b:7a:b0:e3:35:10:26:06:50:3b:18:1c: 6b:0c:11:c8:f6:d2:6f:75:d8:d8:45:dc:3e:ed:2a:a4:f7:60: 33:77:6b:5e:ef:47:c7:22:eb:a0:8e:b9:ab:62:cc:a1:4c:a6: cb:ba:ab:4b:31:06:07:20:50:a2:39:91:53:42:f4:f1:80:40: 3c:d6:0c:76:e6:cd:4b:33:7b:e5:c8:18:58:2b:e8:11:35:60: e7:21:b6:55:be:76:9a:54:1e:e4:31:c5:cf:75:da:c8:0b:ba: 5c:64:73:8a:34:d9:13:78:05:50:1a:26:c8:06:10:b0:17:b6: 46:ed:61:fc:28:06:23:0c:73:3b:02:39:87:11:99:5f:76:d5: 29:4a:f0:62:62:59:78:20:0e:bd:b1:bd:80:a5:d5:22:3e:e4: 6e:05:bb:66:df:b4:36:68:a3:d9:01:92:a9:57:6c:ae:7f:5f: 85:c4:3b:03:7b:ff:77:c0:d2:ec:c8:00:78:da:5b:60:0f:5b: 0d:ab:f5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4vGwqtGouL603QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxNFoXDTI1MDcwNjE2MzMxNFowLzEtMCsGA1UEAxMk ZTkwZTM0NGItNjJhMy00MWIwLWJkYzktMzRiOWRjMGY1MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hw2+EXUTnVjYB0EK/WSzUzXz70ITQ1CXilQ 8AYhGOjlks3sK3KWYtRM5ukVE7FPJFbR1groQUNZS80qnHCIivwD+lP+PX+6tTOn ipYJqrvGzP/1jyRDeMkiP6IyHNGLy5Um0wjmgcTAgMy0p2tpgUHjPNRVb5yG6sJC /PC16t3q2gSCNnhCp9yWjxo9iFU/4Sht0SDQI9ebu9luYDrcNG+C5I11qeT+m0Pg Z7ZAMWy4ojkpTmEfSwMafqpStmFSabZ3ljURPAPsfXnm3//pS8kB8GnUurA01k8h OsHUG+PaqgMPB7hK93042xqCo85MQLDePquPFCuH0OED3bsR3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCkb07d82LbdAM2ShxzSkbLgX6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTEwNzUwZDMtODFmMy0z MDNmLTg4ODktM2MyYTczN2FjMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4uK8XWsj+kEjcwS0c/ygyL+F9ATPphDCstQdqwTS9UlSPHhdbhRxvU 8gY4rhDCNH/D+AAwBXbov4X7Kgt6sOM1ECYGUDsYHGsMEcj20m912NhF3D7tKqT3 YDN3a17vR8ci66COuatizKFMpsu6q0sxBgcgUKI5kVNC9PGAQDzWDHbmzUsze+XI GFgr6BE1YOchtlW+dppUHuQxxc912sgLulxkc4o02RN4BVAaJsgGELAXtkbtYfwo BiMMczsCOYcRmV921SlK8GJiWXggDr2xvYCl1SI+5G4Fu2bftDZoo9kBkqlXbK5/ X4XEOwN7/3fA0uzIAHjaW2APWw2r9RE= -----END CERTIFICATE-----Generated at Mon Apr 28 10:36:17 2025 by rpki-client