$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dcec4c08-fc33-371d-b84b-01131cd6e11c.roa File: dcec4c08-fc33-371d-b84b-01131cd6e11c.roa (raw, json) Hash identifier: GgjB5hLP5ziLSf+uRlCBz1G2eFZfrVgAcwEvscHqyfM= Subject key identifier: CC:C7:AE:D4:7F:9E:1F:99:45:AC:7D:74:F0:64:2B:88:10:86:E1:6A Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2F2334F599328EB467780 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dcec4c08-fc33-371d-b84b-01131cd6e11c.roa Signing time: Mon 07 Apr 2025 16:33:15 +0000 ROA not before: Mon 07 Apr 2025 16:33:15 +0000 ROA not after: Sun 06 Jul 2025 16:33:15 +0000 asID: 81 IP address blocks: 198.86.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:f2:33:4f:59:93:28:eb:46:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:15 2025 GMT Not After : Jul 6 16:33:15 2025 GMT Subject: CN=e320034f-5ba2-45a3-b601-0c5d2b61894d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:64:95:c9:19:68:26:31:cd:59:45:b8:84: b2:29:15:c4:c5:3c:3a:89:02:e1:84:36:bd:98:7b: 2f:84:2f:0c:62:3a:f0:49:3a:27:1b:24:3d:b5:b6: d9:5e:26:e2:26:58:fb:2f:f1:00:e0:f2:55:28:58: 5d:01:4a:43:7c:c9:23:1b:c5:47:af:99:de:ac:f6: 43:27:9c:34:1a:61:39:bb:cd:d5:76:10:11:f0:70: e0:2b:b0:13:7c:03:89:8d:e4:b6:8c:be:38:9c:ea: 14:88:93:4d:2c:da:7e:5b:5d:ec:5b:30:f7:a8:af: e8:06:ca:14:00:35:24:3f:a6:df:b0:53:f2:b5:99: 69:5a:6c:5c:13:30:ae:b4:dd:59:50:03:88:91:69: 65:15:5d:00:32:31:b3:69:55:1f:ed:0c:6c:a3:ad: 51:70:ef:4f:8d:cc:18:66:02:91:21:dc:65:13:e0: 47:3c:1f:d8:be:f9:76:d0:97:4a:e1:12:8d:7d:96: 43:be:69:a6:c3:47:f7:aa:a9:a0:73:5b:06:31:53: 6a:0f:1c:da:fc:3f:27:72:a3:27:10:fa:5d:98:47: e0:be:77:1f:06:96:fb:74:51:f3:83:0a:b3:fb:81: 05:4a:83:a0:b5:c8:94:1a:91:c1:cc:fb:a3:23:21: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C7:AE:D4:7F:9E:1F:99:45:AC:7D:74:F0:64:2B:88:10:86:E1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dcec4c08-fc33-371d-b84b-01131cd6e11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b3:73:89:ef:c1:46:9f:8f:ce:c7:57:0e:74:48:db:0f:4b: 8b:4a:53:9d:46:ee:0f:b0:92:5e:c3:32:05:41:2d:ea:8c:21: c4:72:73:44:cc:20:b1:eb:85:3b:f6:ce:23:fc:c9:4f:25:c1: 3c:2d:e2:ee:43:53:03:dc:d4:1e:13:c8:72:de:03:42:94:a6: d2:74:7d:8d:86:c9:93:44:8a:cd:2c:2d:a8:00:69:d6:b7:08: df:d9:e7:b9:b1:ac:86:5c:c2:99:f2:4c:83:a7:64:3b:0f:18: 04:9d:0b:b2:ec:0a:54:77:2a:ef:73:54:61:96:13:e0:55:3b: 5d:35:39:7d:ce:4d:30:a6:f8:9f:a6:7a:80:af:a2:a3:08:ff: 46:0c:ec:5b:7e:74:c9:93:c9:66:0b:b3:43:96:65:db:fc:3f: 8e:7c:91:7e:90:58:99:8e:fc:7b:c2:49:d5:bc:5e:22:16:86: 87:0d:be:8a:ed:41:fa:74:de:b6:84:13:3a:87:5f:d2:b0:0f: ba:ca:05:9a:28:cc:fe:d9:b6:3a:a4:2c:ef:6c:45:d2:ed:b6: 2f:e0:ad:d1:3f:45:2f:e0:fb:27:8d:d2:2a:18:3b:60:ff:33: e3:73:0e:3c:81:fb:1a:ac:0b:27:3c:26:7d:1e:fb:66:bf:ef: 3c:ed:b4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4vIzT1mTKOtGd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxNVoXDTI1MDcwNjE2MzMxNVowLzEtMCsGA1UEAxMk ZTMyMDAzNGYtNWJhMi00NWEzLWI2MDEtMGM1ZDJiNjE4OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj1klckZaCYxzVlFuISyKRXExTw6iQLhhDa9 mHsvhC8MYjrwSTonGyQ9tbbZXibiJlj7L/EA4PJVKFhdAUpDfMkjG8VHr5nerPZD J5w0GmE5u83VdhAR8HDgK7ATfAOJjeS2jL44nOoUiJNNLNp+W13sWzD3qK/oBsoU ADUkP6bfsFPytZlpWmxcEzCutN1ZUAOIkWllFV0AMjGzaVUf7Qxso61RcO9PjcwY ZgKRIdxlE+BHPB/Yvvl20JdK4RKNfZZDvmmmw0f3qqmgc1sGMVNqDxza/D8ncqMn EPpdmEfgvncfBpb7dFHzgwqz+4EFSoOgtciUGpHBzPujIyEv7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzHrtR/nh+ZRax9dPBkK4gQhuFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGNlYzRjMDgtZmMzMy0z NzFkLWI4NGItMDExMzFjZDZlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuzc4nvwUafj87HVw50SNsPS4tKU51G7g+wkl7DMgVBLeqMIcRyc0TM ILHrhTv2ziP8yU8lwTwt4u5DUwPc1B4TyHLeA0KUptJ0fY2GyZNEis0sLagAada3 CN/Z57mxrIZcwpnyTIOnZDsPGASdC7LsClR3Ku9zVGGWE+BVO101OX3OTTCm+J+m eoCvoqMI/0YM7Ft+dMmTyWYLs0OWZdv8P458kX6QWJmO/HvCSdW8XiIWhocNvort Qfp03raEEzqHX9KwD7rKBZoozP7ZtjqkLO9sRdLtti/grdE/RS/g+yeN0ioYO2D/ M+NzDjyB+xqsCyc8Jn0e+2a/7zzttDc= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:30 2025 by rpki-client