$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa File: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json) Hash identifier: R8kYHcMwBbN4yW1s8CEa1yWbQ+bpaV4FIcgcpZp7Apw= Subject key identifier: 79:D1:4F:A9:54:3A:07:FA:23:EC:F1:6E:CE:1E:64:5F:F2:6E:77:2D Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7 Certificate serial: 010D0C9F432858496A19ACB85767A6D87C33C200 Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 202013 IP address blocks: 198.161.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ac:b8:57:67:a6:d8:7c:33:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=d8f1ccd5-9a88-43f0-8c9a-1914d43cb5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5d:e5:5f:9d:4c:42:01:73:ff:d1:04:d1:dc: ca:51:a0:ee:89:fb:a8:c8:54:de:c5:d9:3a:e4:85: ca:94:16:05:1d:63:72:49:df:67:ba:ab:79:24:4f: 6f:b1:61:4d:fc:44:08:7d:32:f0:02:07:14:38:43: 1c:bb:66:d0:af:8c:06:ec:6d:1e:12:50:88:22:da: 51:69:bf:e9:db:45:b4:de:59:1c:72:d4:a5:c3:54: ec:fd:e1:e4:29:3b:50:e3:80:df:ca:e8:e3:35:57: 80:9a:3c:18:c3:4f:5b:5f:bb:8b:8c:23:58:c7:f9: da:df:7a:1a:d0:a1:d4:84:b8:b3:46:f4:51:29:d9: d4:8e:21:a7:49:11:a7:27:74:e1:ff:07:8e:de:5d: 34:1b:a4:90:52:db:c1:6e:7e:5e:c2:26:54:ae:c3: cb:47:1b:a7:56:8a:76:f5:b2:09:32:98:83:e7:7d: 2a:c6:0e:c3:d8:6c:2b:c6:65:06:d5:d9:35:74:8d: 7d:0c:bc:73:6f:ef:70:31:3b:48:e6:7f:f5:ae:e8: 41:9f:10:1d:11:9b:54:4d:7f:9c:79:78:f8:db:48: 01:1d:c9:fd:cb:a6:ad:12:a3:0f:03:68:ef:3f:d4: c2:b1:b6:41:eb:cd:d4:eb:e2:21:5e:5f:4c:41:2a: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D1:4F:A9:54:3A:07:FA:23:EC:F1:6E:CE:1E:64:5F:F2:6E:77:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl X509v3 Authority Key Identifier: keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer sbgp-ipAddrBlock: critical IPv4: 198.161.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cf:56:8a:09:b2:19:c9:f2:1c:6d:46:02:c1:10:ce:09:b7: 7b:de:1e:9c:05:56:b6:31:10:3e:e0:17:ce:2a:ea:dc:ef:d4: f6:1c:ba:95:7e:8b:0c:41:e7:d6:dc:39:89:61:63:ed:e4:a9: 5d:41:dd:83:98:a2:b6:2f:0e:f3:14:1f:4d:35:67:16:4b:a5: fa:a8:54:f0:5f:04:78:40:ad:14:67:20:6a:39:78:f4:a6:b2: 13:af:5a:6d:43:23:dc:bb:4f:b0:c5:54:7f:28:89:44:9d:0c: e6:64:b1:1f:88:e4:a0:e7:fb:f3:54:85:d8:76:c9:d1:4a:bd: ef:c7:41:09:a2:2c:ef:a6:80:95:87:89:59:e5:ff:68:ff:2e: 9f:d9:c6:eb:e6:67:e0:a8:0e:a8:30:94:98:a7:bc:53:e5:f4: 7c:e1:93:e4:0b:39:93:53:6f:91:cb:cc:6f:f8:ed:cc:cf:99: 68:fc:b4:ff:97:3f:75:90:71:90:d6:30:58:ad:da:76:bc:ac: 93:3d:b3:df:39:a7:a1:19:2d:72:09:3d:f8:92:de:90:29:98: eb:8e:c4:22:f4:d1:94:61:fc:58:9e:1f:22:19:7c:47:2a:54: 68:ed:59:3b:08:fc:99:4a:86:1c:9f:d5:9a:7a:be:2f:6a:4f: 76:eb:d3:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGay4V2em2HwzwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1 MmI3MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZDhmMWNjZDUtOWE4OC00M2YwLThjOWEtMTkxNGQ0M2NiNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF3lX51MQgFz/9EE0dzKUaDuifuoyFTexdk6 5IXKlBYFHWNySd9nuqt5JE9vsWFN/EQIfTLwAgcUOEMcu2bQr4wG7G0eElCIItpR ab/p20W03lkcctSlw1Ts/eHkKTtQ44DfyujjNVeAmjwYw09bX7uLjCNYx/na33oa 0KHUhLizRvRRKdnUjiGnSRGnJ3Th/weO3l00G6SQUtvBbn5ewiZUrsPLRxunVop2 9bIJMpiD530qxg7D2GwrxmUG1dk1dI19DLxzb+9wMTtI5n/1ruhBnxAdEZtUTX+c eXj420gBHcn9y6atEqMPA2jvP9TCsbZB683U6+IhXl9MQSorzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnRT6lUOgf6I+zxbs4eZF/ybnctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1 NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZGEyOGNmMDAtOGY4Yi0z OTUzLWE1MGItNDA2YWFjM2E0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5 MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2 NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl YzYxNjUyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArPVooJshnJ8hxtRgLBEM4Jt3veHpwFVrYxED7gF84q6tzv1PYcupV+ iwxB59bcOYlhY+3kqV1B3YOYorYvDvMUH001ZxZLpfqoVPBfBHhArRRnIGo5ePSm shOvWm1DI9y7T7DFVH8oiUSdDOZksR+I5KDn+/NUhdh2ydFKve/HQQmiLO+mgJWH iVnl/2j/Lp/ZxuvmZ+CoDqgwlJinvFPl9Hzhk+QLOZNTb5HLzG/47czPmWj8tP+X P3WQcZDWMFit2na8rJM9s985p6EZLXIJPfiS3pApmOuOxCL00ZRh/FieHyIZfEcq VGjtWTsI/JlKhhyf1Zp6vi9qT3br09s= -----END CERTIFICATE-----Generated at Mon Apr 28 01:22:55 2025 by rpki-client