$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa File: e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json) Hash identifier: O1/Q7JnLqPBk70u2+T1GZ2JnpfqYxDxiTDNEu2ebXu8= Subject key identifier: E5:89:D2:0A:52:D3:B9:A3:4E:67:ED:78:CE:65:38:62:3C:B6:CA:4D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584909E6A4F83797F22353922780 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 394437 IP address blocks: 198.35.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a4:f8:37:97:f2:23:53:92:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=a783fc06-1694-497d-8190-342712125264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:88:09:2f:d7:7f:b6:3d:69:a1:fb:65:fe: 96:47:a6:12:54:dc:ba:2a:ce:ac:ee:ad:61:3d:77: 82:ad:ce:3e:03:75:11:a6:fc:bd:34:49:57:69:ec: 0e:fb:98:be:28:87:4f:d6:67:9f:cc:5f:fe:7e:d3: e2:2d:73:a8:f9:ef:de:c4:1c:79:5d:f6:5e:75:29: 7d:0d:d8:72:8e:36:34:98:a3:3d:d4:13:9d:60:79: 5f:f2:27:f9:68:52:5f:33:47:17:c4:90:14:04:8f: e6:10:05:20:26:ba:ac:c2:dd:0e:e3:38:be:2a:89: 2b:22:6b:fd:46:f8:6e:55:71:21:56:1b:58:93:68: da:8a:3e:6c:7a:46:5d:fa:67:35:80:3d:51:38:b2: 32:cf:a5:5f:8e:04:70:7b:ae:14:b1:b7:81:f4:42: 6f:27:74:e2:88:3c:0e:97:e3:b3:e6:c8:a0:d6:d4: fa:81:8c:ed:08:b9:ac:64:5e:aa:e1:14:0b:3c:4d: 02:da:f2:80:57:f3:ef:e8:81:cb:fe:01:e4:44:5d: 5f:6b:4b:0f:bc:fa:09:85:70:b8:92:d4:a3:1b:13: 9b:fd:89:6a:22:5c:9a:67:29:ba:a4:bb:c0:12:8c: 50:a1:82:70:45:df:3e:ed:db:b3:9c:2c:8a:9c:18: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:89:D2:0A:52:D3:B9:A3:4E:67:ED:78:CE:65:38:62:3C:B6:CA:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 198.35.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ad:18:03:2a:37:7d:de:cb:99:65:42:e4:40:b9:d2:e3:58: 73:22:77:c2:d8:7d:ca:d9:c5:3f:45:96:03:b3:72:57:31:9b: 31:14:87:99:a7:f0:88:43:5f:0d:53:3e:8f:dc:0f:bd:2b:7a: 87:e0:30:48:ef:2e:08:0a:0d:9a:fe:68:76:33:ab:61:a4:97: f4:71:f3:d8:17:35:bc:1f:4a:56:e0:61:47:4f:a4:ef:80:ba: d9:74:7a:6b:29:91:a6:1b:5c:60:76:61:32:19:d2:b9:70:67: 92:54:b0:15:58:33:b4:83:56:d5:3a:c7:bd:6f:7d:ba:5e:b4: 37:ef:85:cd:d4:bf:e5:b3:70:f1:ec:2a:66:0b:e0:ce:9e:d4: c9:fb:55:4d:58:0b:0a:2b:6a:95:4c:48:5d:22:9b:5a:9f:5a: 91:a6:92:e1:4e:6f:3c:47:7a:9b:19:e4:35:23:0c:e0:01:e8: 38:0b:ef:78:83:59:8a:35:d1:b9:60:a1:7a:5c:db:1d:d3:a0: 87:3b:31:7f:6b:4b:3a:92:c0:7c:87:bf:22:ed:35:5a:9f:d4: d6:9b:44:bf:6f:82:b0:1d:9b:a7:40:83:72:4b:73:53:50:a8: 26:6f:41:37:4e:23:b9:9f:f8:66:02:b0:74:30:d5:0d:65:93: a6:a3:69:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qT4N5fyI1OSJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YTc4M2ZjMDYtMTY5NC00OTdkLTgxOTAtMzQyNzEyMTI1MjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKSICS/Xf7Y9aaH7Zf6WR6YSVNy6Ks6s7q1h PXeCrc4+A3URpvy9NElXaewO+5i+KIdP1mefzF/+ftPiLXOo+e/exBx5XfZedSl9 DdhyjjY0mKM91BOdYHlf8if5aFJfM0cXxJAUBI/mEAUgJrqswt0O4zi+KokrImv9 RvhuVXEhVhtYk2jaij5sekZd+mc1gD1ROLIyz6VfjgRwe64UsbeB9EJvJ3TiiDwO l+Oz5sig1tT6gYztCLmsZF6q4RQLPE0C2vKAV/Pv6IHL/gHkRF1fa0sPvPoJhXC4 ktSjGxOb/YlqIlyaZym6pLvAEoxQoYJwRd8+7duznCyKnBiiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWJ0gpS07mjTmfteM5lOGI8tspNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvZTVmODQ1MWUtZmU1My0z ZDliLTg1YjgtYTA0Yjc4NjI3MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIitGAMqN33ey5llQuRAudLjWHMid8LYfcrZxT9FlgOzclcxmzEUh5mn 8IhDXw1TPo/cD70reofgMEjvLggKDZr+aHYzq2Gkl/Rx89gXNbwfSlbgYUdPpO+A utl0emspkaYbXGB2YTIZ0rlwZ5JUsBVYM7SDVtU6x71vfbpetDfvhc3Uv+WzcPHs KmYL4M6e1Mn7VU1YCworapVMSF0im1qfWpGmkuFObzxHepsZ5DUjDOAB6DgL73iD WYo10blgoXpc2x3ToIc7MX9rSzqSwHyHvyLtNVqf1NabRL9vgrAdm6dAg3JLc1NQ qCZvQTdOI7mf+GYCsHQw1Q1lk6ajaSI= -----END CERTIFICATE-----Generated at Wed Apr 30 07:35:04 2025 by rpki-client