$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa File: 9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa (raw, json) Hash identifier: g0Gs1wC0+cp7Z/6x4bLO2391A2t/ynaTOLO9CbB5NNc= Subject key identifier: 3A:1C:61:C5:06:88:99:C3:0C:B6:0A:D1:0A:30:22:C7:D9:33:28:0B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1876324938DB5338C7B8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 198.166.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:18:76:32:49:38:db:53:38:c7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=ac93896c-3096-4f2c-b4d8-53b3185d2af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:19:56:aa:4f:e0:74:37:b7:0d:d7:e7:8e: 5f:a2:c2:52:db:90:4c:92:d3:88:ef:fc:62:d5:12: b9:f8:ee:3e:da:39:bb:34:5c:41:8b:e1:68:14:67: a7:2d:98:13:03:30:f5:c1:fd:bd:16:05:ef:20:0f: 46:28:d8:ec:83:9d:cd:82:57:7c:02:b4:e6:ca:8e: 1b:70:5d:ea:48:79:47:b1:af:3d:18:69:76:be:bb: 20:ae:41:dd:5e:4d:12:12:55:8b:6f:f6:e7:5a:db: a0:83:34:2b:e7:44:3a:8c:a1:44:14:d2:c6:f8:96: c3:af:2c:c9:85:71:b9:d4:7c:6d:fa:dc:05:87:66: 57:63:dc:22:05:fa:0e:41:e8:c0:1c:84:9e:62:85: f9:e6:91:53:1c:f9:bd:79:31:ba:4c:96:50:34:a3: 9c:00:3a:09:c9:29:41:66:14:1c:e3:13:db:da:24: e9:5f:08:2b:fb:85:3b:b2:35:c5:5a:8d:48:df:09: a3:1e:06:bf:3e:0b:37:62:29:4a:3e:a9:4a:b5:80: f8:a8:45:85:76:b8:2b:c8:16:ad:99:3a:c0:84:c9: ef:a7:4a:4d:ab:d8:14:6c:b7:55:ab:9b:e2:00:a9: 71:5a:b1:20:6a:90:8c:ff:41:bb:10:74:34:c0:dd: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1C:61:C5:06:88:99:C3:0C:B6:0A:D1:0A:30:22:C7:D9:33:28:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.166.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:02:52:a4:1e:85:48:df:39:79:de:27:b7:d0:5b:21:11:ab: 38:ba:08:65:05:2e:19:fd:da:81:9c:ff:e5:db:c7:26:2b:0e: 18:42:66:aa:81:05:43:d6:ca:68:f3:a5:3a:af:2c:7c:e5:b3: b4:26:fb:49:db:74:71:10:b7:c6:d5:af:c4:26:89:9c:f0:4a: dc:d8:93:ca:3c:26:90:93:0a:13:d0:b5:c7:93:e1:79:91:80: 17:08:b6:11:61:52:55:8a:c2:0d:a8:54:87:9f:c3:12:bc:da: 2e:ce:92:f2:ee:ca:6d:18:ce:15:04:e4:0e:88:05:87:ba:1a: 2e:3c:30:77:74:3a:d8:a5:59:06:a4:49:b0:ea:3c:52:3e:12: 78:c9:00:0a:5b:1d:8f:07:31:b0:32:a0:1b:1d:67:55:0c:b8: 80:e8:bb:7c:7c:f3:de:ff:77:26:8a:2b:e5:ce:bb:3c:53:55: bd:fc:12:94:0d:9c:6d:83:0c:d2:46:31:28:6f:fe:11:a1:51: 54:72:cc:3a:44:55:04:75:f1:07:bc:37:9c:a7:b0:3a:38:20: af:a4:9c:db:1b:3d:59:17:98:f8:b5:c7:cb:6d:0e:66:e2:b6: 6f:91:54:f9:a5:ba:53:a1:dc:d4:01:2d:47:a3:b4:7a:a4:76: 2d:d7:51:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxh2Mkk421M4x7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YWM5Mzg5NmMtMzA5Ni00ZjJjLWI0ZDgtNTNiMzE4NWQyYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFYZVqpP4HQ3tw3X545fosJS25BMktOI7/xi 1RK5+O4+2jm7NFxBi+FoFGenLZgTAzD1wf29FgXvIA9GKNjsg53Ngld8ArTmyo4b cF3qSHlHsa89GGl2vrsgrkHdXk0SElWLb/bnWtuggzQr50Q6jKFEFNLG+JbDryzJ hXG51Hxt+twFh2ZXY9wiBfoOQejAHISeYoX55pFTHPm9eTG6TJZQNKOcADoJySlB ZhQc4xPb2iTpXwgr+4U7sjXFWo1I3wmjHga/Pgs3YilKPqlKtYD4qEWFdrgryBat mTrAhMnvp0pNq9gUbLdVq5viAKlxWrEgapCM/0G7EHQ0wN2NLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDocYcUGiJnDDLYK0QowIsfZMygLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWMxNDM0MjQtNGU3Yy0z YmRmLTlhNzgtMmU1NTBlN2NhN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQCUqQehUjfOXneJ7fQWyERqzi6CGUFLhn92oGc/+XbxyYrDhhCZqqB BUPWymjzpTqvLHzls7Qm+0nbdHEQt8bVr8QmiZzwStzYk8o8JpCTChPQtceT4XmR gBcIthFhUlWKwg2oVIefwxK82i7OkvLuym0YzhUE5A6IBYe6Gi48MHd0OtilWQak SbDqPFI+EnjJAApbHY8HMbAyoBsdZ1UMuIDou3x8897/dyaKK+XOuzxTVb38EpQN nG2DDNJGMShv/hGhUVRyzDpEVQR18Qe8N5ynsDo4IK+knNsbPVkXmPi1x8ttDmbi tm+RVPmlulOh3NQBLUejtHqkdi3XUec= -----END CERTIFICATE-----Generated at Sun Apr 27 15:54:35 2025 by rpki-client