$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b639b549-344e-301f-b373-0bc9149fc58d.roa File: b639b549-344e-301f-b373-0bc9149fc58d.roa (raw, json) Hash identifier: qRr3Er0LYxppI0OldAbF8w6lO/lBqCnP3Q/jmkX+tWk= Subject key identifier: 2D:A0:86:A4:F7:07:96:C2:E5:10:47:7B:46:78:EF:3D:47:FF:0B:54 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1867915ECF8850B1B540 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b639b549-344e-301f-b373-0bc9149fc58d.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 198.166.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:18:67:91:5e:cf:88:50:b1:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=095a24e1-be28-4a32-9ade-b51f1238ce47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:57:7c:d2:85:7c:60:db:23:24:9f:a9:1f: 28:56:62:f2:07:85:fe:6b:04:f5:e4:9a:fb:d6:6b: b0:54:19:a3:16:28:0f:d2:38:a0:78:62:c7:a0:59: 83:44:84:55:c6:d0:9e:e6:eb:78:99:fb:f7:af:28: ca:2b:0f:26:40:90:52:18:27:e1:7f:75:5b:55:68: 2f:9c:8b:14:59:92:09:b8:d5:91:17:57:4e:da:48: d3:e8:f6:ff:92:15:f9:79:01:ae:04:cc:2d:d1:80: d2:33:b3:48:72:a8:ac:48:d7:27:a1:ae:41:ae:ab: 47:4e:93:51:87:85:47:04:29:eb:5d:94:62:22:db: f0:ad:0c:e6:c0:60:a0:40:c2:ba:a7:08:4d:67:d9: 6b:95:5a:35:19:4f:ac:a1:73:0b:90:68:f3:c4:d4: ce:3d:e9:cd:d6:4b:15:ed:71:d3:d0:43:e1:6f:00: 57:24:64:ac:ee:0e:31:f3:61:bd:76:db:e3:27:4b: 81:be:58:24:b5:67:e7:5b:d8:b0:4f:4a:7b:f2:35: 41:e0:ff:e0:fd:bd:64:47:2f:61:34:d0:3e:2b:5b: 12:35:98:9a:24:28:3f:12:99:34:55:78:69:c6:1d: 50:9c:d0:94:5d:99:6c:56:e7:cc:cb:bc:f8:1f:b9: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A0:86:A4:F7:07:96:C2:E5:10:47:7B:46:78:EF:3D:47:FF:0B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b639b549-344e-301f-b373-0bc9149fc58d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.166.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:53:9e:d0:e5:20:f2:9e:39:a7:57:66:59:15:80:07:f1:cb: 9b:88:33:54:42:a7:4c:9c:24:5f:6b:4a:f5:b7:ab:24:52:58: 62:ee:f9:63:af:f7:13:c8:62:3f:6c:da:c7:8d:fd:02:6f:00: 2e:41:37:34:8c:c9:fb:4f:a0:f2:a4:a9:81:d2:d5:bd:ec:a0: c4:c9:f1:14:bf:84:f5:78:e1:c7:6a:72:63:f7:73:5e:41:92: 70:4f:3d:73:c3:e8:98:79:6c:df:b9:90:a8:05:d4:fa:29:c9: 2d:24:c6:f6:3c:08:6c:fc:a9:9c:82:4a:87:70:ef:de:a2:13: 64:bb:9f:7c:c4:3f:d8:bf:74:b1:e5:5d:a8:56:ac:37:10:08: 0e:16:03:96:71:09:f2:da:9f:17:76:3c:2a:58:c0:22:b2:bc: a7:d2:aa:38:f8:16:c2:be:6f:c6:7f:1d:7c:fa:14:b8:fa:42: e7:3a:64:62:cf:1f:1e:00:59:7d:05:4d:0f:a6:6f:5f:2b:65: e8:e9:11:ad:25:7e:77:e3:b8:11:4a:7f:37:a6:c0:f4:7c:88: 83:df:88:a9:24:6b:80:ab:cb:b1:3b:30:02:6d:ce:a3:c4:a4: ef:20:a7:75:36:2f:3f:e8:d4:ea:82:13:24:38:95:31:28:a3: 6a:fa:78:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxhnkV7PiFCxtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MDk1YTI0ZTEtYmUyOC00YTMyLTlhZGUtYjUxZjEyMzhjZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLlXfNKFfGDbIySfqR8oVmLyB4X+awT15Jr7 1muwVBmjFigP0jigeGLHoFmDRIRVxtCe5ut4mfv3ryjKKw8mQJBSGCfhf3VbVWgv nIsUWZIJuNWRF1dO2kjT6Pb/khX5eQGuBMwt0YDSM7NIcqisSNcnoa5BrqtHTpNR h4VHBCnrXZRiItvwrQzmwGCgQMK6pwhNZ9lrlVo1GU+soXMLkGjzxNTOPenN1ksV 7XHT0EPhbwBXJGSs7g4x82G9dtvjJ0uBvlgktWfnW9iwT0p78jVB4P/g/b1kRy9h NNA+K1sSNZiaJCg/Epk0VXhpxh1QnNCUXZlsVufMy7z4H7kj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2ghqT3B5bC5RBHe0Z47z1H/wtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjYzOWI1NDktMzQ0ZS0z MDFmLWIzNzMtMGJjOTE0OWZjNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBTntDlIPKeOadXZlkVgAfxy5uIM1RCp0ycJF9rSvW3qyRSWGLu+WOv 9xPIYj9s2seN/QJvAC5BNzSMyftPoPKkqYHS1b3soMTJ8RS/hPV44cdqcmP3c15B knBPPXPD6Jh5bN+5kKgF1PopyS0kxvY8CGz8qZyCSodw796iE2S7n3zEP9i/dLHl XahWrDcQCA4WA5ZxCfLanxd2PCpYwCKyvKfSqjj4FsK+b8Z/HXz6FLj6Quc6ZGLP Hx4AWX0FTQ+mb18rZejpEa0lfnfjuBFKfzemwPR8iIPfiKkka4Cry7E7MAJtzqPE pO8gp3U2Lz/o1OqCEyQ4lTEoo2r6eGc= -----END CERTIFICATE-----Generated at Sat Apr 26 23:08:09 2025 by rpki-client