$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa File: 328e6c00-d857-3fdd-bf11-e5ff675483b4.roa (raw, json) Hash identifier: S6QlAyVtMS+KcWxS+P1px+WCey5ADYgz1jLPIX47Q2s= Subject key identifier: 66:83:87:03:C1:6A:01:BB:4E:10:4C:BE:AD:E7:06:AE:65:52:38:00 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584929E3CE928302D2BCCA0B1B80 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 3136 IP address blocks: 198.150.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:ce:92:83:02:d2:bc:ca:0b:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=bb8bbb8a-c1e2-4560-b049-e4c26b22437d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:60:ce:e7:f0:bd:4c:e4:9d:78:65:5c:b8: b0:c8:65:22:dd:04:24:91:ad:16:4b:fd:88:93:fc: 77:b1:82:ce:fb:f5:ee:27:ea:c8:c0:22:a7:e9:af: d7:e0:81:b5:7f:90:0e:99:36:9c:0d:36:d5:8a:ca: e3:40:e2:f2:27:7f:04:a2:1a:56:4a:98:de:65:cc: 61:8a:ed:ca:7b:31:c8:4f:7e:db:9f:1f:0a:7f:d5: ae:6b:1d:42:55:d1:b9:b7:37:b4:d9:d7:bf:ea:7c: 1d:fd:cb:bc:ec:da:3d:3f:6a:19:06:3e:e5:4f:12: 68:9d:4f:d7:7d:21:91:82:fa:57:78:3a:39:99:1b: f4:cf:b8:df:32:18:e4:4e:9b:4c:e8:13:4d:e6:62: ff:ff:f9:c1:43:03:07:29:9d:71:6d:d5:15:2b:22: cc:82:a0:52:53:02:5c:d8:99:67:ab:2d:8d:aa:41: 55:76:b8:3b:07:73:21:4b:02:df:75:ac:3d:69:3d: 29:87:b4:26:ec:05:2b:f1:0d:20:23:54:fa:a8:3b: ee:a7:0a:36:ef:32:ec:92:fc:83:55:9e:78:f5:9f: 19:ae:e2:ae:06:c0:84:32:52:af:56:ca:2b:7d:97: 86:7c:4e:8a:53:0f:55:ae:04:f7:35:18:83:cb:78: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:83:87:03:C1:6A:01:BB:4E:10:4C:BE:AD:E7:06:AE:65:52:38:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5e:1f:91:da:7a:fb:b1:ba:b6:e0:9e:71:e8:27:ba:67:ed: 6f:61:17:a0:f9:01:3a:fc:ea:f9:b8:57:07:65:94:fc:d5:3b: 00:47:f5:13:97:26:07:b8:ad:80:57:51:59:86:9f:09:2e:52: 32:eb:5e:d7:4b:ac:d7:c7:0e:2e:2a:49:64:55:ba:d6:a1:09: fd:d7:54:7f:a4:dd:09:46:9d:01:39:26:64:44:2f:cc:d6:52: 54:50:22:f8:61:b0:b0:9f:99:8a:94:90:5e:1c:00:b8:3b:05: d9:77:d8:88:62:a7:62:63:cb:f6:9f:92:ba:15:e4:2d:31:d0: c0:ff:a9:76:4e:0a:9a:75:86:98:19:6e:85:c1:1b:eb:e9:31: a7:a6:d4:0a:b0:ab:2f:c4:90:0d:a3:2a:47:e6:a4:fe:99:d1: 81:3e:e3:a9:10:da:97:25:69:36:28:9f:75:ee:a5:61:02:1b: db:29:e3:e3:29:d5:13:f6:3c:e3:ab:90:4d:f8:e9:0e:ad:0f: ac:18:cd:d4:e5:c1:c8:51:09:20:aa:3e:04:3f:15:fc:80:20: 9c:76:2a:5a:90:a1:7d:fb:16:15:03:d4:35:f4:0b:75:cc:d7: f0:ff:cb:93:b1:95:70:85:08:d2:66:03:8f:9e:e6:c8:4d:6e: 19:f5:86:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp486SgwLSvMoLG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk YmI4YmJiOGEtYzFlMi00NTYwLWIwNDktZTRjMjZiMjI0MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh9gzufwvUzknXhlXLiwyGUi3QQkka0WS/2I k/x3sYLO+/XuJ+rIwCKn6a/X4IG1f5AOmTacDTbVisrjQOLyJ38EohpWSpjeZcxh iu3KezHIT37bnx8Kf9Wuax1CVdG5tze02de/6nwd/cu87No9P2oZBj7lTxJonU/X fSGRgvpXeDo5mRv0z7jfMhjkTptM6BNN5mL///nBQwMHKZ1xbdUVKyLMgqBSUwJc 2Jlnqy2NqkFVdrg7B3MhSwLfdaw9aT0ph7Qm7AUr8Q0gI1T6qDvupwo27zLskvyD VZ549Z8ZruKuBsCEMlKvVsorfZeGfE6KUw9VrgT3NRiDy3hRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaDhwPBagG7ThBMvq3nBq5lUjgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMzI4ZTZjMDAtZDg1Ny0z ZmRkLWJmMTEtZTVmZjY3NTQ4M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxeH5HaevuxurbgnnHoJ7pn7W9hF6D5ATr86vm4VwdllPzVOwBH9ROX Jge4rYBXUVmGnwkuUjLrXtdLrNfHDi4qSWRVutahCf3XVH+k3QlGnQE5JmREL8zW UlRQIvhhsLCfmYqUkF4cALg7Bdl32Ihip2Jjy/afkroV5C0x0MD/qXZOCpp1hpgZ boXBG+vpMaem1Aqwqy/EkA2jKkfmpP6Z0YE+46kQ2pclaTYon3XupWECG9sp4+Mp 1RP2POOrkE346Q6tD6wYzdTlwchRCSCqPgQ/FfyAIJx2KlqQoX37FhUD1DX0C3XM 1/D/y5OxlXCFCNJmA4+e5shNbhn1hkw= -----END CERTIFICATE-----Generated at Wed Apr 30 09:37:50 2025 by rpki-client