$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa File: 825702a4-e267-3fed-801c-e21c3ef74911.roa (raw, json) Hash identifier: i9wSENd1psaYhJHCRCgWLw6VFSjjzZZKYfFYQCUfLKU= Subject key identifier: 4A:EF:91:E7:0C:83:4A:E5:0A:14:56:7C:B6:4E:32:2A:B8:DF:08:3D Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Certificate serial: 010D0C9F432858490021580DBFD9E47102840480 Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 53594 IP address blocks: 198.200.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:58:0d:bf:d9:e4:71:02:84:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=69224477-23d7-4ce5-b0a3-e4735f787090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:a9:62:2c:bd:a9:7c:dc:22:f0:33:4e:83: 45:b6:37:5c:7c:69:c5:4d:7c:a6:da:7d:be:de:2f: 51:99:c8:6d:0d:ce:69:7d:70:4e:a5:50:64:cd:69: 97:cd:3e:d1:07:3e:cc:e6:d6:a4:0e:ed:6b:ed:9e: 08:4a:61:6d:17:b7:9d:50:b4:72:aa:ba:e7:8e:f7: 37:15:99:8c:b0:e2:63:8f:4b:30:cd:b1:be:fe:3f: a7:2b:f1:8c:40:f4:0b:15:30:dc:e8:69:88:4f:f0: bf:f9:b5:e2:f4:92:68:9c:98:67:09:f5:a4:be:c0: bc:70:95:b9:44:67:fa:a3:33:e5:52:d6:60:bf:ea: 9f:9d:1a:ff:0d:d4:e2:20:26:c2:3a:51:ef:c5:93: 6a:03:82:2d:d7:a6:02:39:f6:0b:63:45:71:fb:1a: de:c3:ac:e5:84:e7:20:99:67:2a:3b:41:12:fd:89: 8a:79:48:46:77:b7:0c:e6:49:8d:35:49:71:59:bb: d7:1c:32:bb:46:30:c0:4b:f9:69:ba:5a:3d:a7:8a: 5c:bc:97:97:49:b0:1b:39:c0:f5:44:64:3c:22:18: 6a:7e:e9:48:38:f0:6e:7c:9b:69:80:59:8b:de:05: 53:4a:35:93:26:a3:41:bf:d0:ff:a7:46:c6:cb:f9: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EF:91:E7:0C:83:4A:E5:0A:14:56:7C:B6:4E:32:2A:B8:DF:08:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl X509v3 Authority Key Identifier: keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer sbgp-ipAddrBlock: critical IPv4: 198.200.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c7:eb:17:67:e4:a8:43:06:ca:26:af:95:ed:bb:38:2b:06: 49:98:1b:ee:c2:e6:ff:ef:f5:0a:f8:ae:dd:90:56:ef:85:1f: ae:c8:ee:14:95:39:2a:d0:b3:32:1a:53:0e:50:bd:a4:71:50: bc:d7:fd:6f:85:1b:24:9b:fe:55:0e:2b:0d:8b:01:db:c6:b9: 13:02:1f:6d:bd:d6:35:b6:fd:cf:1d:1e:c1:67:28:f1:6a:bd: 94:37:ad:29:26:ad:63:30:21:89:5e:71:2e:a4:25:3f:2d:6f: 97:50:5f:fb:88:ff:89:07:b1:dd:37:b0:be:6c:97:cc:07:40: b0:6c:5a:a0:bb:1f:70:2a:c9:54:3c:e5:16:1b:34:c0:3a:78: 4a:e0:34:4e:d3:d0:48:48:0f:b1:59:de:8e:a1:79:34:5e:3b: b2:dc:50:c2:a0:f0:ae:d8:49:13:43:76:d2:35:c9:ff:e0:8f: 60:00:86:69:0e:97:c6:be:22:23:bb:e6:c4:6a:ff:ff:c4:08: f3:cc:fe:fe:5e:0b:38:c8:32:2b:0b:88:99:5f:92:65:2a:9f: 10:3a:5d:8b:02:11:52:a9:a9:f0:56:68:21:9d:0a:52:b9:fb: 50:e4:5e:05:45:60:45:0a:3e:76:12:fb:6f:e1:56:0b:60:68: f5:07:a8:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVgNv9nkcQKEBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4 MTY4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NjkyMjQ0NzctMjNkNy00Y2U1LWIwYTMtZTQ3MzVmNzg3MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9WpYiy9qXzcIvAzToNFtjdcfGnFTXym2n2+ 3i9RmchtDc5pfXBOpVBkzWmXzT7RBz7M5takDu1r7Z4ISmFtF7edULRyqrrnjvc3 FZmMsOJjj0swzbG+/j+nK/GMQPQLFTDc6GmIT/C/+bXi9JJonJhnCfWkvsC8cJW5 RGf6ozPlUtZgv+qfnRr/DdTiICbCOlHvxZNqA4It16YCOfYLY0Vx+xrew6zlhOcg mWcqO0ES/YmKeUhGd7cM5kmNNUlxWbvXHDK7RjDAS/lpulo9p4pcvJeXSbAbOcD1 RGQ8IhhqfulIOPBufJtpgFmL3gVTSjWTJqNBv9D/p0bGy/kyxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErvkecMg0rlChRWfLZOMiq43wg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1 NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvODI1NzAyYTQtZTI2Ny0z ZmVkLTgwMWMtZTIxYzNlZjc0OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWE0NTZhNzMtMDMyZC00Njc1LThm MGEtMmRiN2IxZTU4MTY4LzVhNDU2YTczLTAzMmQtNDY3NS04ZjBhLTJkYjdiMWU1 ODE2OC5jcmwwHwYDVR0jBBgwFoAUhZ809TW+1VPdwe+7fz1JekZVV8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3 YjFlNTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxsgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHH6xdn5KhDBsomr5XtuzgrBkmYG+7C5v/v9Qr4rt2QVu+FH67I7hSV OSrQszIaUw5QvaRxULzX/W+FGySb/lUOKw2LAdvGuRMCH2291jW2/c8dHsFnKPFq vZQ3rSkmrWMwIYlecS6kJT8tb5dQX/uI/4kHsd03sL5sl8wHQLBsWqC7H3AqyVQ8 5RYbNMA6eErgNE7T0EhID7FZ3o6heTReO7LcUMKg8K7YSRNDdtI1yf/gj2AAhmkO l8a+IiO75sRq///ECPPM/v5eCzjIMisLiJlfkmUqnxA6XYsCEVKpqfBWaCGdClK5 +1DkXgVFYEUKPnYS+2/hVgtgaPUHqBM= -----END CERTIFICATE-----Generated at Tue Apr 29 10:21:13 2025 by rpki-client