$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa File: 974078e3-6a3f-388b-922f-ef1b1f23cef4.roa (raw, json) Hash identifier: ONBlGC/Tji/n8VzCS6ROA/yvMQRaqk672FhaJgQZJng= Subject key identifier: 03:60:4D:17:38:71:EF:EB:18:5F:F5:38:2F:2B:42:EF:55:73:C6:94 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F43285849A8E9E2C9D9D5B787B22BC700 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 2559 IP address blocks: 198.241.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e2:c9:d9:d5:b7:87:b2:2b:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=d77eb229-ce5d-4c69-b3bf-253b37113908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0d:f2:4e:10:96:34:5f:18:b5:6f:21:68:6a: 2c:59:82:a4:07:29:bd:82:5a:c7:90:70:41:d6:86: fe:34:16:e2:b0:01:cb:2a:0b:55:db:f6:09:1a:ee: 29:08:c1:ed:23:a9:0f:62:92:68:4e:49:01:74:94: cf:f9:0e:ae:f9:5b:04:12:98:cc:18:03:b4:c0:4c: 70:28:9e:29:3c:8a:49:da:4f:78:6d:e6:ee:ec:34: 60:c0:fc:05:c8:ee:51:66:2b:87:4e:2c:9f:7a:8c: 39:bd:ab:be:6d:83:44:66:e5:70:92:d3:f3:3e:30: ef:c0:ad:f5:1e:23:b9:21:ad:2a:9e:3f:a2:2a:24: 51:54:1e:44:11:11:47:d4:2e:35:bb:f3:a3:4c:f8: 8c:64:2f:94:60:d4:77:37:8e:17:9b:1b:de:83:a7: a6:2c:b4:5e:6c:1b:65:ee:1c:91:0c:c2:d3:35:93: 98:14:42:55:6e:b5:bf:85:e6:a0:0c:9d:8f:bc:32: d1:a6:80:29:e4:fc:80:6d:45:0b:05:57:7c:b2:64: 5f:ca:fe:f8:3f:88:9a:5a:43:2a:8e:ec:a8:1f:e3: a6:f8:c3:38:f7:39:5a:8b:20:ee:16:f2:02:17:c2: cd:4a:92:65:23:c4:51:df:ff:c9:a4:aa:0f:3d:58: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:60:4D:17:38:71:EF:EB:18:5F:F5:38:2F:2B:42:EF:55:73:C6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7a:3c:00:4f:4a:cd:3a:a4:75:4b:69:ad:c2:18:a3:ef:be: 3d:cb:7b:9b:e7:56:95:67:c0:e7:1b:c0:02:9d:42:09:69:70: 8a:e0:2e:ba:5e:87:d0:c4:2e:22:8f:51:97:35:ef:b6:17:c1: e6:a7:80:c2:4d:d8:7b:d3:d0:11:25:c6:8a:d6:ca:5f:d9:41: 8b:a0:be:3b:7c:f4:ef:c0:d6:de:e5:75:4e:56:2c:4d:97:4c: c2:92:4b:38:91:4c:3d:e3:0f:b3:b5:70:1a:cb:1b:7d:5c:f6: 70:1e:8d:ab:13:ed:d7:fb:36:5a:eb:36:b4:25:25:f7:2a:6a: 80:36:75:30:20:56:ef:f5:a4:e7:54:8c:65:99:81:ea:c5:1c: 22:ba:10:7e:ae:c0:ed:5a:9b:da:b8:a8:70:ea:31:26:a4:2f: 92:68:67:84:3a:63:d9:5b:bd:ee:37:78:3b:07:5c:ea:9c:1c: dd:43:7c:27:3a:d4:d4:fa:52:31:2a:5f:2a:73:59:91:d1:fb: 18:50:93:e1:e4:7e:bb:79:c8:22:dc:59:24:2e:0b:43:00:a9: 18:98:95:ba:cd:e6:8f:a6:11:14:b1:93:f0:b1:6c:b8:d7:14: c6:45:68:17:5a:f4:dc:fc:8a:9b:7b:91:e7:28:7e:80:6a:67: da:2d:17:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eLJ2dW3h7IrxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk ZDc3ZWIyMjktY2U1ZC00YzY5LWIzYmYtMjUzYjM3MTEzOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA3yThCWNF8YtW8haGosWYKkBym9glrHkHBB 1ob+NBbisAHLKgtV2/YJGu4pCMHtI6kPYpJoTkkBdJTP+Q6u+VsEEpjMGAO0wExw KJ4pPIpJ2k94bebu7DRgwPwFyO5RZiuHTiyfeow5vau+bYNEZuVwktPzPjDvwK31 HiO5Ia0qnj+iKiRRVB5EERFH1C41u/OjTPiMZC+UYNR3N44Xmxveg6emLLRebBtl 7hyRDMLTNZOYFEJVbrW/heagDJ2PvDLRpoAp5PyAbUULBVd8smRfyv74P4iaWkMq juyoH+Om+MM49zlaiyDuFvICF8LNSpJlI8RR3//JpKoPPVi7zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANgTRc4ce/rGF/1OC8rQu9Vc8aUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvOTc0MDc4ZTMtNmEzZi0z ODhiLTkyMmYtZWYxYjFmMjNjZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx6PABPSs06pHVLaa3CGKPvvj3Le5vnVpVnwOcbwAKdQglpcIrgLrpe h9DELiKPUZc177YXweangMJN2HvT0BElxorWyl/ZQYugvjt89O/A1t7ldU5WLE2X TMKSSziRTD3jD7O1cBrLG31c9nAejasT7df7NlrrNrQlJfcqaoA2dTAgVu/1pOdU jGWZgerFHCK6EH6uwO1am9q4qHDqMSakL5JoZ4Q6Y9lbve43eDsHXOqcHN1DfCc6 1NT6UjEqXypzWZHR+xhQk+Hkfrt5yCLcWSQuC0MAqRiYlbrN5o+mERSxk/CxbLjX FMZFaBda9Nz8ipt7kecofoBqZ9otFy4= -----END CERTIFICATE-----Generated at Mon Apr 28 11:52:01 2025 by rpki-client