$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa File: f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa (raw, json) Hash identifier: ZGNXnJnSiEYfOlMp3e/3MBGr15zeOQovwgq2WlFPcJI= Subject key identifier: ED:39:EB:91:64:E5:C0:51:FD:E7:35:CB:A3:A4:F6:CD:7A:02:70:E1 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F432858497AD9BFD3FABB15625D17C4C0 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 2559 IP address blocks: 198.217.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:bf:d3:fa:bb:15:62:5d:17:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=90d8323e-cbf1-4cd0-89c0-3718ed17970a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:c2:db:e2:7f:69:75:f3:08:13:b6:c0:1c: 26:d7:0f:86:2f:30:6c:17:81:3c:00:d5:a9:58:21: 83:28:72:6c:65:12:e2:48:3a:88:0d:b2:6b:d6:d8: 14:5c:5f:99:22:b7:be:ae:df:b0:35:8c:53:9a:5e: c3:8c:7b:c1:7f:50:56:4d:9c:fb:b4:bd:e3:d4:c7: ac:92:64:aa:9c:7c:15:a2:15:cd:ad:88:39:87:66: ef:8e:8a:a0:90:e6:91:0a:2a:d2:b7:26:c8:5b:b9: a9:b8:f0:5a:5e:3a:2d:1c:73:d1:1f:11:e2:21:01: 67:b1:a5:3b:0c:e2:46:a3:57:76:d8:d0:c3:5d:0b: f4:24:19:45:8a:3e:dd:9a:4e:9d:58:4f:e5:6d:2f: 5e:1a:1b:17:98:8a:a0:89:70:45:71:d2:5e:af:b0: e9:75:5b:f6:3a:a7:54:b4:f3:af:49:45:ce:38:f9: 9f:e8:9e:24:b5:ea:dd:a1:44:7c:9e:8c:b2:26:76: d5:e2:bd:89:d5:3d:21:3d:fe:91:5c:c7:44:c0:6e: 4c:7f:38:73:79:ba:5a:3d:1f:45:56:4f:89:11:1d: b2:39:18:fa:9c:cf:c8:3d:4d:f1:4b:80:0f:6a:bb: 26:e6:52:d9:89:4c:57:9e:c1:ca:61:af:d7:70:25: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:39:EB:91:64:E5:C0:51:FD:E7:35:CB:A3:A4:F6:CD:7A:02:70:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.217.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e0:bb:db:8a:44:54:ae:27:45:3a:6a:f5:7a:6e:fe:d5:7d: 40:53:e2:b1:00:4a:0e:ca:82:5e:fb:01:9a:b5:56:00:71:8a: 2b:67:5e:a5:5e:5f:88:54:c8:de:5c:67:d1:53:e9:34:a7:ec: bf:c3:d7:4d:37:a8:99:02:6f:3f:47:96:91:92:9d:1b:08:09: bf:85:34:74:2f:a9:ec:d8:f6:79:9d:95:c4:cf:88:fb:3d:50: 32:b9:33:89:86:f4:fb:13:e1:bc:87:7d:fd:ca:68:57:fb:90: 2a:a7:c6:dc:f1:42:7d:04:2f:e7:2c:24:27:87:07:ce:dd:57: 43:19:72:e6:44:9a:c9:af:a8:e0:c6:63:64:39:4e:04:e9:bb: 92:03:b4:cc:13:68:25:29:68:b2:6f:bb:dd:f8:96:ff:e1:a3: 90:f8:5b:55:7a:59:91:18:70:46:4e:fc:12:94:54:f4:ce:a7: 12:78:7b:d3:0e:f7:55:b3:54:ff:4b:f3:ae:6d:b4:2a:25:64: 48:7c:fb:b4:5c:94:ee:38:51:e4:ab:19:6d:8e:bd:21:d7:a4: 49:6e:3e:64:2f:35:00:95:02:ab:e4:98:00:7e:f0:41:a3:17: d4:92:ad:25:30:0c:23:93:e7:9d:af:9b:2e:9b:0b:1d:a2:cf: b7:c0:2e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62b/T+rsVYl0XxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk OTBkODMyM2UtY2JmMS00Y2QwLTg5YzAtMzcxOGVkMTc5NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsTC2+J/aXXzCBO2wBwm1w+GLzBsF4E8ANWp WCGDKHJsZRLiSDqIDbJr1tgUXF+ZIre+rt+wNYxTml7DjHvBf1BWTZz7tL3j1Mes kmSqnHwVohXNrYg5h2bvjoqgkOaRCirStybIW7mpuPBaXjotHHPRHxHiIQFnsaU7 DOJGo1d22NDDXQv0JBlFij7dmk6dWE/lbS9eGhsXmIqgiXBFcdJer7DpdVv2OqdU tPOvSUXOOPmf6J4kterdoUR8noyyJnbV4r2J1T0hPf6RXMdEwG5MfzhzebpaPR9F Vk+JER2yORj6nM/IPU3xS4AParsm5lLZiUxXnsHKYa/XcCXZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0565Fk5cBR/ec1y6Ok9s16AnDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZjdjMmQwYmMtN2ZiYS0z YzFhLWI2OWEtZThjMDYzOTgxMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjgu9uKRFSuJ0U6avV6bv7VfUBT4rEASg7Kgl77AZq1VgBxiitnXqVe X4hUyN5cZ9FT6TSn7L/D1003qJkCbz9HlpGSnRsICb+FNHQvqezY9nmdlcTPiPs9 UDK5M4mG9PsT4byHff3KaFf7kCqnxtzxQn0EL+csJCeHB87dV0MZcuZEmsmvqODG Y2Q5TgTpu5IDtMwTaCUpaLJvu934lv/ho5D4W1V6WZEYcEZO/BKUVPTOpxJ4e9MO 91WzVP9L865ttColZEh8+7RclO44UeSrGW2OvSHXpEluPmQvNQCVAqvkmAB+8EGj F9SSrSUwDCOT552vmy6bCx2iz7fALsM= -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:38 2025 by rpki-client