$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa File: ff08339d-585d-3340-b3f1-2b16c2469a4a.roa (raw, json) Hash identifier: jlAvmuSgbu4VlSvnKuIkW14SYFVudC3FIa5Zx3x+82I= Subject key identifier: 7D:CA:25:B1:66:74:41:04:8C:5F:DF:C2:E4:EE:55:C6:0F:9D:F3:98 Certificate issuer: /CN=7486d668-0b59-485d-a30a-dbd53fab21fd Certificate serial: 010D0C9F43285849194189AF6B171B155ECE8600 Authority key identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 16668 IP address blocks: 198.202.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:89:af:6b:17:1b:15:5e:ce:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7486d668-0b59-485d-a30a-dbd53fab21fd Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=8ce15dcf-28e2-4bb7-a8cd-d8b1795216eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:8e:b3:c5:ca:75:8e:2c:95:3d:a7:66:cc: 91:55:d0:c8:7d:22:f4:3c:23:4f:f0:fc:6d:37:45: 24:28:e2:ab:d6:1e:03:24:df:8c:a8:ec:3d:82:e0: 4f:fe:c6:1f:e8:f3:83:ad:06:db:74:93:9e:a1:aa: 16:40:b7:f9:84:30:51:80:29:4b:cc:62:ba:9e:ff: 60:03:11:85:48:1b:76:17:fe:1a:e7:f2:e0:3a:a8: 4a:e5:6f:c4:53:42:f7:8c:84:c5:80:df:5c:2a:a3: b0:c6:1c:98:a1:6b:f6:be:d2:60:41:ee:60:32:a5: fe:8a:02:21:e5:fa:4b:bd:fa:40:fc:91:2a:7e:93: ef:5d:52:b4:12:80:de:82:c3:d7:9d:c9:cf:99:a4: 48:e5:e2:89:66:d4:cb:18:92:b0:1d:38:72:05:03: d9:c9:67:4a:e1:dd:c5:b1:0d:2b:94:04:76:58:23: 0e:90:a6:b4:0b:11:aa:86:4c:e6:1f:42:e5:cc:89: bf:2f:95:8e:74:c0:6b:32:f6:02:59:30:6f:c5:8d: 74:22:52:98:ec:13:03:79:02:c2:f4:97:be:fc:a1: 5c:27:55:1d:00:dc:47:22:92:df:31:5f:e5:06:e4: 64:32:e5:0a:a5:01:04:5e:33:db:da:ee:fd:10:7f: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CA:25:B1:66:74:41:04:8C:5F:DF:C2:E4:EE:55:C6:0F:9D:F3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ff08339d-585d-3340-b3f1-2b16c2469a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.crl X509v3 Authority Key Identifier: keyid:6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer sbgp-ipAddrBlock: critical IPv4: 198.202.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:90:4a:0d:eb:38:fe:50:80:42:93:d0:89:ad:44:36:6a:f8: 85:73:c1:a5:d9:47:21:48:55:33:cc:c8:e8:fc:7d:60:fe:a1: 29:27:ab:41:54:26:f0:0d:5e:e9:72:3b:b1:84:50:41:df:d8: e6:df:25:f0:83:86:2a:f8:b9:d3:7c:7c:44:27:0a:e6:43:bf: 6e:4c:f7:8f:45:29:4a:11:4f:23:14:73:5d:00:74:98:6d:95: 2d:c8:6d:eb:68:a7:39:d5:5f:52:8c:c7:b8:58:5f:58:df:b2: 3f:95:49:1f:18:ef:42:be:d2:0f:82:cd:42:0c:99:e8:3b:d3: fd:14:8b:b9:8d:bb:2a:5d:22:13:93:96:77:77:c1:3e:16:01: 43:ee:fb:7a:3e:4b:91:32:20:8a:c5:7a:e4:8b:78:81:55:70: f3:6a:cf:7e:e4:79:3a:2b:f9:99:e6:9f:20:3c:05:f8:c2:92: eb:3f:28:d5:ed:bf:f2:43:c7:40:fe:bc:a9:72:5c:52:e1:fd: 89:d0:01:3a:3a:92:81:57:08:c5:14:3b:bc:2b:b6:8e:17:e6: 06:e0:63:db:d7:a0:e0:ea:90:52:7f:bb:47:80:d3:16:11:17: 11:a2:0e:5b:60:d3:f5:9a:91:70:3f:4a:a6:0c:79:c2:02:c4: 1b:23:f4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYmvaxcbFV7OhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4NmQ2NjgtMGI1OS00ODVkLWEzMGEtZGJkNTNmYWIy MWZkMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk OGNlMTVkY2YtMjhlMi00YmI3LWE4Y2QtZDhiMTc5NTIxNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqReOs8XKdY4slT2nZsyRVdDIfSL0PCNP8Pxt N0UkKOKr1h4DJN+MqOw9guBP/sYf6PODrQbbdJOeoaoWQLf5hDBRgClLzGK6nv9g AxGFSBt2F/4a5/LgOqhK5W/EU0L3jITFgN9cKqOwxhyYoWv2vtJgQe5gMqX+igIh 5fpLvfpA/JEqfpPvXVK0EoDegsPXncnPmaRI5eKJZtTLGJKwHThyBQPZyWdK4d3F sQ0rlAR2WCMOkKa0CxGqhkzmH0LlzIm/L5WOdMBrMvYCWTBvxY10IlKY7BMDeQLC 9Je+/KFcJ1UdANxHIpLfMV/lBuRkMuUKpQEEXjPb2u79EH/FsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3KJbFmdEEEjF/fwuTuVcYPnfOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NDg2 ZDY2OC0wYjU5LTQ4NWQtYTMwYS1kYmQ1M2ZhYjIxZmQvZmYwODMzOWQtNTg1ZC0z MzQwLWIzZjEtMmIxNmMyNDY5YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzQ4NmQ2NjgtMGI1OS00ODVkLWEz MGEtZGJkNTNmYWIyMWZkLzc0ODZkNjY4LTBiNTktNDg1ZC1hMzBhLWRiZDUzZmFi MjFmZC5jcmwwHwYDVR0jBBgwFoAUbd+Gy23O7roTLgNpp3pepvUCQdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NDg2ZDY2OC0wYjU5LTQ4NWQtYTMwYS1kYmQ1 M2ZhYjIxZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiQSg3rOP5QgEKT0ImtRDZq+IVzwaXZRyFIVTPMyOj8fWD+oSknq0FU JvANXulyO7GEUEHf2ObfJfCDhir4udN8fEQnCuZDv25M949FKUoRTyMUc10AdJht lS3IbetopznVX1KMx7hYX1jfsj+VSR8Y70K+0g+CzUIMmeg70/0Ui7mNuypdIhOT lnd3wT4WAUPu+3o+S5EyIIrFeuSLeIFVcPNqz37keTor+ZnmnyA8BfjCkus/KNXt v/JDx0D+vKlyXFLh/YnQATo6koFXCMUUO7wrto4X5gbgY9vXoODqkFJ/u0eA0xYR FxGiDltg0/WakXA/SqYMecICxBsj9Nc= -----END CERTIFICATE-----Generated at Mon Apr 28 08:29:45 2025 by rpki-client