$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: yOKuQhxatZM/wfsrSmwF62aq52u+94nuuQTc9F/xtAc= Subject key identifier: 07:76:1C:B8:65:AF:29:51:B1:CE:27:99:07:19:97:B6:A1:DB:04:69 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F432858496FAF12E2BD6397C5526C5DC0 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:12:e2:bd:63:97:c5:52:6c:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=ff968a40-6178-4266-aab1-a263bb245478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:c4:dc:17:6c:3c:8d:b2:2f:ec:cb:85:b1: a9:b2:d6:ea:62:fd:7b:09:d5:b2:2e:67:6a:8e:96: 76:e0:2d:c4:e6:3f:58:06:7d:bf:59:8e:01:2f:64: ae:1e:ae:b5:69:18:9c:cc:8e:62:9a:d3:c2:13:cc: c9:fa:d1:36:32:05:e5:37:f9:45:84:ff:04:2b:96: ad:2b:15:9a:ed:24:15:01:84:94:bd:28:09:4c:35: 9b:38:09:ec:19:26:ac:93:11:c9:10:20:bc:8f:bb: d8:51:18:87:45:70:83:6d:6a:61:55:a4:59:f0:0d: c2:88:37:b2:74:4c:c4:ad:65:b1:72:11:28:27:9c: d1:33:46:bb:80:b0:ce:c4:14:9e:50:1f:f4:60:71: 2e:6b:b6:15:40:33:95:bb:05:77:15:3b:de:aa:d7: 20:df:18:98:e1:ad:6d:62:04:f2:bf:ea:5d:c0:dd: 2f:83:bd:97:74:ab:95:73:76:99:b2:84:37:29:78: 55:d7:73:1a:7c:04:e9:a3:70:ca:46:55:dd:15:18: dc:fd:b7:c5:76:56:33:43:34:43:0c:4d:a8:16:02: 54:08:41:68:92:2f:f7:8e:b1:ae:88:78:10:c2:df: a2:c7:83:5e:d0:11:3a:40:79:4f:da:0d:94:08:f7: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:1C:B8:65:AF:29:51:B1:CE:27:99:07:19:97:B6:A1:DB:04:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a5:0a:13:71:df:55:08:81:04:58:b7:53:4d:df:3b:39:1d: e3:9e:d4:a0:88:13:02:18:c5:8d:b8:88:e7:13:b0:8f:b2:ac: e6:ca:9a:99:3e:45:c5:1b:cc:d9:87:16:64:d1:f4:96:e5:3a: 95:c3:34:b1:ab:e9:20:90:9e:f9:12:ee:ab:52:82:92:92:8f: d9:75:2d:32:6b:70:25:a8:5c:d9:e1:98:6a:4f:8d:ca:c2:d6: 04:77:2d:01:43:53:92:55:91:78:34:e9:d3:b8:0f:b2:c8:2f: 40:9a:3c:20:c5:84:7c:1d:2b:0e:a8:7b:a9:16:22:97:53:6b: 3c:2d:2d:c4:50:f3:d7:7e:82:1b:54:a4:96:c0:06:d0:a9:b4: 76:6b:6d:42:bd:22:07:c6:b1:89:d8:e3:a1:1e:9a:22:64:3a: fb:7e:36:94:07:0a:d9:d7:b6:f4:62:f2:c0:2c:09:3e:aa:5a: 77:7a:45:1d:46:b4:6a:e8:3f:54:06:97:d5:51:8e:44:65:1b: 4e:a7:05:52:f3:d1:5b:2c:05:5a:4e:5a:9a:85:1d:d6:76:64: 63:3f:7e:f3:89:85:5c:4d:e5:aa:49:bd:69:20:b4:1b:8d:57: ac:5b:a7:0c:66:38:c7:26:f1:f2:a6:5b:e4:48:d5:f2:76:b9: 9c:e5:1f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxLivWOXxVJsXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmY5NjhhNDAtNjE3OC00MjY2LWFhYjEtYTI2M2JiMjQ1NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBTE3BdsPI2yL+zLhbGpstbqYv17CdWyLmdq jpZ24C3E5j9YBn2/WY4BL2SuHq61aRiczI5imtPCE8zJ+tE2MgXlN/lFhP8EK5at KxWa7SQVAYSUvSgJTDWbOAnsGSaskxHJECC8j7vYURiHRXCDbWphVaRZ8A3CiDey dEzErWWxchEoJ5zRM0a7gLDOxBSeUB/0YHEua7YVQDOVuwV3FTveqtcg3xiY4a1t YgTyv+pdwN0vg72XdKuVc3aZsoQ3KXhV13MafATpo3DKRlXdFRjc/bfFdlYzQzRD DE2oFgJUCEFoki/3jrGuiHgQwt+ix4Ne0BE6QHlP2g2UCPd7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAd2HLhlrylRsc4nmQcZl7ah2wRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2lChNx31UIgQRYt1NN3zs5HeOe1KCIEwIYxY24iOcTsI+yrObKmpk+ RcUbzNmHFmTR9JblOpXDNLGr6SCQnvkS7qtSgpKSj9l1LTJrcCWoXNnhmGpPjcrC 1gR3LQFDU5JVkXg06dO4D7LIL0CaPCDFhHwdKw6oe6kWIpdTazwtLcRQ89d+ghtU pJbABtCptHZrbUK9IgfGsYnY46EemiJkOvt+NpQHCtnXtvRi8sAsCT6qWnd6RR1G tGroP1QGl9VRjkRlG06nBVLz0VssBVpOWpqFHdZ2ZGM/fvOJhVxN5apJvWkgtBuN V6xbpwxmOMcm8fKmW+RI1fJ2uZzlHxA= -----END CERTIFICATE-----Generated at Tue Apr 29 02:28:50 2025 by rpki-client