$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa File: 1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa (raw, json) Hash identifier: 8hz9zJBDny7tI6hnRa1en4VArDn5PNUNwsXxvfMoAnc= Subject key identifier: A4:8B:10:03:0E:5A:29:08:B1:76:4E:38:D5:98:3A:B8:0C:B6:44:B1 Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Certificate serial: 010D0C9F432858498769AA662722B9E630211B40 Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 14230 IP address blocks: 198.204.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:aa:66:27:22:b9:e6:30:21:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=14e1e622-6005-4b20-949f-dc46710d1079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:15:ec:72:36:9a:a5:da:1b:66:a7:85:c7: f9:fd:46:ba:8c:09:34:25:87:37:6b:45:2e:eb:52: 2e:b0:21:72:1e:ec:d2:0d:71:f1:2a:c3:b6:ee:06: 2c:a2:09:f0:82:eb:79:04:2d:e1:f0:5a:64:35:ea: 4f:e4:78:4f:55:6f:d2:9c:9b:e3:c9:72:b5:cc:3b: f0:2a:06:6f:0c:55:3e:a3:ce:b0:a1:4d:e0:81:08: af:f8:86:94:99:b6:da:7e:fc:fa:ed:eb:ee:9b:81: 1b:82:13:95:37:be:9c:dd:7e:4d:84:73:8f:10:c3: 19:d9:19:41:58:fb:60:e5:7e:c7:52:cc:f0:80:7a: 9a:b3:a1:4e:96:89:fe:6c:c5:40:2a:de:38:78:15: 3d:3d:ce:04:9a:e2:3a:3e:f2:bb:3e:ae:16:ff:a6: cd:57:07:c0:a3:33:13:ee:58:cf:a6:4c:05:97:92: 48:6a:81:59:b5:e1:23:7c:a9:fd:b1:a7:31:e3:8c: cf:69:b4:ab:7f:a2:90:b7:7e:1f:1a:a5:44:db:b9: 37:3d:f5:1c:9a:77:61:5c:bf:6c:ac:be:01:44:50: 98:f0:9f:ab:f7:77:ea:5a:da:5b:45:05:1b:a5:64: 62:80:f3:c9:98:29:a6:96:4d:81:92:8f:83:a6:39: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8B:10:03:0E:5A:29:08:B1:76:4E:38:D5:98:3A:B8:0C:B6:44:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl X509v3 Authority Key Identifier: keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer sbgp-ipAddrBlock: critical IPv4: 198.204.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6f:e3:cd:a3:b9:28:cb:a1:a1:d7:a5:30:91:16:1c:42:4d: cc:38:15:4f:05:2b:7e:d0:b8:f2:72:ae:66:50:c4:11:ef:31: b7:81:6c:a5:3c:f9:2f:06:44:73:e2:ad:a5:e8:d6:b0:b3:39: a4:7c:4c:ef:8e:52:5d:23:c8:d1:de:17:de:87:ea:44:4f:a0: a4:d1:83:89:32:2a:67:03:12:5a:94:1a:dc:10:3e:63:3b:2e: 8a:0e:26:4c:de:93:33:e5:ed:59:cf:13:64:31:31:5a:dd:59: ee:3c:a5:d0:a0:d9:90:b2:e4:93:69:c3:51:d4:41:12:16:5d: c0:09:f9:cd:d9:18:25:56:ed:6e:8e:c3:4e:38:5e:9a:7e:79: 53:cf:ed:04:54:53:fe:53:2f:4d:58:d6:85:18:cd:35:0a:8e: 96:76:83:97:a1:c0:09:91:1b:82:84:d7:db:a8:a7:d6:98:04: 22:b9:64:89:60:03:e8:c1:5c:5f:23:32:c9:ca:b1:f7:da:00: 92:3c:d6:2b:05:08:5e:55:0b:73:1f:54:ef:3c:55:41:16:d4: c6:85:88:8f:7b:dc:f8:36:ad:2b:c4:6c:60:5a:c7:23:f6:59: b8:85:81:97:57:08:a3:fa:c2:6f:3b:c3:50:9a:b1:09:37:4b: 93:f3:4f:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaapmJyK55jAhG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYwN2Y4N2YtZDllYy00YTBmLWI2MTEtZDBlZWFkZGU2 YjQyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MTRlMWU2MjItNjAwNS00YjIwLTk0OWYtZGM0NjcxMGQxMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1oV7HI2mqXaG2anhcf5/Ua6jAk0JYc3a0Uu 61IusCFyHuzSDXHxKsO27gYsognwgut5BC3h8FpkNepP5HhPVW/SnJvjyXK1zDvw KgZvDFU+o86woU3ggQiv+IaUmbbafvz67evum4EbghOVN76c3X5NhHOPEMMZ2RlB WPtg5X7HUszwgHqas6FOlon+bMVAKt44eBU9Pc4EmuI6PvK7Pq4W/6bNVwfAozMT 7ljPpkwFl5JIaoFZteEjfKn9sacx44zPabSrf6KQt34fGqVE27k3PfUcmndhXL9s rL4BRFCY8J+r93fqWtpbRQUbpWRigPPJmCmmlk2Bko+Dpjk9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSLEAMOWikIsXZOONWYOrgMtkSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NjA3 Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVlYWRkZTZiNDIvMWY5YzNhZTMtOGEyZS0z OTEyLTgzZTAtZWViZjQ4YzkyYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzYwN2Y4N2YtZDllYy00YTBmLWI2 MTEtZDBlZWFkZGU2YjQyLzc2MDdmODdmLWQ5ZWMtNGEwZi1iNjExLWQwZWVhZGRl NmI0Mi5jcmwwHwYDVR0jBBgwFoAUlNlqgFk0RIaJSkjby4cZN5oJl6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NjA3Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVl YWRkZTZiNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxswKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpv482juSjLoaHXpTCRFhxCTcw4FU8FK37QuPJyrmZQxBHvMbeBbKU8 +S8GRHPiraXo1rCzOaR8TO+OUl0jyNHeF96H6kRPoKTRg4kyKmcDElqUGtwQPmM7 LooOJkzekzPl7VnPE2QxMVrdWe48pdCg2ZCy5JNpw1HUQRIWXcAJ+c3ZGCVW7W6O w044Xpp+eVPP7QRUU/5TL01Y1oUYzTUKjpZ2g5ehwAmRG4KE19uop9aYBCK5ZIlg A+jBXF8jMsnKsffaAJI81isFCF5VC3MfVO88VUEW1MaFiI973Pg2rSvEbGBaxyP2 WbiFgZdXCKP6wm87w1CasQk3S5PzT9g= -----END CERTIFICATE-----Generated at Sun Apr 27 03:16:15 2025 by rpki-client