$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa File: c84238dc-4927-30ce-80e8-d4213dd4be12.roa (raw, json) Hash identifier: 399OCgp4kI60l9+kPAf7wNyQ4zBfPIk1/oRo8lv+QHE= Subject key identifier: 2E:BF:EF:3C:0A:CF:70:E3:FC:88:0E:FA:03:7D:8B:93:74:0C:7B:C0 Certificate issuer: /CN=fb8e9f00-13c9-406e-9c03-d71cd386c086 Certificate serial: 010D0C9F432858495C243DE2F2A77ABFE1B63A80 Authority key identifier: 88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14618 IP address blocks: 198.89.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3d:e2:f2:a7:7a:bf:e1:b6:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8e9f00-13c9-406e-9c03-d71cd386c086 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=efd92175-b673-49b7-afed-2725dfd01143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:33:33:0d:97:f2:62:a7:b4:f0:48:23:90: af:db:35:73:c1:d6:21:44:23:e6:f6:b5:4c:e3:f3: 2b:40:82:ca:66:79:ef:68:c3:a3:52:61:52:71:4e: 4d:92:1c:77:69:33:04:e3:37:95:d8:f2:65:95:08: 3a:9d:db:c1:34:02:c3:85:2d:12:ad:f5:3b:d4:29: 4f:5a:75:6c:67:96:29:e9:af:59:6a:82:2b:73:9b: a1:f7:3e:47:1f:42:0f:d5:2e:1f:a2:3b:d3:f7:81: 20:bf:9c:9a:d6:7d:e8:36:b1:af:98:a9:41:8b:7e: 24:3f:a2:12:bf:39:d4:85:6f:b5:14:24:aa:27:59: 39:01:40:57:4e:d5:29:2a:30:c6:dc:ac:78:b9:dc: 27:45:a8:ce:82:17:d9:06:4d:9e:18:7a:fd:e0:41: 51:7e:de:55:9c:4b:48:32:69:8e:5e:a4:3d:e7:37: 1c:f3:c1:04:de:74:b0:6b:b4:db:dc:95:1b:09:c7: 97:35:95:ea:16:f3:e9:99:78:58:62:2f:fb:dd:ef: 19:13:06:3a:73:35:2a:5e:b0:4f:c8:91:44:10:8a: c3:58:84:d2:d8:a7:ca:5a:0e:e2:d7:21:1e:32:a5: d4:36:b9:97:ad:ba:db:f8:16:12:e6:ff:69:0f:1d: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:EF:3C:0A:CF:70:E3:FC:88:0E:FA:03:7D:8B:93:74:0C:7B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl X509v3 Authority Key Identifier: keyid:88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer sbgp-ipAddrBlock: critical IPv4: 198.89.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:8d:67:d9:b3:1d:49:b8:ec:bb:74:e9:e0:4e:85:de:0f: 74:4c:e7:3c:ab:9d:35:e8:7c:82:c1:5f:87:4a:19:74:38:d0: a4:b9:7a:de:46:ad:2c:e1:9a:1d:32:40:85:c9:60:2c:32:d4: 35:93:c6:36:22:b5:16:b7:cb:72:7f:33:6c:29:29:aa:6f:bc: 96:20:88:9f:76:18:40:c7:73:c1:22:fa:e4:d2:a7:db:bd:b1: a7:2e:c9:4c:31:96:20:49:5f:cc:11:7b:63:65:f7:1f:d1:dc: 28:a6:27:21:72:08:0d:f6:25:01:f1:19:d6:ca:f3:79:71:87: 52:98:1a:2e:af:8c:71:d7:38:a6:13:97:d0:1e:c1:cc:ce:a9: e4:7c:46:cd:82:9d:60:b3:cc:bf:c4:b1:8a:dd:f9:a8:a5:4c: 6b:48:42:0f:fa:7e:b9:a0:44:39:79:2c:2a:cc:8e:cb:08:5b: 15:35:80:0f:33:06:ff:3c:85:2f:0e:f4:58:c6:23:1a:07:5a: 66:e4:cf:75:8b:4a:44:31:37:a5:aa:cc:2a:1d:19:f0:4c:5c: 05:0e:e5:46:9b:99:88:49:9b:38:fd:9e:e7:c3:5f:7d:8d:9f: 25:95:2c:9a:9d:f6:99:ea:ce:75:88:13:63:d3:29:12:2f:cc: 16:9c:3e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJD3i8qd6v+G2OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI4ZTlmMDAtMTNjOS00MDZlLTljMDMtZDcxY2QzODZj MDg2MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZWZkOTIxNzUtYjY3My00OWI3LWFmZWQtMjcyNWRmZDAxMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEAzMw2X8mKntPBII5Cv2zVzwdYhRCPm9rVM 4/MrQILKZnnvaMOjUmFScU5Nkhx3aTME4zeV2PJllQg6ndvBNALDhS0SrfU71ClP WnVsZ5Yp6a9ZaoIrc5uh9z5HH0IP1S4fojvT94Egv5ya1n3oNrGvmKlBi34kP6IS vznUhW+1FCSqJ1k5AUBXTtUpKjDG3Kx4udwnRajOghfZBk2eGHr94EFRft5VnEtI MmmOXqQ95zcc88EE3nSwa7Tb3JUbCceXNZXqFvPpmXhYYi/73e8ZEwY6czUqXrBP yJFEEIrDWITS2KfKWg7i1yEeMqXUNrmXrbrb+BYS5v9pDx2bkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6/7zwKz3Dj/IgO+gN9i5N0DHvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mYjhl OWYwMC0xM2M5LTQwNmUtOWMwMy1kNzFjZDM4NmMwODYvYzg0MjM4ZGMtNDkyNy0z MGNlLTgwZTgtZDQyMTNkZDRiZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmI4ZTlmMDAtMTNjOS00MDZlLTlj MDMtZDcxY2QzODZjMDg2L2ZiOGU5ZjAwLTEzYzktNDA2ZS05YzAzLWQ3MWNkMzg2 YzA4Ni5jcmwwHwYDVR0jBBgwFoAUiJqvtEHN68XMhR0A+DlXVZU0tIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mYjhlOWYwMC0xM2M5LTQwNmUtOWMwMy1kNzFj ZDM4NmMwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFejWfZsx1JuOy7dOngToXeD3RM5zyrnTXofILBX4dKGXQ40KS5et5G rSzhmh0yQIXJYCwy1DWTxjYitRa3y3J/M2wpKapvvJYgiJ92GEDHc8Ei+uTSp9u9 sacuyUwxliBJX8wRe2Nl9x/R3CimJyFyCA32JQHxGdbK83lxh1KYGi6vjHHXOKYT l9AewczOqeR8Rs2CnWCzzL/EsYrd+ailTGtIQg/6frmgRDl5LCrMjssIWxU1gA8z Bv88hS8O9FjGIxoHWmbkz3WLSkQxN6WqzCodGfBMXAUO5UabmYhJmzj9nufDX32N nyWVLJqd9pnqznWIE2PTKRIvzBacPrE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:25 2025 by rpki-client