$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa File: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (raw, json) Hash identifier: JvvsnYcr32/ogi3J+8i1hbsXFqT832OCrz0dWicids4= Subject key identifier: 78:2F:6E:23:63:F8:60:29:F4:FE:35:C4:65:65:99:BF:FA:E4:29:F0 Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F43285849095EFE4BBC7FDFC24D234100 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa Signing time: Fri 28 Feb 2025 21:27:30 +0000 ROA not before: Fri 28 Feb 2025 21:27:30 +0000 ROA not after: Thu 29 May 2025 20:27:30 +0000 asID: 16509 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:5e:fe:4b:bc:7f:df:c2:4d:23:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Feb 28 21:27:30 2025 GMT Not After : May 29 20:27:30 2025 GMT Subject: CN=76c0ab67-eccb-4a5f-a08f-34d505f55fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:08:56:9b:26:d9:7b:9f:32:14:07:b5:3e: 22:c2:83:d6:0c:6c:60:c0:62:51:a9:06:d4:99:32: 54:d2:5a:8c:c9:b0:79:f0:3b:4f:a6:85:0c:32:fa: e4:ee:18:da:01:44:7c:50:ab:fc:9e:c0:d9:19:2e: 49:6a:0e:7c:8a:24:b9:c8:80:22:98:d4:da:fe:68: fc:01:ce:31:aa:cf:df:8a:05:df:d9:11:dc:61:f6: 8a:32:a9:41:64:cd:78:94:7e:b3:b5:cd:87:4b:a7: 8e:46:e5:e4:98:3d:7c:a9:d4:f0:55:98:55:b2:38: ee:25:06:46:80:ad:fd:2b:12:23:19:80:8f:79:a1: 27:c0:ba:94:15:6e:5a:5e:4d:cc:74:04:22:4c:0e: a6:08:28:32:77:1c:45:32:0f:85:20:96:e7:67:19: 80:f9:00:18:bc:55:aa:7c:f4:c3:57:0c:7b:e8:b6: 00:0b:b4:0c:c5:63:28:2d:0b:53:52:3f:53:56:dc: d2:80:2e:c0:fc:61:65:09:3a:96:e8:c3:38:00:e8: bf:6e:13:5f:d0:4b:6a:30:98:63:ba:72:28:7c:ae: 05:7b:50:f9:75:8a:34:97:75:27:a9:bd:3a:c5:3c: 70:91:8a:5e:f2:24:0d:27:4d:30:aa:43:c9:a1:e4: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2F:6E:23:63:F8:60:29:F4:FE:35:C4:65:65:99:BF:FA:E4:29:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7f:bc:8e:e9:f4:d4:b7:db:d2:8f:96:dc:c3:8b:74:a3:2b: 66:09:f4:01:a7:c0:e7:91:d8:e2:94:df:c9:89:21:a7:67:01: ee:5a:98:6e:5a:95:94:03:67:c1:3b:0b:d4:f5:cc:00:91:ef: 7b:86:9d:c4:9f:c8:00:02:04:b5:75:7d:c1:f3:0d:85:82:c8: 75:d8:52:9b:c8:f1:09:1a:f5:90:c3:e7:a2:27:5f:8a:94:af: 3f:b0:0a:d9:00:58:0e:dc:7c:47:31:02:0c:08:1b:4d:1c:7d: 79:52:0a:f2:ff:c3:68:ad:c4:3f:55:cc:26:70:93:a8:be:87: 1f:67:f5:4b:73:0f:3f:50:96:4b:96:81:b3:50:d9:f6:e0:52: e8:5a:9e:62:20:80:dc:16:d3:32:73:06:83:6e:bb:50:65:b5: 90:ed:f1:b0:69:68:10:ec:b9:4b:61:83:da:9c:66:86:aa:62: bf:a2:f9:c3:b2:63:21:bc:46:94:60:b1:78:d7:50:ab:ec:ee: 0a:9d:a6:24:a3:45:e7:a5:3d:0a:eb:9b:70:aa:bf:d3:10:ce: 59:b8:92:9e:01:0d:d9:44:d6:c1:fc:d4:25:d2:1f:8f:06:a1: 3e:c4:b2:f1:e4:6d:d5:e7:8f:b7:46:19:eb:10:f7:13:d3:3d: f9:b9:eb:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJXv5LvH/fwk0jQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MDIyODIxMjczMFoXDTI1MDUyOTIwMjczMFowLzEtMCsGA1UEAxMk NzZjMGFiNjctZWNjYi00YTVmLWEwOGYtMzRkNTA1ZjU1ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB8IVpsm2XufMhQHtT4iwoPWDGxgwGJRqQbU mTJU0lqMybB58DtPpoUMMvrk7hjaAUR8UKv8nsDZGS5Jag58iiS5yIAimNTa/mj8 Ac4xqs/figXf2RHcYfaKMqlBZM14lH6ztc2HS6eORuXkmD18qdTwVZhVsjjuJQZG gK39KxIjGYCPeaEnwLqUFW5aXk3MdAQiTA6mCCgydxxFMg+FIJbnZxmA+QAYvFWq fPTDVwx76LYAC7QMxWMoLQtTUj9TVtzSgC7A/GFlCTqW6MM4AOi/bhNf0EtqMJhj unIofK4Fe1D5dYo0l3Unqb06xTxwkYpe8iQNJ00wqkPJoeRQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgvbiNj+GAp9P41xGVlmb/65CnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjk4ZTE5ZTgtYjBhYy0z OGFhLTgyZmYtYWY2M2JkMTM1NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR/vI7p9NS329KPltzDi3SjK2YJ9AGnwOeR2OKU38mJIadnAe5amG5a lZQDZ8E7C9T1zACR73uGncSfyAACBLV1fcHzDYWCyHXYUpvI8Qka9ZDD56InX4qU rz+wCtkAWA7cfEcxAgwIG00cfXlSCvL/w2itxD9VzCZwk6i+hx9n9UtzDz9QlkuW gbNQ2fbgUuhanmIggNwW0zJzBoNuu1BltZDt8bBpaBDsuUthg9qcZoaqYr+i+cOy YyG8RpRgsXjXUKvs7gqdpiSjReelPQrrm3Cqv9MQzlm4kp4BDdlE1sH81CXSH48G oT7EsvHkbdXnj7dGGesQ9xPTPfm56zE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:24 2025 by rpki-client