$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa File: 32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa (raw, json) Hash identifier: kP4EYHUmHcTxIpqML4a/XIkGfKyeufcPrj8sVyvISqI= Subject key identifier: A3:52:59:D9:52:C3:BB:C7:0A:2D:19:15:06:22:2A:93:63:C9:7E:23 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F432858492A22F3443C361C3E526E3980 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa Signing time: Wed 12 Mar 2025 15:08:12 +0000 ROA not before: Wed 12 Mar 2025 15:08:12 +0000 ROA not after: Tue 10 Jun 2025 15:08:12 +0000 asID: 64267 IP address blocks: 198.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:22:f3:44:3c:36:1c:3e:52:6e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 12 15:08:12 2025 GMT Not After : Jun 10 15:08:12 2025 GMT Subject: CN=d676e28c-4ffc-4820-ac94-e20cfe2ee547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:e0:64:c5:bc:7c:4f:8e:0a:75:26:d9:94: b6:34:84:2b:96:d5:16:35:4e:5f:07:77:96:d0:f0: 80:95:98:7b:72:8e:71:06:a0:67:60:b2:df:99:9a: 8d:11:a7:80:81:91:8e:4b:0e:d7:be:a1:ea:85:43: e2:cd:52:11:8f:de:10:09:32:6b:f0:9b:73:e8:94: 85:b9:08:ac:a0:66:29:f8:05:61:7d:fd:d4:44:ca: fd:08:36:1d:23:ca:06:a2:7e:a6:bc:7c:45:ba:1a: e6:04:1b:97:ae:83:d0:f6:a0:c5:29:9c:76:b2:31: 64:31:23:e8:99:df:aa:cb:c1:96:28:b6:77:c8:44: 32:3d:43:17:6f:5a:3a:17:a9:fe:75:33:40:40:f7: 2b:f1:7f:64:80:62:d5:64:8b:3a:4d:94:1c:a2:72: a5:e3:1d:8e:04:7b:d1:69:83:09:31:12:01:cc:17: fd:d3:0f:dc:0e:03:eb:ff:11:48:56:89:83:a4:7d: af:4a:2f:84:2b:ec:1c:7e:a6:56:b0:34:63:60:bb: b4:bf:47:da:08:81:34:4e:9f:e3:35:17:23:e8:3d: 37:f5:41:b8:97:af:6d:7b:1f:95:fc:d0:03:f7:bc: 2d:41:7d:0f:22:96:04:c5:62:1e:07:4c:6f:bf:8b: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:59:D9:52:C3:BB:C7:0A:2D:19:15:06:22:2A:93:63:C9:7E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d4:0c:d6:02:7d:d9:72:b1:80:3b:29:3b:8a:1a:68:a9:42: 44:ca:1c:e7:84:2b:c3:79:13:00:06:9f:e5:80:72:3f:cd:8d: c5:e9:0b:83:74:c9:c1:a7:87:eb:bc:52:de:31:49:da:a4:d7: 77:2a:28:3f:32:8d:e7:04:34:83:6b:50:aa:65:bf:ff:8d:9d: b0:f7:14:bd:c8:12:67:06:38:53:e6:4a:5c:b2:99:3f:a2:83: f8:ee:d4:89:1b:e4:c1:0d:bf:4b:9e:f8:98:07:75:65:db:bc: 10:92:8f:c4:3d:f0:71:48:f7:e0:39:94:ea:f1:da:9c:30:b2: ce:f1:58:1d:5a:ae:f9:ac:73:48:8d:b5:c9:af:49:f1:29:09: ef:27:b3:ba:0b:0f:e5:f8:14:4a:14:b4:2b:ce:57:38:37:36: 81:d3:8a:1e:66:b2:ee:e7:69:e0:d4:a3:fe:eb:13:22:2a:41: ce:9f:b1:18:83:ee:46:3c:03:34:a4:e4:e4:f1:7e:70:9d:67: 63:af:71:8b:f7:ff:62:6b:4f:8c:be:bd:72:5c:a9:ae:e2:26: af:4e:4d:67:c3:d0:fa:bf:6a:11:25:07:85:86:5c:02:cc:d3: 0e:7d:51:93:40:b0:bc:33:73:5d:c4:de:73:23:e4:e9:09:c1: 16:86:9f:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkqIvNEPDYcPlJuOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDMxMjE1MDgxMloXDTI1MDYxMDE1MDgxMlowLzEtMCsGA1UEAxMk ZDY3NmUyOGMtNGZmYy00ODIwLWFjOTQtZTIwY2ZlMmVlNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+7gZMW8fE+OCnUm2ZS2NIQrltUWNU5fB3eW 0PCAlZh7co5xBqBnYLLfmZqNEaeAgZGOSw7XvqHqhUPizVIRj94QCTJr8Jtz6JSF uQisoGYp+AVhff3URMr9CDYdI8oGon6mvHxFuhrmBBuXroPQ9qDFKZx2sjFkMSPo md+qy8GWKLZ3yEQyPUMXb1o6F6n+dTNAQPcr8X9kgGLVZIs6TZQconKl4x2OBHvR aYMJMRIBzBf90w/cDgPr/xFIVomDpH2vSi+EK+wcfqZWsDRjYLu0v0faCIE0Tp/j NRcj6D039UG4l69tex+V/NAD97wtQX0PIpYExWIeB0xvv4uWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNSWdlSw7vHCi0ZFQYiKpNjyX4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzJjZDllNmEtNmIwOC0z YjBlLTgyMTAtZjM1YzQ3YjNjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDUDNYCfdlysYA7KTuKGmipQkTKHOeEK8N5EwAGn+WAcj/NjcXpC4N0 ycGnh+u8Ut4xSdqk13cqKD8yjecENINrUKplv/+NnbD3FL3IEmcGOFPmSlyymT+i g/ju1Ikb5MENv0ue+JgHdWXbvBCSj8Q98HFI9+A5lOrx2pwwss7xWB1arvmsc0iN tcmvSfEpCe8ns7oLD+X4FEoUtCvOVzg3NoHTih5msu7naeDUo/7rEyIqQc6fsRiD 7kY8AzSk5OTxfnCdZ2OvcYv3/2JrT4y+vXJcqa7iJq9OTWfD0Pq/ahElB4WGXALM 0w59UZNAsLwzc13E3nMj5OkJwRaGnwU= -----END CERTIFICATE-----Generated at Mon Apr 28 06:10:56 2025 by rpki-client