$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa File: 6f2a8979-499b-3861-8229-f7dcb3b30854.roa (raw, json) Hash identifier: 8KBDSiqNQddDI9bAKA0S05geHZpGEnLtHXraUl7M8dY= Subject key identifier: C7:56:C4:E4:69:49:05:76:8C:D1:BB:4A:3D:02:D5:46:7C:35:6B:4E Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584930DE62F94ECBB03FF71ECB80 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 30607 IP address blocks: 198.41.8.0/22 maxlen: 22 198.41.8.0/23 maxlen: 23 198.41.8.0/24 maxlen: 24 198.41.9.0/24 maxlen: 24 198.41.10.0/23 maxlen: 23 198.41.10.0/24 maxlen: 24 198.41.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:62:f9:4e:cb:b0:3f:f7:1e:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=6736ca0f-a4f7-4dfa-8c55-4e77c04cf080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:04:9a:97:58:66:79:49:b6:20:bd:b4:bf: fd:97:7c:0c:91:3f:14:d9:7b:dd:1f:53:b9:74:f5: 80:8f:ef:7d:de:38:b8:77:15:ac:23:3a:d8:4a:e3: ea:e9:35:30:c0:d3:b2:73:83:a5:79:60:a5:2d:d8: 70:0f:4e:5e:3c:5f:e5:b0:2c:a2:3c:af:bb:84:f8: ba:58:50:9d:28:ca:90:0f:af:f2:4d:1d:93:ac:2b: b4:18:08:29:21:a8:09:c0:85:5e:16:6e:79:28:d2: 0b:03:5d:9b:b6:5a:af:48:ef:09:e1:05:48:98:3d: 3b:80:fd:36:0f:19:04:92:2b:f1:d8:34:81:82:c7: 2d:7a:84:ab:ea:d2:49:a1:5d:4f:fb:f3:bd:89:c1: fd:3a:26:80:63:25:dc:f2:71:72:13:c0:fe:fe:34: da:2c:97:af:d6:65:c6:7a:c6:c1:c3:f7:f9:70:ca: d7:54:5c:1a:88:91:1c:00:41:01:39:91:0b:ea:7d: d5:5b:3e:44:fc:bf:a5:94:24:34:4a:ca:96:cc:57: d7:03:76:82:57:59:2d:dd:ea:54:97:b3:16:80:53: 60:c3:22:5c:6a:18:69:72:1d:e9:3a:47:e8:bd:4d: 85:a5:b2:6c:ee:0c:f5:f8:ce:f8:e0:e2:95:d2:57: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:C4:E4:69:49:05:76:8C:D1:BB:4A:3D:02:D5:46:7C:35:6B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:0b:0d:26:ab:b6:9a:8f:77:2a:d5:57:35:c7:01:fa:80:3f: 11:ed:f0:cd:65:29:8c:12:4d:5e:6f:3f:08:5e:fc:48:1d:0f: 70:80:93:90:cb:be:2e:b1:d7:5e:e4:27:6f:3a:31:4b:07:aa: d5:ba:e3:65:28:18:b5:93:48:f6:b6:d7:48:0d:3e:6e:f1:1e: 28:0f:39:00:71:45:e5:6d:95:c6:c9:6e:45:f0:70:eb:70:99: fc:0c:37:09:c6:68:cb:8f:dc:e9:5b:9f:a0:8b:95:4d:ce:7b: a5:4d:ee:06:16:1b:bd:3f:cc:96:4b:c3:a6:6c:10:7e:80:26: 48:91:45:ec:2c:34:41:71:55:d5:49:d0:94:44:7c:e7:9d:27: 24:d9:74:9c:c6:8f:b3:bd:1f:cf:f2:f7:53:67:13:a4:6f:d7: 86:80:79:19:2e:42:22:8e:4e:65:f4:a9:ae:31:cf:d4:5a:b9: 1c:b6:e2:4f:96:dc:cd:4b:af:cb:24:5b:d5:1c:2d:31:5c:bd: 9a:6c:7d:3c:8d:9e:d2:af:c1:ba:82:51:a2:c1:3d:b5:db:10: 65:4d:42:31:36:da:3b:2d:c5:20:63:02:45:b1:5d:cb:a2:5b: 05:a2:d6:ad:b5:b2:7a:08:2d:a1:0e:4a:a8:e6:70:58:01:0a: ba:9f:9e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mL5TsuwP/cey4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NjczNmNhMGYtYTRmNy00ZGZhLThjNTUtNGU3N2MwNGNmMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllQEmpdYZnlJtiC9tL/9l3wMkT8U2XvdH1O5 dPWAj+993ji4dxWsIzrYSuPq6TUwwNOyc4OleWClLdhwD05ePF/lsCyiPK+7hPi6 WFCdKMqQD6/yTR2TrCu0GAgpIagJwIVeFm55KNILA12btlqvSO8J4QVImD07gP02 DxkEkivx2DSBgscteoSr6tJJoV1P+/O9icH9OiaAYyXc8nFyE8D+/jTaLJev1mXG esbBw/f5cMrXVFwaiJEcAEEBOZEL6n3VWz5E/L+llCQ0SsqWzFfXA3aCV1kt3epU l7MWgFNgwyJcahhpch3pOkfovU2FpbJs7gz1+M744OKV0lc82QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdWxORpSQV2jNG7Sj0C1UZ8NWtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvNmYyYTg5NzktNDk5Yi0z ODYxLTgyMjktZjdkY2IzYjMwODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwLDSartpqPdyrVVzXHAfqAPxHt8M1lKYwSTV5vPwhe/EgdD3CAk5DL vi6x117kJ286MUsHqtW642UoGLWTSPa210gNPm7xHigPOQBxReVtlcbJbkXwcOtw mfwMNwnGaMuP3Olbn6CLlU3Oe6VN7gYWG70/zJZLw6ZsEH6AJkiRRewsNEFxVdVJ 0JREfOedJyTZdJzGj7O9H8/y91NnE6Rv14aAeRkuQiKOTmX0qa4xz9RauRy24k+W 3M1Lr8skW9UcLTFcvZpsfTyNntKvwbqCUaLBPbXbEGVNQjE22jstxSBjAkWxXcui WwWi1q21snoILaEOSqjmcFgBCrqfnsQ= -----END CERTIFICATE-----Generated at Tue Apr 29 08:59:25 2025 by rpki-client