$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa File: f0aee5d1-d44c-3566-b71f-05ca82efac32.roa (raw, json) Hash identifier: zsmKEoD3LwCYpfox7+ODW9Pgx1cre3MH/WJdghFjNTg= Subject key identifier: CC:0B:FA:2E:D5:5F:F0:88:91:10:15:3E:2F:F0:B1:42:1B:E9:54:6C Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584930DE634A99F317E38D3ABC40 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 30607 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.12.0/24 maxlen: 24 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:63:4a:99:f3:17:e3:8d:3a:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=2c21f56a-8206-4e0f-bbb4-f22532df5b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:a7:8e:53:4e:2c:fa:05:e0:f2:37:c4:ab: 56:28:c6:f6:78:8f:96:1a:7a:cb:ac:f0:4e:5a:2c: c6:29:5d:78:c0:c1:12:23:6c:e7:9c:95:d5:dc:dd: 8c:d7:9b:a6:84:49:72:8f:69:a2:25:08:0e:1b:67: 8b:e9:5b:34:fa:74:4d:a8:02:a7:50:0e:c5:c9:9a: 1b:3a:80:99:5b:9c:7a:7d:4c:2e:03:84:54:b2:5e: 49:8a:ea:b7:80:da:0b:70:a6:1e:d9:57:0e:7b:30: 85:c7:24:38:9b:3c:23:9a:88:54:f9:fd:08:20:9a: c0:30:b3:ca:a2:85:5a:79:58:a7:d9:d3:90:cc:20: 0a:85:bc:77:8e:c4:f0:ef:15:e4:6d:7a:49:57:f9: 22:49:97:88:2b:c1:6e:77:20:ed:0a:2e:f8:2f:5e: c7:85:97:c4:47:3c:95:38:9f:b5:ef:d4:7b:f8:71: 6d:0d:79:32:bf:fe:7f:ad:b5:cf:de:74:dd:f5:7e: a6:64:35:f5:ca:39:2b:3b:0e:0d:70:34:c1:af:a3: 90:b2:25:ee:82:1e:8f:0d:ba:66:d4:5b:27:a9:59: a5:88:1c:d5:fb:2a:24:21:24:84:a3:df:8f:94:6d: 13:f7:2b:00:4c:7e:3e:e3:0b:1f:9f:33:a1:d2:3c: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:FA:2E:D5:5F:F0:88:91:10:15:3E:2F:F0:B1:42:1B:E9:54:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9b:72:0e:55:23:34:e2:a9:d9:56:3a:9a:8d:64:de:70:7f: 83:bf:7f:55:2b:1b:1c:45:ba:1e:fc:f9:c5:c8:c9:05:8c:f6: 68:1d:a0:f3:4b:14:ad:96:bf:93:90:70:5f:93:04:35:f4:61: 92:fe:b9:0a:eb:a1:25:47:94:4e:52:a2:07:7a:33:01:ca:d9: 0c:d2:23:0c:2d:c0:d4:07:72:85:9b:31:55:0a:24:89:92:e5: ee:d1:0c:bd:a5:9f:ce:f9:42:80:96:13:ec:f6:54:b8:ef:75: 7c:d4:41:b4:4a:7a:fd:9b:34:a6:2b:e4:ec:33:94:23:0d:38: 3b:96:9d:97:e4:26:8b:60:59:0a:2f:50:49:00:01:18:1b:5c: 82:4e:1f:d1:53:54:cd:e2:5b:72:a6:8f:d5:8e:a2:de:0f:34: 36:f7:c6:cb:66:a7:bd:ed:83:22:94:c2:1a:0d:95:2d:61:12: c7:31:a7:64:4b:b5:61:dc:07:a2:0d:b7:c5:2c:a9:24:f8:ae: 14:80:7b:80:22:b8:ae:71:6d:d7:3b:5f:3f:5a:86:cc:2d:d1: b7:32:30:36:cf:2d:95:3f:db:45:fa:ce:26:40:d7:ae:0a:be: 34:b4:89:54:d8:23:07:ce:0e:62:20:37:03:95:0f:7d:48:37: 7b:ff:af:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mNKmfMX4406vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MmMyMWY1NmEtODIwNi00ZTBmLWJiYjQtZjIyNTMyZGY1YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuSnjlNOLPoF4PI3xKtWKMb2eI+WGnrLrPBO WizGKV14wMESI2znnJXV3N2M15umhElyj2miJQgOG2eL6Vs0+nRNqAKnUA7FyZob OoCZW5x6fUwuA4RUsl5Jiuq3gNoLcKYe2VcOezCFxyQ4mzwjmohU+f0IIJrAMLPK ooVaeVin2dOQzCAKhbx3jsTw7xXkbXpJV/kiSZeIK8FudyDtCi74L17HhZfERzyV OJ+179R7+HFtDXkyv/5/rbXP3nTd9X6mZDX1yjkrOw4NcDTBr6OQsiXugh6PDbpm 1FsnqVmliBzV+yokISSEo9+PlG0T9ysATH4+4wsfnzOh0jys2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwL+i7VX/CIkRAVPi/wsUIb6VRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZjBhZWU1ZDEtZDQ0Yy0z NTY2LWI3MWYtMDVjYTgyZWZhYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmbcg5VIzTiqdlWOpqNZN5wf4O/f1UrGxxFuh78+cXIyQWM9mgdoPNL FK2Wv5OQcF+TBDX0YZL+uQrroSVHlE5Sogd6MwHK2QzSIwwtwNQHcoWbMVUKJImS 5e7RDL2ln875QoCWE+z2VLjvdXzUQbRKev2bNKYr5OwzlCMNODuWnZfkJotgWQov UEkAARgbXIJOH9FTVM3iW3Kmj9WOot4PNDb3xstmp73tgyKUwhoNlS1hEscxp2RL tWHcB6INt8UsqST4rhSAe4AiuK5xbdc7Xz9ahswt0bcyMDbPLZU/20X6ziZA164K vjS0iVTYIwfODmIgNwOVD31IN3v/rz4= -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:05 2025 by rpki-client