$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa File: 1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa (raw, json) Hash identifier: Ta6X3H5m8dvlvMLUNnm/E6abVTRi9Bs+EIcGYli4ZHs= Subject key identifier: 58:ED:49:4C:BE:74:4B:88:EE:37:CD:13:96:00:B3:8F:21:04:00:F6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849806F2777B940613F40484C80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 1239 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:27:77:b9:40:61:3f:40:48:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=06e5f513-1dcb-4965-9ef7-3674dde27002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:4d:a3:2f:15:53:f3:9d:08:95:7c:e1:9a: 89:f0:79:2e:56:25:f7:41:a6:2f:8b:fa:04:e5:65: 69:04:1b:dc:f3:f8:4a:0c:b8:94:6f:39:7f:d1:3b: 75:c2:53:96:57:2c:96:c4:c7:fc:ef:ca:0c:c9:f3: 91:1a:28:c6:7e:40:5f:a1:cd:b2:94:bc:59:23:d6: 8e:ce:86:dd:25:7a:fb:05:4f:31:d9:90:dc:08:a5: 23:43:70:73:0c:3f:5d:85:9f:84:56:9b:02:b2:96: 00:cf:cd:9b:8a:a9:8a:5a:ba:4f:d3:ae:33:22:12: c5:a0:ae:55:56:ff:1e:d9:63:d7:12:ad:91:77:e2: a8:cb:55:72:ff:e0:cb:d4:29:07:63:18:16:be:92: 05:fa:4a:90:d7:21:af:ce:86:7b:79:c4:92:22:06: 77:a2:a1:38:e9:ac:09:2e:12:45:96:6b:0a:f9:9f: 21:5c:f7:6d:1b:08:9f:35:ab:00:72:ac:aa:0b:ee: 98:69:e9:93:4d:13:eb:3a:db:fb:df:f0:f1:6b:41: 5a:19:d1:49:37:ec:ad:e4:b1:7f:25:ee:5b:44:f6: 24:bb:47:bf:b4:4e:d1:8e:d5:d7:ad:a2:9f:a1:10: f7:7c:77:cf:41:d1:33:85:98:2a:80:6a:c2:ee:b7: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:ED:49:4C:BE:74:4B:88:EE:37:CD:13:96:00:B3:8F:21:04:00:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:67:20:67:3d:d5:b4:d2:22:d5:3d:e0:3d:a6:9e:ba:75:3d: 7c:cd:ec:fb:5c:03:13:76:f0:05:45:06:0b:fe:f5:8d:c8:96: 4a:2d:55:14:f8:57:d5:12:00:1d:80:f9:e6:2a:d0:f5:22:01: 98:5e:d1:c4:75:03:2f:d0:0c:f2:48:71:0f:dd:e5:51:25:ac: f7:7f:6a:ca:67:61:4c:6a:e8:a1:46:32:05:b1:33:6a:30:39: 8a:df:1e:6b:91:24:d3:82:a2:da:33:a8:85:09:c4:bc:e9:32: 67:b0:d6:ad:58:c7:35:ac:7e:e0:17:2f:f4:81:0b:7a:a7:cd: 2b:8a:85:ab:bd:e3:e8:e2:66:ad:e2:dd:ee:dd:af:43:50:9a: ef:e2:c5:b5:e3:8e:ee:54:e3:87:20:01:db:9a:a0:f0:49:44: 22:26:06:8e:a6:4e:d9:e9:03:aa:e4:7b:bd:ca:47:7b:2c:37: 80:f3:d5:e9:ef:b4:9d:21:3c:89:57:ff:ee:b8:26:0a:4a:a2: 82:7e:0d:8b:3e:c1:ad:aa:d8:03:ed:c7:bc:41:05:4e:5c:22: 60:44:18:ef:c3:42:ce:52:ae:d2:65:9a:36:50:e7:f8:ac:49: 42:df:d2:56:59:2b:4a:b3:ad:4a:28:b0:37:4d:e8:df:ea:6b: c1:c2:60:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyd3uUBhP0BITIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MDZlNWY1MTMtMWRjYi00OTY1LTllZjctMzY3NGRkZTI3MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJVNoy8VU/OdCJV84ZqJ8HkuViX3QaYvi/oE 5WVpBBvc8/hKDLiUbzl/0Tt1wlOWVyyWxMf878oMyfORGijGfkBfoc2ylLxZI9aO zobdJXr7BU8x2ZDcCKUjQ3BzDD9dhZ+EVpsCspYAz82biqmKWrpP064zIhLFoK5V Vv8e2WPXEq2Rd+Koy1Vy/+DL1CkHYxgWvpIF+kqQ1yGvzoZ7ecSSIgZ3oqE46awJ LhJFlmsK+Z8hXPdtGwifNasAcqyqC+6YaemTTRPrOtv73/Dxa0FaGdFJN+yt5LF/ Je5bRPYku0e/tE7RjtXXraKfoRD3fHfPQdEzhZgqgGrC7rfJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjtSUy+dEuI7jfNE5YAs48hBAD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWY5Yjc4YWEtYjg2Ni0z NTE3LTg4MmEtN2MwYzdhYzBiNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdnIGc91bTSItU94D2mnrp1PXzN7PtcAxN28AVFBgv+9Y3IlkotVRT4 V9USAB2A+eYq0PUiAZhe0cR1Ay/QDPJIcQ/d5VElrPd/aspnYUxq6KFGMgWxM2ow OYrfHmuRJNOCotozqIUJxLzpMmew1q1YxzWsfuAXL/SBC3qnzSuKhau94+jiZq3i 3e7dr0NQmu/ixbXjju5U44cgAduaoPBJRCImBo6mTtnpA6rke73KR3ssN4Dz1env tJ0hPIlX/+64JgpKooJ+DYs+wa2q2APtx7xBBU5cImBEGO/DQs5SrtJlmjZQ5/is SULf0lZZK0qzrUoosDdN6N/qa8HCYJE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:49 2025 by rpki-client