$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa File: a43cf8c1-2497-3003-b8de-65129c6513b9.roa (raw, json) Hash identifier: w4Kw8etsb7p66KgysF0w4kN2bLqxa/WbxOd61bXoSzE= Subject key identifier: 1D:F5:9A:A2:1E:12:15:B7:40:6D:53:CE:62:12:00:E2:57:FE:F9:8F Certificate issuer: /CN=129538be-cccb-40d0-8a7d-ac02bf86976a Certificate serial: 010D0C9F43285849393E746A2BA07126C5E8F000 Authority key identifier: ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 16509 IP address blocks: 198.212.172.0/22 maxlen: 22 198.212.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:74:6a:2b:a0:71:26:c5:e8:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129538be-cccb-40d0-8a7d-ac02bf86976a Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=3a7694f5-6409-4b0a-aaa0-590112b2a8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:63:1d:c3:70:77:e5:35:81:cb:47:13:70: 60:66:8d:b3:13:f0:b7:91:30:1f:ba:4d:91:1c:14: 0a:fd:c3:2a:aa:be:cc:ae:da:e2:ed:51:53:2b:f9: 24:32:11:6b:80:1a:d0:13:80:66:f8:49:1b:66:36: a5:80:e7:33:ae:ed:16:6c:8e:5a:94:12:e0:f1:19: db:be:17:2e:1e:8a:d9:cf:e8:13:51:e9:d0:c5:34: 04:a5:15:b1:6b:20:2a:93:7b:33:89:1a:52:e9:9e: 46:28:8e:df:57:19:9e:6e:d9:bd:55:80:72:e2:73: 21:9f:cf:0f:65:94:d5:cd:d1:08:7a:3c:c0:bb:22: 5e:d0:54:6a:e9:ab:60:9a:5f:72:b3:74:66:02:6c: 05:3d:15:c4:51:45:14:81:e3:c0:4c:2b:d8:25:4f: dc:79:15:dd:3d:bc:5d:2a:cc:20:f3:01:03:42:d8: f3:27:da:6e:4c:58:8e:94:f5:6a:50:e3:06:0a:62: df:03:3f:5d:73:c8:c9:75:e2:76:3e:df:2a:c5:c9: 26:18:f0:12:8e:f6:fd:9e:7b:30:1d:9d:bc:0a:7c: f3:cd:dc:a0:65:0d:cc:a1:b3:1b:90:4e:76:86:41: 7f:40:9c:40:39:92:6d:af:74:ba:ed:c1:c4:5c:94: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:9A:A2:1E:12:15:B7:40:6D:53:CE:62:12:00:E2:57:FE:F9:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl X509v3 Authority Key Identifier: keyid:ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer sbgp-ipAddrBlock: critical IPv4: 198.212.172.0-198.212.176.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:94:c2:a4:a5:83:84:7c:55:c6:fd:39:a9:91:f6:bc:14:42: dd:96:00:25:e0:af:f7:64:3c:0d:ed:8a:e6:ce:7a:db:7a:1b: fa:91:5d:02:ee:e0:71:14:a3:84:94:ff:b5:fa:28:e1:52:4a: bd:1e:89:61:69:2f:92:20:9c:f7:6c:93:4b:b7:64:6f:b9:0e: ad:73:af:79:26:fc:5b:ba:f8:7e:d9:bd:c2:c5:6e:7c:a5:a4: 8a:35:e0:ac:a6:a2:d8:65:ca:27:81:81:7a:ad:dd:73:28:60: e7:5d:36:80:64:0e:f9:67:d7:43:1b:c6:3c:d3:4f:6d:9b:e0: e7:f3:0b:55:46:24:a8:cf:60:36:58:7c:84:63:d4:52:e8:d8: 55:49:5f:b7:db:a7:f8:aa:4f:82:30:7a:94:58:2f:b3:31:6a: 86:3d:0c:21:75:e6:d8:2e:c5:b8:a4:d9:72:1f:1f:9f:1a:4c: 89:cf:00:82:54:b1:9b:b1:99:90:3e:f3:33:7f:9d:dd:c0:a9: 98:ba:ad:1e:81:ec:e1:18:ef:f7:6f:12:e5:75:96:12:da:5a: 7d:b6:02:64:42:f8:b7:b4:b9:ea:8c:0c:9d:9e:fc:f1:61:9d: e3:30:f4:d4:43:b1:53:f5:1d:cd:ee:c3:bd:b7:d2:f9:be:08: 25:e0:c5:de -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEk5PnRqK6BxJsXo8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI5NTM4YmUtY2NjYi00MGQwLThhN2QtYWMwMmJmODY5 NzZhMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk M2E3Njk0ZjUtNjQwOS00YjBhLWFhYTAtNTkwMTEyYjJhOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMdjHcNwd+U1gctHE3BgZo2zE/C3kTAfuk2R HBQK/cMqqr7Mrtri7VFTK/kkMhFrgBrQE4Bm+EkbZjalgOczru0WbI5alBLg8Rnb vhcuHorZz+gTUenQxTQEpRWxayAqk3sziRpS6Z5GKI7fVxmebtm9VYBy4nMhn88P ZZTVzdEIejzAuyJe0FRq6atgml9ys3RmAmwFPRXEUUUUgePATCvYJU/ceRXdPbxd Kswg8wEDQtjzJ9puTFiOlPVqUOMGCmLfAz9dc8jJdeJ2Pt8qxckmGPASjvb9nnsw HZ28CnzzzdygZQ3MobMbkE52hkF/QJxAOZJtr3S67cHEXJQRzwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFB31mqIeEhW3QG1TzmISAOJX/vmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1 MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAyYmY4Njk3NmEvYTQzY2Y4YzEtMjQ5Ny0z MDAzLWI4ZGUtNjUxMjljNjUxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTI5NTM4YmUtY2NjYi00MGQwLThh N2QtYWMwMmJmODY5NzZhLzEyOTUzOGJlLWNjY2ItNDBkMC04YTdkLWFjMDJiZjg2 OTc2YS5jcmwwHwYDVR0jBBgwFoAU7Wrg6IA/tLttlWDcjl3wP4sq0GMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAy YmY4Njk3NmEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALG1KwD BADG1LAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAb5TCpKWDhHxVxv05qZH2vBRC3ZYAJeCv92Q8De2K5s56 23ob+pFdAu7gcRSjhJT/tfoo4VJKvR6JYWkvkiCc92yTS7dkb7kOrXOveSb8W7r4 ftm9wsVufKWkijXgrKai2GXKJ4GBeq3dcyhg5102gGQO+WfXQxvGPNNPbZvg5/ML VUYkqM9gNlh8hGPUUujYVUlft9un+KpPgjB6lFgvszFqhj0MIXXm2C7FuKTZch8f nxpMic8AglSxm7GZkD7zM3+d3cCpmLqtHoHs4Rjv928S5XWWEtpafbYCZEL4t7S5 6owMnZ788WGd4zD01EOxU/Udze7DvbfS+b4IJeDF3g== -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:58 2025 by rpki-client