$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7c15252f-9551-38fb-80f7-53e2a7bffbe3.roa File: 7c15252f-9551-38fb-80f7-53e2a7bffbe3.roa (raw, json) Hash identifier: oD0jTMRyR5VvKVr+VU83WE9tsmHxw0RQ+UnGNSQ4+RI= Subject key identifier: 95:CA:12:19:DF:63:88:CA:84:3F:5B:B5:C3:05:4F:92:D4:4F:AD:D3 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493C093A70FF73C69DDD53E6A8 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7c15252f-9551-38fb-80f7-53e2a7bffbe3.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 21949 IP address blocks: 75.98.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3a:70:ff:73:c6:9d:dd:53:e6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=b23acd48-8a78-42e7-b8b0-c3bd468c909d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:cc:ff:78:72:fd:e0:29:13:35:6a:6e:2e: 68:95:0b:f0:8c:36:5d:41:13:5a:ed:32:f1:55:6d: b8:07:27:b6:1a:2d:aa:1f:14:41:a8:2e:15:a4:90: 5f:e8:b9:7f:93:0c:2f:81:0f:75:4a:6e:35:39:74: e3:c6:25:2a:e2:79:f6:1a:9d:a4:c6:85:f2:7d:33: 27:44:7d:18:b1:d7:d4:f8:25:0b:19:10:e1:66:c1: 56:93:4e:e4:c2:5d:ad:b5:85:dc:5a:39:5d:02:d4: 37:d5:88:50:10:cb:6b:be:bb:62:18:7f:63:2f:ad: c6:00:b9:ec:9a:90:04:00:99:52:62:f1:a3:67:2e: ea:8c:6f:aa:1d:75:0e:94:c0:a7:36:4f:c1:77:1f: 3e:5d:40:01:f4:ef:ff:b1:48:5e:e7:73:76:2d:e5: db:42:76:cd:24:5f:f3:5e:4b:b8:8e:02:d3:7a:c0: b3:c8:09:69:fe:ed:be:fc:66:9c:1e:a0:6d:5e:33: 62:52:5d:e7:b5:ba:05:7d:85:62:43:0d:ef:f6:53: cf:96:83:8c:eb:c5:23:4b:79:db:83:f8:55:21:e5: 24:f4:a9:79:18:2e:f0:db:8d:15:8a:c5:49:9e:cc: 1d:70:76:3e:50:2c:83:ff:75:7c:ba:f6:91:23:7e: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:12:19:DF:63:88:CA:84:3F:5B:B5:C3:05:4F:92:D4:4F:AD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7c15252f-9551-38fb-80f7-53e2a7bffbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 75.98.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d5:bc:45:a0:7a:ab:2b:ac:bc:6d:19:37:4d:e8:65:df:80: a3:5f:20:75:b8:d4:f7:62:ba:a1:86:05:0d:3d:b4:7b:e6:01: e4:f0:8f:43:fb:d5:9a:c7:45:55:df:b4:93:c6:4e:8c:50:32: ba:94:7b:e0:a7:61:e4:ce:da:cc:9e:d9:a4:6e:f4:4f:71:ad: b8:2c:de:82:c7:ae:6f:f3:ae:9e:3c:7b:85:82:8e:da:f1:1d: 95:93:87:c5:14:71:43:18:96:9a:c9:fd:c6:eb:c5:93:f7:a7: 5f:60:e3:a7:e9:64:35:c4:3b:5a:dc:84:b2:37:4f:7c:ab:bc: 81:84:84:47:e7:c1:d5:95:c7:a5:bb:f2:c4:ec:08:39:ec:b3: e4:5a:ed:19:f2:07:cd:e8:f9:cb:02:a6:a0:7b:a6:d7:8a:d2: 65:f9:9c:ce:90:26:61:b7:f0:53:77:1d:50:47:3a:0b:52:fd: c8:e1:90:51:56:91:ac:f3:ff:62:69:da:13:d1:d5:33:72:54: 00:30:96:16:36:97:27:03:b9:79:e5:7b:60:81:06:eb:af:7b: 56:2f:91:8e:4e:c6:54:94:d4:5a:95:56:74:f1:52:70:40:e7: 6f:fa:96:33:86:fc:fe:0e:df:47:39:d0:33:2f:1a:23:66:eb: a5:a8:1d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTpw/3PGnd1T5qgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YjIzYWNkNDgtOGE3OC00MmU3LWI4YjAtYzNiZDQ2OGM5MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhzM/3hy/eApEzVqbi5olQvwjDZdQRNa7TLx VW24Bye2Gi2qHxRBqC4VpJBf6Ll/kwwvgQ91Sm41OXTjxiUq4nn2Gp2kxoXyfTMn RH0YsdfU+CULGRDhZsFWk07kwl2ttYXcWjldAtQ31YhQEMtrvrtiGH9jL63GALns mpAEAJlSYvGjZy7qjG+qHXUOlMCnNk/Bdx8+XUAB9O//sUhe53N2LeXbQnbNJF/z Xku4jgLTesCzyAlp/u2+/GacHqBtXjNiUl3ntboFfYViQw3v9lPPloOM68UjS3nb g/hVIeUk9Kl5GC7w240VisVJnswdcHY+UCyD/3V8uvaRI35zmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXKEhnfY4jKhD9btcMFT5LUT63TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2MxNTI1MmYtOTU1MS0z OGZiLTgwZjctNTNlMmE3YmZmYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES2LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrVvEWgeqsrrLxtGTdN6GXfgKNfIHW41PdiuqGGBQ09tHvmAeTwj0P7 1ZrHRVXftJPGToxQMrqUe+CnYeTO2sye2aRu9E9xrbgs3oLHrm/zrp48e4WCjtrx HZWTh8UUcUMYlprJ/cbrxZP3p19g46fpZDXEO1rchLI3T3yrvIGEhEfnwdWVx6W7 8sTsCDnss+Ra7RnyB83o+csCpqB7pteK0mX5nM6QJmG38FN3HVBHOgtS/cjhkFFW kazz/2Jp2hPR1TNyVAAwlhY2lycDuXnle2CBBuuve1YvkY5OxlSU1FqVVnTxUnBA 52/6ljOG/P4O30c50DMvGiNm66WoHWI= -----END CERTIFICATE-----Generated at Tue Apr 8 10:09:39 2025 by rpki-client