$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa File: 19666efe-72d0-3e30-9419-d8cdfcea80a0.roa (raw, json) Hash identifier: uDel3XD+V3nwdoYx4jMBUufoEe4I7uzee0FwOghGRXs= Subject key identifier: E4:67:BD:8E:29:35:1F:A8:25:9D:A3:71:9B:A5:8C:D8:53:C8:3F:79 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285848AF2B881729D688E9DE76EBC0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 142032 IP address blocks: 198.44.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:88:17:29:d6:88:e9:de:76:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=d63d69ed-df7d-4433-b5ab-7e1d81f78e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:b9:6b:2a:2c:aa:3e:d5:21:f1:57:c8:ab: 06:e6:48:90:b9:0b:da:87:bf:2e:0c:4f:e8:09:de: fd:6f:d1:80:4a:4f:e9:b6:5a:fa:5f:20:56:2f:98: 56:95:03:b2:4a:40:dc:58:fa:fd:30:a1:ca:83:0a: 18:3f:ba:19:93:a1:95:67:8e:ec:a6:35:a7:28:1d: 4e:f6:f0:e1:a5:74:b6:ec:86:cc:d4:22:06:b3:a1: 03:dd:a4:84:ba:43:20:e8:dd:b0:fe:2a:e2:34:55: 92:22:9f:dd:db:43:bd:47:1e:7e:43:07:ff:3b:47: c6:b8:50:c8:f0:c4:77:4f:8d:d5:81:4a:55:b7:8a: 62:36:fd:2b:2f:6b:2e:4e:d6:4b:bc:d7:9c:59:20: c2:c5:30:e3:89:85:93:57:63:f8:34:34:54:70:4f: 1f:d1:ca:59:a7:cd:60:da:6c:d3:e0:b6:7a:88:e0: d2:b0:16:91:a4:f9:39:5e:1b:3e:e2:d1:dd:d3:98: 8e:f8:45:b5:6e:95:6c:ba:56:3e:3c:07:5b:f4:88: 55:82:88:33:c3:8f:5b:ed:e3:de:9c:0c:37:14:85: 2b:5c:29:5a:8f:da:f6:4e:71:7f:86:56:93:15:9f: 2d:7f:42:29:a6:a7:ca:d8:35:27:09:a5:95:45:9b: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:BD:8E:29:35:1F:A8:25:9D:A3:71:9B:A5:8C:D8:53:C8:3F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:99:d2:86:ec:e1:b2:a5:6a:c9:ac:87:3e:c3:5c:ac:8b:f5: 22:ab:17:ff:38:f8:df:f8:c5:f8:ab:8a:29:45:36:cf:13:ed: 53:2c:c1:10:38:b0:e9:87:82:6b:46:38:cc:7f:0f:ba:07:2b: c8:50:2c:94:c2:cc:8a:13:c7:f3:fd:19:5c:78:52:81:b9:1b: 28:b1:67:2b:57:39:77:f0:68:bf:50:9e:9d:b2:07:82:3d:58: b0:7d:dd:c0:1f:1f:b6:62:3e:4a:82:68:ec:39:37:f3:ad:06: ad:18:30:9f:9e:fe:48:bd:0b:63:fd:03:1e:fa:a4:48:df:15: 3f:df:af:c5:cb:c6:6e:37:42:c7:17:5f:84:2f:d3:cb:34:85: 74:83:6a:9f:7a:f1:4e:c7:ee:1e:53:1d:3a:8c:62:68:f0:cc: 33:a6:c7:74:80:83:a3:5b:01:24:10:ab:7e:b8:8c:f2:f9:1d: 5e:d0:14:b0:bb:74:6b:5b:55:d5:08:d8:3f:b0:53:97:ce:a8: cb:49:7d:34:f8:05:df:1e:e6:44:76:9c:8d:6c:95:27:9e:8d: 20:53:6e:c4:07:5b:0c:86:1c:74:0d:f6:de:d9:fb:d5:58:98: 63:72:25:4f:31:99:d7:c3:ca:63:82:a3:fb:2d:4d:1f:82:77: f0:d0:f4:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4gXKdaI6d5268AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDYzZDY5ZWQtZGY3ZC00NDMzLWI1YWItN2UxZDgxZjc4ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04u5ayosqj7VIfFXyKsG5kiQuQvah78uDE/o Cd79b9GASk/ptlr6XyBWL5hWlQOySkDcWPr9MKHKgwoYP7oZk6GVZ47spjWnKB1O 9vDhpXS27IbM1CIGs6ED3aSEukMg6N2w/iriNFWSIp/d20O9Rx5+Qwf/O0fGuFDI 8MR3T43VgUpVt4piNv0rL2suTtZLvNecWSDCxTDjiYWTV2P4NDRUcE8f0cpZp81g 2mzT4LZ6iODSsBaRpPk5Xhs+4tHd05iO+EW1bpVsulY+PAdb9IhVgogzw49b7ePe nAw3FIUrXClaj9r2TnF/hlaTFZ8tf0IppqfK2DUnCaWVRZtZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORnvY4pNR+oJZ2jcZuljNhTyD95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMTk2NjZlZmUtNzJkMC0z ZTMwLTk0MTktZDhjZGZjZWE4MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2Z0obs4bKlasmshz7DXKyL9SKrF/84+N/4xfiriilFNs8T7VMswRA4 sOmHgmtGOMx/D7oHK8hQLJTCzIoTx/P9GVx4UoG5GyixZytXOXfwaL9Qnp2yB4I9 WLB93cAfH7ZiPkqCaOw5N/OtBq0YMJ+e/ki9C2P9Ax76pEjfFT/fr8XLxm43QscX X4Qv08s0hXSDap968U7H7h5THTqMYmjwzDOmx3SAg6NbASQQq364jPL5HV7QFLC7 dGtbVdUI2D+wU5fOqMtJfTT4Bd8e5kR2nI1slSeejSBTbsQHWwyGHHQN9t7Z+9VY mGNyJU8xmdfDymOCo/stTR+Cd/DQ9LM= -----END CERTIFICATE-----Generated at Sat Apr 5 13:19:57 2025 by rpki-client