$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa File: d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa (raw, json) Hash identifier: WZ/XvIk8feVtJQzCHEN0Df6z+ppXUzRxQy/nyV3lKRY= Subject key identifier: D5:68:BD:E7:F8:AB:55:94:44:DB:DF:B7:06:86:54:FA:58:5C:4E:4A Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849203C0D1CB46A1D2CFEDB1000 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 62468 IP address blocks: 198.44.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:0d:1c:b4:6a:1d:2c:fe:db:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=245e3df5-fa57-4443-8b2f-d4eddf343f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:38:7b:d0:f9:66:99:28:5e:60:19:94:ab: 2a:af:05:f2:09:ea:b9:72:89:8e:d4:02:ca:82:dc: cc:16:b9:be:31:06:07:98:21:54:b2:55:23:23:15: d7:e1:cd:df:2b:00:64:19:4d:8a:d3:ea:77:17:b2: cb:a6:05:87:58:f7:04:a3:17:12:38:f7:73:37:6d: 3f:25:54:7e:3a:0d:3d:29:0d:d8:72:e4:53:d9:e9: e9:b8:e0:85:7d:66:ad:29:94:5a:1b:96:78:49:30: 23:bb:ef:51:c5:ea:b8:22:13:29:0c:af:00:08:28: cc:b7:63:4f:b9:7a:52:68:c1:0f:24:03:4c:ec:5c: 3c:8f:8b:d0:21:55:b1:6c:9a:a7:fc:7a:e2:8a:74: b7:d8:0c:a2:7e:f6:1b:5b:d7:eb:0e:59:5d:61:a4: 5a:13:2b:45:1b:95:50:68:7d:53:79:ed:93:fc:73: c9:94:33:c5:44:57:ab:4c:c1:e3:ef:57:ba:90:07: 7c:ec:aa:6b:71:83:64:dc:61:c1:3f:df:2d:f0:a7: 80:bd:37:67:c2:57:3c:13:d7:19:e9:b7:a7:e4:1a: cc:7f:27:ff:5e:c2:78:f6:ac:6b:45:f9:aa:f6:0e: 7a:22:28:7a:b2:2b:a5:e4:29:ef:53:df:f1:48:3e: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:68:BD:E7:F8:AB:55:94:44:DB:DF:B7:06:86:54:FA:58:5C:4E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ee:11:26:f0:e9:a7:4c:22:21:13:3e:8d:83:c6:c0:f5:bb: b8:7b:87:35:01:e5:9f:97:2c:98:58:1d:cc:cd:86:f7:f7:76: 28:f7:8d:a2:ee:4b:28:18:b9:ab:cc:ad:25:2b:56:86:60:c5: e4:e1:3c:2d:a4:a8:7a:e5:74:4a:8f:84:e1:55:20:c0:ed:12: 0c:cf:a9:a7:38:3c:6b:a9:82:d5:ce:4f:04:06:ce:67:64:09: ca:9a:42:9c:a3:24:b9:d5:c0:e1:27:2b:6e:99:fa:8e:c8:3f: dc:2e:a1:db:02:58:18:d7:7f:fb:82:3f:ff:c7:69:4d:9a:e4: 3a:d3:d5:fb:01:9e:c6:63:e6:f8:0c:47:ea:87:6a:47:1e:24: d7:93:e9:2c:ec:8d:a0:11:6e:b0:64:12:31:5e:d9:b3:b4:5e: 8e:3b:c0:bf:a1:24:76:08:2c:2e:cd:c0:8d:f1:ef:74:69:d6: a3:12:98:f1:b5:4a:c2:8e:03:90:2d:0d:03:f1:9d:58:65:79: ef:50:a4:b6:49:37:09:6c:64:69:cd:64:dc:02:8d:c1:78:79: 3c:c2:1f:fb:a1:fc:f2:5f:c9:d6:d8:1b:94:a7:ba:25:fd:83: 7f:93:81:22:e9:49:dc:21:81:d6:6b:e6:b9:75:17:9d:2f:5d: 99:2d:4e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPA0ctGodLP7bEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MjQ1ZTNkZjUtZmE1Ny00NDQzLThiMmYtZDRlZGRmMzQzZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsY4e9D5ZpkoXmAZlKsqrwXyCeq5comO1ALK gtzMFrm+MQYHmCFUslUjIxXX4c3fKwBkGU2K0+p3F7LLpgWHWPcEoxcSOPdzN20/ JVR+Og09KQ3YcuRT2enpuOCFfWatKZRaG5Z4STAju+9Rxeq4IhMpDK8ACCjMt2NP uXpSaMEPJANM7Fw8j4vQIVWxbJqn/HriinS32AyifvYbW9frDlldYaRaEytFG5VQ aH1Tee2T/HPJlDPFRFerTMHj71e6kAd87KprcYNk3GHBP98t8KeAvTdnwlc8E9cZ 6ben5BrMfyf/XsJ49qxrRfmq9g56Iih6siul5CnvU9/xSD7t+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVovef4q1WURNvftwaGVPpYXE5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDkwZjA2N2UtZTVkOS0z MjdmLTk1MTAtZWUyY2RhZTEwYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjuESbw6adMIiETPo2DxsD1u7h7hzUB5Z+XLJhYHczNhvf3dij3jaLu SygYuavMrSUrVoZgxeThPC2kqHrldEqPhOFVIMDtEgzPqac4PGupgtXOTwQGzmdk CcqaQpyjJLnVwOEnK26Z+o7IP9wuodsCWBjXf/uCP//HaU2a5DrT1fsBnsZj5vgM R+qHakceJNeT6SzsjaARbrBkEjFe2bO0Xo47wL+hJHYILC7NwI3x73Rp1qMSmPG1 SsKOA5AtDQPxnVhlee9QpLZJNwlsZGnNZNwCjcF4eTzCH/uh/PJfydbYG5SnuiX9 g3+TgSLpSdwhgdZr5rl1F50vXZktTuI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:30:46 2025 by rpki-client