$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/de58c7b6-0d18-3d6b-aa14-a9661264f0f3.roa File: de58c7b6-0d18-3d6b-aa14-a9661264f0f3.roa (raw, json) Hash identifier: DGUp7V+quv2PQc84lkGVtFlNheXgG8e5Mgq43WEdK8g= Subject key identifier: 3B:56:06:5A:75:33:32:B4:34:B8:DC:A3:65:FF:2F:4F:C5:4C:44:FF Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F432858491ED6D8860DFD6C20159A3400 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/de58c7b6-0d18-3d6b-aa14-a9661264f0f3.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 198.207.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d8:86:0d:fd:6c:20:15:9a:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=2f86451e-dff6-492b-a28e-a168af50a0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:42:f1:82:c9:06:eb:a8:2b:c0:03:c4:43: 5f:d1:db:54:64:61:3e:67:95:96:3a:7d:a5:34:d8: 57:47:47:18:0e:5e:8f:a4:1d:0e:f6:70:f3:77:f5: 32:13:69:c2:45:8a:68:20:85:80:5e:f0:45:c7:31: 6c:89:00:0b:fc:03:64:d8:75:f0:44:6b:3c:fa:44: da:c6:ba:a2:d7:84:24:de:e0:e8:d9:58:c0:80:33: 4b:23:02:10:44:16:2d:33:77:e8:3d:d9:cc:50:2c: ba:ea:dc:99:3b:da:cc:1f:a2:ec:ce:92:13:74:a2: 8d:60:b9:2d:13:fe:6b:ba:d3:6e:c2:06:21:5b:29: 12:0c:e1:33:c6:ba:b5:bf:05:a5:47:55:b6:8a:6f: b9:f7:4e:3b:b9:9f:38:f7:54:96:d0:2f:8d:00:6c: 4b:23:51:b5:87:87:bc:cc:58:24:0d:e9:40:9c:1e: 11:21:2e:fe:1e:b6:f5:8a:e6:fc:d2:fa:d1:6a:05: 15:7c:40:bb:11:f0:e4:21:af:18:ca:fd:62:0b:03: 1d:f4:c1:1c:a8:a4:13:2f:51:e3:55:7e:fb:c6:da: d7:87:78:94:40:56:9d:bc:94:0a:25:ba:77:a1:47: 0d:3c:23:4c:62:0e:de:ba:e6:ec:f1:a0:95:1d:5e: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:56:06:5A:75:33:32:B4:34:B8:DC:A3:65:FF:2F:4F:C5:4C:44:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/de58c7b6-0d18-3d6b-aa14-a9661264f0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 198.207.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fb:1e:85:c7:3a:69:78:5e:13:e2:77:02:89:bd:f0:49:97: bf:b0:d9:b8:6e:73:e9:77:e2:76:5d:5c:de:25:2a:70:b2:f6: 46:4a:7c:5c:41:4a:02:1e:8d:ba:c0:ff:d8:44:91:18:e0:39: 25:c0:33:66:9f:0f:cc:6a:9b:62:e6:f7:60:a2:c1:f6:81:6e: bf:9d:4b:d0:55:09:97:8b:d0:e8:7a:27:a0:97:d0:8b:8d:10: 5f:fb:6d:03:56:93:a7:0a:37:30:e5:51:83:ab:23:ad:3c:2e: 87:6f:1e:11:15:ed:d8:95:5e:5d:3a:1d:63:24:77:37:0c:50: 52:c8:09:69:65:26:d5:2d:e5:d7:c6:9f:6a:55:49:8d:8c:42: 1a:5c:2d:e3:12:ce:f4:c6:5b:2e:93:38:c6:69:82:e8:43:f9: 8c:8d:f9:4d:54:91:12:5b:ed:88:4b:b8:70:67:a5:78:02:69: 94:20:c6:dc:b7:7c:50:9c:c3:ae:ea:d5:3d:91:1c:8b:65:17: 2d:f6:e4:bc:db:77:4d:81:53:91:a0:6a:d3:b1:65:31:55:39: 97:4b:ad:71:4b:95:5c:bf:6f:4f:b0:0b:18:d1:80:3f:a0:bd: 5e:c4:23:28:2e:93:76:93:93:6e:13:74:c9:34:83:81:08:73: 01:e5:33:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tiGDf1sIBWaNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MmY4NjQ1MWUtZGZmNi00OTJiLWEyOGUtYTE2OGFmNTBhMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBC8YLJBuuoK8ADxENf0dtUZGE+Z5WWOn2l NNhXR0cYDl6PpB0O9nDzd/UyE2nCRYpoIIWAXvBFxzFsiQAL/ANk2HXwRGs8+kTa xrqi14Qk3uDo2VjAgDNLIwIQRBYtM3foPdnMUCy66tyZO9rMH6LszpITdKKNYLkt E/5rutNuwgYhWykSDOEzxrq1vwWlR1W2im+59047uZ8491SW0C+NAGxLI1G1h4e8 zFgkDelAnB4RIS7+Hrb1iub80vrRagUVfEC7EfDkIa8Yyv1iCwMd9MEcqKQTL1Hj VX77xtrXh3iUQFadvJQKJbp3oUcNPCNMYg7euubs8aCVHV7ZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtWBlp1MzK0NLjco2X/L0/FTET/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvZGU1OGM3YjYtMGQxOC0z ZDZiLWFhMTQtYTk2NjEyNjRmMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn7HoXHOml4XhPidwKJvfBJl7+w2bhuc+l34nZdXN4lKnCy9kZKfFxB SgIejbrA/9hEkRjgOSXAM2afD8xqm2Lm92CiwfaBbr+dS9BVCZeL0Oh6J6CX0IuN EF/7bQNWk6cKNzDlUYOrI608LodvHhEV7diVXl06HWMkdzcMUFLICWllJtUt5dfG n2pVSY2MQhpcLeMSzvTGWy6TOMZpguhD+YyN+U1UkRJb7YhLuHBnpXgCaZQgxty3 fFCcw67q1T2RHItlFy325Lzbd02BU5GgatOxZTFVOZdLrXFLlVy/b0+wCxjRgD+g vV7EIyguk3aTk24TdMk0g4EIcwHlMyA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:36 2025 by rpki-client