$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa File: 1480a659-dff0-3379-854a-3902b5d6c9ea.roa (raw, json) Hash identifier: QDjD46FGkA3+WO+1p2GHtE5VZ1HuNXgEz6gPNB/rjtU= Subject key identifier: 37:C6:0D:7D:8E:FF:1C:E8:98:3F:74:43:59:43:D6:2A:FF:16:C7:32 Certificate issuer: /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Certificate serial: 010D0C9F43285848F65BD184B05A6AC96D602D40 Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 198.99.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d1:84:b0:5a:6a:c9:6d:60:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=891c7137-e28b-4e6e-8c77-18cfa77a2193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:40:34:82:37:19:20:22:a4:3a:22:6c:2c:29: b7:5a:e8:03:bc:d6:b5:10:78:2c:2b:01:5b:01:c8: 8d:59:81:f7:51:be:a3:62:a9:cc:83:b2:0c:05:1f: b4:58:f4:c4:a3:c4:3f:34:c6:ec:61:1a:9c:42:99: b5:da:94:fa:3f:a5:83:41:f9:a1:35:38:6b:5a:b6: 52:74:c3:49:3f:42:99:d3:94:79:b4:88:7f:33:c1: bc:42:df:49:ca:99:17:c2:3c:46:a7:ae:4f:32:04: 23:05:da:12:6a:54:a7:39:5d:1a:7a:07:1e:71:c5: 1d:79:be:37:9a:91:31:d5:fc:8e:fc:0f:f0:33:de: d0:4e:a3:8f:cc:1c:37:d4:95:5d:7a:8d:87:1c:d3: 5f:37:b7:a6:de:37:ed:6d:b8:b0:0d:01:f7:d8:9a: 0b:e2:60:a5:69:1c:5a:d2:9b:ef:36:69:db:1c:01: cc:d3:23:6a:7e:72:ee:09:fd:49:ca:eb:90:10:73: 8a:45:3a:ce:bd:b8:83:b8:c7:d9:72:4c:7b:bb:21: 6f:4f:87:0e:11:4a:6d:bb:1d:68:95:b1:d6:09:90: 73:4e:63:39:75:01:9e:bd:a3:5a:1e:7f:e6:db:70: a3:71:76:93:54:ac:83:27:18:d8:70:7e:40:72:fe: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C6:0D:7D:8E:FF:1C:E8:98:3F:74:43:59:43:D6:2A:FF:16:C7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl X509v3 Authority Key Identifier: keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer sbgp-ipAddrBlock: critical IPv4: 198.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6d:ba:8a:89:23:f7:8d:f9:ed:76:55:6e:c1:25:0e:e2:30: ca:ac:4e:59:e1:9f:18:a1:02:ac:4c:74:25:77:e3:ec:21:21: ec:f1:06:8d:4d:e4:a0:34:7d:0b:92:21:03:7c:8a:56:75:21: 7f:e2:1f:c2:79:f2:70:62:64:02:16:8f:7e:bc:ee:da:2d:30: ec:b2:bd:02:31:10:f6:c0:ff:b8:8a:78:b4:14:f8:42:18:af: 08:55:87:04:fc:fd:94:a6:72:c9:09:90:95:0e:c1:99:f7:17: 01:c4:56:1e:06:2d:d1:e9:b8:4b:f0:55:0d:bc:42:02:69:8e: da:43:c9:4b:42:0e:e5:07:56:01:6d:16:07:29:39:bc:10:b0: 14:c7:c3:02:e9:e1:a2:f0:d3:8b:00:ab:7f:ab:19:01:26:46: 5c:2a:50:9a:41:3f:f4:7d:3f:6f:b0:f5:b2:fe:20:e8:db:df: 9b:ca:97:37:c3:13:ac:d2:33:2d:31:bc:f0:7a:9c:7e:bc:04: 4f:e8:56:fa:7c:9a:8b:12:8d:da:41:ac:2e:35:2e:27:5b:53: ac:11:59:9a:77:18:3a:83:95:00:bf:d9:ac:12:45:a8:14:64: 03:da:69:36:0e:7e:35:47:37:22:44:0b:f5:19:c0:72:d8:69: f8:46:08:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9GEsFpqyW1gLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyYWQ5MjMtN2RiYy00ZWQ0LWIzNTEtZTJmZDIzNTlh MjE2MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODkxYzcxMzctZTI4Yi00ZTZlLThjNzctMThjZmE3N2EyMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkA0gjcZICKkOiJsLCm3WugDvNa1EHgsKwFb AciNWYH3Ub6jYqnMg7IMBR+0WPTEo8Q/NMbsYRqcQpm12pT6P6WDQfmhNThrWrZS dMNJP0KZ05R5tIh/M8G8Qt9JypkXwjxGp65PMgQjBdoSalSnOV0aegceccUdeb43 mpEx1fyO/A/wM97QTqOPzBw31JVdeo2HHNNfN7em3jftbbiwDQH32JoL4mClaRxa 0pvvNmnbHAHM0yNqfnLuCf1JyuuQEHOKRTrOvbiDuMfZckx7uyFvT4cOEUptux1o lbHWCZBzTmM5dQGevaNaHn/m23CjcXaTVKyDJxjYcH5Acv70lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfGDX2O/xzomD90Q1lD1ir/FscyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJh ZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1OWEyMTYvMTQ4MGE2NTktZGZmMC0z Mzc5LTg1NGEtMzkwMmI1ZDZjOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGEyYWQ5MjMtN2RiYy00ZWQ0LWIz NTEtZTJmZDIzNTlhMjE2LzhhMmFkOTIzLTdkYmMtNGVkNC1iMzUxLWUyZmQyMzU5 YTIxNi5jcmwwHwYDVR0jBBgwFoAU+H4ZrPkNEkj/s8hXYlR6Eqwb0xkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZk MjM1OWEyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZtuoqJI/eN+e12VW7BJQ7iMMqsTlnhnxihAqxMdCV34+whIezxBo1N 5KA0fQuSIQN8ilZ1IX/iH8J58nBiZAIWj3687totMOyyvQIxEPbA/7iKeLQU+EIY rwhVhwT8/ZSmcskJkJUOwZn3FwHEVh4GLdHpuEvwVQ28QgJpjtpDyUtCDuUHVgFt FgcpObwQsBTHwwLp4aLw04sAq3+rGQEmRlwqUJpBP/R9P2+w9bL+IOjb35vKlzfD E6zSMy0xvPB6nH68BE/oVvp8mosSjdpBrC41LidbU6wRWZp3GDqDlQC/2awSRagU ZAPaaTYOfjVHNyJEC/UZwHLYafhGCPE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:06 2025 by rpki-client