$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8c07cadb-6461-3df3-9877-ae1a3d18d295.roa File: 8c07cadb-6461-3df3-9877-ae1a3d18d295.roa (raw, json) Hash identifier: +gj5RHkHQKyha3ZDvYVjoqpES51nFQaRwG/9GHvmqSQ= Subject key identifier: 1C:20:E2:E3:F6:62:72:0F:DB:E3:CB:FA:61:FD:44:97:FE:0A:BB:ED Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285848E2093A066CBDCF0D07B85960 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8c07cadb-6461-3df3-9877-ae1a3d18d295.roa Signing time: Fri 14 Feb 2025 19:18:10 +0000 ROA not before: Fri 14 Feb 2025 19:18:10 +0000 ROA not after: Thu 15 May 2025 18:18:10 +0000 asID: 398395 IP address blocks: 198.45.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:09:3a:06:6c:bd:cf:0d:07:b8:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Feb 14 19:18:10 2025 GMT Not After : May 15 18:18:10 2025 GMT Subject: CN=c9feebdc-79d9-4fd0-a4c9-5f86876d7dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:14:df:8e:79:55:97:77:17:09:99:60:98: 64:9c:44:65:7e:54:2f:d2:36:3e:d3:45:e6:ac:4c: 50:a7:d7:5d:1f:a0:2c:f5:96:c3:22:0d:e3:7d:a9: 86:70:c1:0a:a7:af:88:4c:ba:cc:bc:85:9b:1d:81: 95:b7:e8:29:81:55:b6:b7:c0:be:23:c9:d1:e4:24: 58:60:50:63:55:6b:8b:f2:19:86:ee:56:94:7c:46: fb:04:26:63:59:1b:45:32:f2:78:55:96:3d:56:9d: 60:66:7b:3a:64:b7:5e:11:ce:9a:d8:2a:72:9d:15: a0:f8:aa:39:e9:3e:fc:7e:e3:5f:b1:43:ab:27:27: 74:9b:0a:0c:eb:c3:aa:db:47:b6:26:e2:1b:83:f2: 59:43:ca:5f:ba:1f:22:04:01:4e:70:1d:97:83:cb: e5:60:e6:e1:81:a2:ac:3c:d1:52:90:a4:a5:f7:20: d8:e0:31:b4:5b:5f:e3:e1:f6:26:19:c5:d2:ad:0a: 47:e8:df:52:59:53:47:58:cd:0d:da:c1:18:83:95: 68:57:ae:5a:03:b5:7b:c5:92:0d:9e:50:3a:01:f5: 5f:b7:dd:21:58:96:6f:0c:cd:ba:0b:01:44:13:58: 2b:47:25:d5:56:f7:c5:ac:24:f1:41:d7:0e:79:04: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:20:E2:E3:F6:62:72:0F:DB:E3:CB:FA:61:FD:44:97:FE:0A:BB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8c07cadb-6461-3df3-9877-ae1a3d18d295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 198.45.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c7:5b:00:2b:fd:bc:58:bf:a4:e6:9c:fb:9d:87:f0:52:6f: 77:9e:0f:75:af:7a:66:1c:8f:ab:f0:9a:1e:4b:cd:dd:b3:f6: e9:d0:6c:65:29:d8:2a:80:c6:2b:b7:36:af:aa:1d:e1:da:18: aa:03:41:6b:62:1a:ec:4b:dd:c0:67:ac:05:5c:0f:61:1e:9f: a2:58:8a:21:a1:e2:6b:d9:a7:b4:ba:92:3b:31:e4:9a:a3:0f: 19:81:05:ec:ce:10:c9:e7:a8:27:35:28:85:05:c0:63:55:93: 35:7b:83:e9:b2:28:40:e8:e8:00:60:84:d8:02:a9:a3:c2:6b: 5d:b3:af:1c:07:00:f9:5c:81:e4:8a:f8:de:db:96:c3:59:a6: 25:a8:13:16:50:52:dc:d3:18:7b:79:f5:f3:05:20:92:5b:e3: f5:a7:d4:9e:2e:55:f7:aa:ec:91:57:58:8d:24:a7:95:70:d0: fc:ff:ca:bf:f6:e5:9b:b5:1a:47:df:c4:72:e5:a3:a6:aa:a5: c2:c2:58:ef:99:5a:b1:58:6d:10:3d:b8:51:3e:73:97:a5:a0: 0c:cf:54:c9:29:a1:89:a3:f7:f5:f3:c2:f7:d8:f3:3d:d3:17: b3:d3:75:a7:30:6f:ed:1e:e7:22:02:07:63:d9:56:eb:26:c6: ce:18:75:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiCToGbL3PDQe4WWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDIxNDE5MTgxMFoXDTI1MDUxNTE4MTgxMFowLzEtMCsGA1UEAxMk YzlmZWViZGMtNzlkOS00ZmQwLWE0YzktNWY4Njg3NmQ3ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbgU3455VZd3FwmZYJhknERlflQv0jY+00Xm rExQp9ddH6As9ZbDIg3jfamGcMEKp6+ITLrMvIWbHYGVt+gpgVW2t8C+I8nR5CRY YFBjVWuL8hmG7laUfEb7BCZjWRtFMvJ4VZY9Vp1gZns6ZLdeEc6a2CpynRWg+Ko5 6T78fuNfsUOrJyd0mwoM68Oq20e2JuIbg/JZQ8pfuh8iBAFOcB2Xg8vlYObhgaKs PNFSkKSl9yDY4DG0W1/j4fYmGcXSrQpH6N9SWVNHWM0N2sEYg5VoV65aA7V7xZIN nlA6AfVft90hWJZvDM26CwFEE1grRyXVVvfFrCTxQdcOeQROFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwg4uP2YnIP2+PL+mH9RJf+CrvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGMwN2NhZGItNjQ2MS0z ZGYzLTk4NzctYWUxYTNkMThkMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLHWwAr/bxYv6TmnPudh/BSb3eeD3WvemYcj6vwmh5Lzd2z9unQbGUp 2CqAxiu3Nq+qHeHaGKoDQWtiGuxL3cBnrAVcD2Een6JYiiGh4mvZp7S6kjsx5Jqj DxmBBezOEMnnqCc1KIUFwGNVkzV7g+myKEDo6ABghNgCqaPCa12zrxwHAPlcgeSK +N7blsNZpiWoExZQUtzTGHt59fMFIJJb4/Wn1J4uVfeq7JFXWI0kp5Vw0Pz/yr/2 5Zu1GkffxHLlo6aqpcLCWO+ZWrFYbRA9uFE+c5eloAzPVMkpoYmj9/XzwvfY8z3T F7PTdacwb+0e5yICB2PZVusmxs4YdXk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:38 2025 by rpki-client