$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa4ac02b-4b44-38b9-a5fd-400cf0e15de9.roa File: aa4ac02b-4b44-38b9-a5fd-400cf0e15de9.roa (raw, json) Hash identifier: FWC2VkmL8nX+XOTymREHM7Gh84mpIy510Rp+L7RTZkM= Subject key identifier: 39:5B:DB:E5:1C:08:A8:4C:DA:44:5C:6B:B4:FA:7D:9B:2C:78:A8:E4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584890760580BD358E03A776A110 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa4ac02b-4b44-38b9-a5fd-400cf0e15de9.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397239 IP address blocks: 198.133.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:05:80:bd:35:8e:03:a7:76:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=ca79b517-d49b-41e8-980b-7ea47ee8b893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:24:25:48:4b:2b:cf:f5:f3:0c:82:e8:9b: 1a:37:9d:cd:87:32:b1:c7:01:c7:42:0b:a6:14:f1: 7f:6a:b4:1f:ce:65:07:7b:5b:cf:c9:d0:f4:18:05: dd:d3:d2:18:b6:ab:72:6c:78:75:e8:90:e3:28:29: 4b:72:28:f4:41:ee:b8:9a:72:fa:9f:77:12:44:ec: 26:e8:94:74:02:0c:9c:45:5c:08:ea:7b:41:58:8f: d2:3e:f6:af:88:22:e1:ca:24:0a:17:4f:f2:af:fc: bf:e7:0b:06:0c:c6:8a:c8:dc:4f:1c:93:59:01:b4: 35:0c:88:48:61:ee:07:5d:e8:64:b0:ee:ae:0e:b0: 27:c5:76:60:20:d4:6c:88:15:8e:9c:01:46:cb:28: 12:12:8e:db:4e:5f:61:af:53:9b:1e:49:88:65:18: f8:16:89:e2:6c:83:47:b5:50:62:3e:a1:68:7d:27: f2:12:95:02:b1:a6:5c:67:dc:a6:ff:0d:b3:fe:b4: 6b:b2:3a:34:a6:62:01:f1:b0:0f:c0:5d:57:0e:3d: 54:51:c2:1c:4f:e8:8d:f1:5f:47:bf:47:84:17:39: 86:46:eb:31:e3:0d:39:3d:c5:7c:4e:ba:3b:a6:6f: 4d:6e:d7:51:42:1b:a5:a2:13:b1:a1:68:8d:d0:8e: 2f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5B:DB:E5:1C:08:A8:4C:DA:44:5C:6B:B4:FA:7D:9B:2C:78:A8:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa4ac02b-4b44-38b9-a5fd-400cf0e15de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 198.133.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9f:94:5d:be:35:98:4e:9a:02:74:15:ba:45:40:39:25:aa: 87:52:a8:4b:ca:47:8a:40:59:a2:24:22:0b:c2:93:43:a8:b6: d4:fc:bf:fb:1f:90:4c:1d:08:49:25:db:b8:c9:2a:ec:31:22: 41:08:75:52:a3:ff:33:a2:bd:89:21:69:0f:b3:e5:58:02:f8: 9f:48:24:7e:fa:6c:ee:a6:57:e5:1a:4e:c2:6d:ad:ac:8c:d0: 00:49:da:e9:48:64:fa:cf:15:cc:30:5d:32:c8:9d:53:c3:62: c7:f9:59:24:4c:9d:a7:a8:d3:c9:fe:14:00:af:43:c8:61:d6: 7c:3c:fb:6e:37:be:5b:b1:b6:e4:75:6c:65:e9:4e:a2:d6:d5: 51:7a:c7:9f:de:41:a0:4c:32:45:cd:4b:42:e3:f1:a4:06:b8: 74:68:8b:2f:c5:7f:43:93:da:80:81:ca:47:ae:3d:08:f7:a5: 53:01:e4:43:3f:a5:48:56:b2:01:52:6f:c7:dc:a3:b8:2d:75: 6c:28:2e:5d:71:27:e2:0a:f8:75:70:fc:e8:4f:c9:d1:61:fa: 36:07:49:e5:9a:54:be:27:79:d0:72:cb:4f:6c:13:c6:a5:e8: dc:e9:3d:9e:2a:54:e2:71:47:ec:7b:2a:d1:11:92:4f:08:05: d3:34:40:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgWAvTWOA6d2oRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk Y2E3OWI1MTctZDQ5Yi00MWU4LTk4MGItN2VhNDdlZThiODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF0kJUhLK8/18wyC6JsaN53NhzKxxwHHQgum FPF/arQfzmUHe1vPydD0GAXd09IYtqtybHh16JDjKClLcij0Qe64mnL6n3cSROwm 6JR0AgycRVwI6ntBWI/SPvaviCLhyiQKF0/yr/y/5wsGDMaKyNxPHJNZAbQ1DIhI Ye4HXehksO6uDrAnxXZgINRsiBWOnAFGyygSEo7bTl9hr1ObHkmIZRj4FonibINH tVBiPqFofSfyEpUCsaZcZ9ym/w2z/rRrsjo0pmIB8bAPwF1XDj1UUcIcT+iN8V9H v0eEFzmGRusx4w05PcV8Tro7pm9NbtdRQhulohOxoWiN0I4v9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlb2+UcCKhM2kRca7T6fZsseKjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWE0YWMwMmItNGI0NC0z OGI5LWE1ZmQtNDAwY2YwZTE1ZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqflF2+NZhOmgJ0FbpFQDklqodSqEvKR4pAWaIkIgvCk0OottT8v/sf kEwdCEkl27jJKuwxIkEIdVKj/zOivYkhaQ+z5VgC+J9IJH76bO6mV+UaTsJtrayM 0ABJ2ulIZPrPFcwwXTLInVPDYsf5WSRMnaeo08n+FACvQ8hh1nw8+243vluxtuR1 bGXpTqLW1VF6x5/eQaBMMkXNS0Lj8aQGuHRoiy/Ff0OT2oCBykeuPQj3pVMB5EM/ pUhWsgFSb8fco7gtdWwoLl1xJ+IK+HVw/OhPydFh+jYHSeWaVL4nedByy09sE8al 6NzpPZ4qVOJxR+x7KtERkk8IBdM0QNU= -----END CERTIFICATE-----Generated at Sun Apr 6 04:49:56 2025 by rpki-client