$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/1c39427b-80c8-32ff-8bb0-f56d213c3879.roa File: 1c39427b-80c8-32ff-8bb0-f56d213c3879.roa (raw, json) Hash identifier: H7s5CjrS9pzx6ODa/Jz9c05hoMHa50228lRCBp6rhcg= Subject key identifier: 1C:85:03:DD:97:95:9D:C4:27:75:2C:27:35:CC:8C:E5:E3:A2:F3:EC Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Certificate serial: 010D0C9F43285848A40EE01716C116B641E38300 Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/1c39427b-80c8-32ff-8bb0-f56d213c3879.roa Signing time: Thu 23 Jan 2025 14:29:26 +0000 ROA not before: Thu 23 Jan 2025 14:29:26 +0000 ROA not after: Wed 23 Apr 2025 13:29:26 +0000 asID: 16509 IP address blocks: 198.145.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:0e:e0:17:16:c1:16:b6:41:e3:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Validity Not Before: Jan 23 14:29:26 2025 GMT Not After : Apr 23 13:29:26 2025 GMT Subject: CN=20cbd6eb-992a-438e-9a4a-3576efe9e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:6c:38:81:f9:aa:69:50:1b:e7:83:2f:78: ea:40:82:b4:ee:27:a1:11:97:25:bc:71:aa:49:22: 9f:8b:11:6e:14:78:a4:42:3d:d9:67:4e:c5:19:71: 79:81:b9:ea:15:b8:99:a5:49:02:c9:29:87:f3:04: f4:0a:fd:bd:bb:f9:4a:97:ae:b9:c0:47:15:69:94: 02:00:33:f1:ca:63:ec:a9:a7:4d:5a:b9:65:b2:53: c8:58:1c:e8:75:e7:13:3a:c5:42:19:36:80:2b:5f: 86:6e:3a:d5:63:d1:e5:df:5e:19:bb:9a:99:29:ba: 4b:cc:fd:44:f4:5a:77:60:34:67:9b:25:a8:42:5b: b9:21:e4:ba:ff:ef:56:2c:23:42:37:f4:70:4a:f2: 92:dd:40:7c:8a:54:94:8e:9b:51:de:e2:9f:72:d6: d4:81:e0:8b:c4:ab:4d:5c:a9:a0:f3:89:f6:7a:27: be:d3:fd:7a:15:25:56:1c:65:68:78:c1:38:8f:db: 93:83:0f:44:6e:e1:26:47:04:81:39:a5:1e:be:98: 50:a1:d5:e0:43:29:ca:64:3d:c2:47:82:ab:01:36: a1:68:af:04:aa:5f:0e:7e:48:f6:49:86:ad:d9:ff: 43:88:00:4b:b6:b8:d5:bc:e1:ae:70:e3:43:54:6f: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:03:DD:97:95:9D:C4:27:75:2C:27:35:CC:8C:E5:E3:A2:F3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/1c39427b-80c8-32ff-8bb0-f56d213c3879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl X509v3 Authority Key Identifier: keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer sbgp-ipAddrBlock: critical IPv4: 198.145.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f7:2b:b8:9c:20:a6:4d:dc:4d:b2:f8:57:4c:ed:3f:75:aa: a3:d9:76:ba:52:1e:af:07:1e:80:92:fc:91:2c:e9:61:bb:9b: 1b:2a:ce:05:cf:2d:4e:5e:04:1f:28:cd:3c:4e:c9:6c:7b:82: c7:a6:05:7e:da:d3:ec:a9:a1:44:3f:8a:71:8a:fe:31:04:26: a6:3f:81:ca:61:3a:25:1f:27:44:0c:70:79:69:3c:32:4d:63: f9:17:cc:ef:4b:9b:f9:74:1e:b4:c9:f0:3a:1c:61:db:26:44: 2b:19:36:84:fc:a5:e4:bf:15:a2:c1:79:67:69:22:f5:31:7f: 61:6b:5c:3f:16:f1:84:0b:42:27:37:09:6c:f8:ad:f5:6d:b4: e9:1a:c6:a2:dc:bb:54:1b:40:48:d8:3e:7c:7d:ce:76:11:a7: d6:51:c9:c2:9a:64:95:4a:f3:27:c7:f1:ac:cf:bf:2c:f4:61: f6:7a:fe:3f:ba:71:f6:02:c8:8a:17:34:f4:3f:13:c7:4b:2c: d9:45:73:79:c2:72:1e:31:5c:02:83:01:01:a1:67:7e:35:a6: 6e:b8:3d:5c:72:89:2d:76:cf:23:70:3c:56:a9:a4:95:90:df: 86:9c:c0:3e:46:b2:9c:62:58:93:b1:3c:2c:67:05:9f:1d:83: ac:e7:23:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikDuAXFsEWtkHjgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk MTcwMB4XDTI1MDEyMzE0MjkyNloXDTI1MDQyMzEzMjkyNlowLzEtMCsGA1UEAxMk MjBjYmQ2ZWItOTkyYS00MzhlLTlhNGEtMzU3NmVmZTllMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifdsOIH5qmlQG+eDL3jqQIK07iehEZclvHGq SSKfixFuFHikQj3ZZ07FGXF5gbnqFbiZpUkCySmH8wT0Cv29u/lKl665wEcVaZQC ADPxymPsqadNWrllslPIWBzodecTOsVCGTaAK1+GbjrVY9Hl314Zu5qZKbpLzP1E 9Fp3YDRnmyWoQlu5IeS6/+9WLCNCN/RwSvKS3UB8ilSUjptR3uKfctbUgeCLxKtN XKmg84n2eie+0/16FSVWHGVoeME4j9uTgw9EbuEmRwSBOaUevphQodXgQynKZD3C R4KrATahaK8Eql8Ofkj2SYat2f9DiABLtrjVvOGucONDVG/TPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByFA92XlZ3EJ3UsJzXMjOXjovPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvMWMzOTQyN2ItODBjOC0z MmZmLThiYjAtZjU2ZDIxM2MzODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5 ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3 ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr3K7icIKZN3E2y+FdM7T91qqPZdrpSHq8HHoCS/JEs6WG7mxsqzgXP LU5eBB8ozTxOyWx7gsemBX7a0+ypoUQ/inGK/jEEJqY/gcphOiUfJ0QMcHlpPDJN Y/kXzO9Lm/l0HrTJ8DocYdsmRCsZNoT8peS/FaLBeWdpIvUxf2FrXD8W8YQLQic3 CWz4rfVttOkaxqLcu1QbQEjYPnx9znYRp9ZRycKaZJVK8yfH8azPvyz0YfZ6/j+6 cfYCyIoXNPQ/E8dLLNlFc3nCch4xXAKDAQGhZ341pm64PVxyiS12zyNwPFappJWQ 34acwD5GspxiWJOxPCxnBZ8dg6znIyg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:50 2025 by rpki-client