$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json) Hash identifier: 4ir6F5ujRx9mg3nb8qeoQ0l24v6sQgwsSWdpyqzCoLE= Subject key identifier: 50:11:8B:F5:F7:95:A6:39:26:B4:EF:B8:ED:DB:CE:CD:15:C6:24:60 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F43285849271E7F193D2C0B29C4C59480 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa Signing time: Tue 11 Mar 2025 13:11:48 +0000 ROA not before: Tue 11 Mar 2025 13:11:48 +0000 ROA not after: Mon 09 Jun 2025 13:11:48 +0000 asID: 197537 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:1e:7f:19:3d:2c:0b:29:c4:c5:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 11 13:11:48 2025 GMT Not After : Jun 9 13:11:48 2025 GMT Subject: CN=00b42505-8b90-46bb-aa97-c9c7a002e732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:0d:0a:c0:aa:63:66:6b:83:79:3c:dc:48: d7:9d:b3:b0:de:69:b8:50:4a:8c:fe:6b:b2:cb:c7: 5a:cc:7b:a8:1c:b1:c4:0e:f3:80:5b:86:af:b9:f7: d7:7b:2d:b8:e7:7c:08:a4:e5:bb:0b:83:f1:b1:5f: 9b:38:7d:8c:ba:b1:92:99:71:9f:fd:ce:e5:3e:e5: b9:c2:46:73:89:3d:55:75:52:7e:61:85:7d:07:7c: 39:11:7d:d8:38:78:0b:d6:af:35:77:97:d0:ec:53: 1e:b3:3e:5a:f3:7d:1b:bc:14:28:d9:1e:af:4b:f6: d9:38:b0:1c:d2:1f:c0:4d:42:71:e4:a0:aa:de:d3: 21:df:ba:26:13:f9:15:25:ae:94:65:3f:8a:90:51: ba:d5:db:87:82:b0:4e:af:94:83:9a:79:b3:f4:81: ca:57:63:86:ed:44:72:77:e5:37:f7:d1:c6:90:3a: 51:76:78:da:12:dd:08:7e:89:7a:35:79:d5:fc:3f: 6a:c5:c9:e0:af:87:43:7c:39:3c:0a:3e:86:5f:8c: a3:fa:a9:c4:f6:60:52:8a:94:81:c1:39:20:18:a6: f3:a3:ec:cc:6a:ac:df:11:f6:fe:13:a5:0a:48:4c: 1e:3a:c3:27:a3:4d:79:ce:76:6e:6b:a5:6f:2b:3c: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:8B:F5:F7:95:A6:39:26:B4:EF:B8:ED:DB:CE:CD:15:C6:24:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ca:93:67:2d:e1:a7:ae:46:09:dc:9e:86:0b:27:f6:a2:f4: b0:e7:90:59:6c:70:e4:96:25:4c:ee:43:ef:41:59:3b:3a:cd: 6e:41:3d:bf:62:60:3f:12:b8:e2:c5:4b:9d:7b:c5:a8:f9:3c: e4:fb:aa:7d:ef:06:62:e9:fd:4e:62:4a:55:88:67:30:59:28: 6b:f7:11:b3:51:cd:ba:cc:8b:37:23:a3:63:2c:53:91:80:e5: 41:70:4f:92:41:ed:1b:56:47:4d:b8:82:c6:c7:02:3a:0f:7d: 56:62:c4:60:da:99:11:ee:ce:54:82:7b:e8:68:08:dc:bb:a4: 3a:04:fa:31:91:7b:84:9b:cf:95:fe:de:0f:05:ac:3a:01:28: 44:2b:07:0a:cf:03:89:dd:5f:16:3e:92:a8:9a:f6:06:fa:5f: fe:b8:a9:6a:df:3c:77:a8:8c:80:5d:a3:88:3d:91:b7:eb:01: 3d:08:01:c3:f0:48:8f:37:a2:f3:90:20:4e:b6:91:4b:fa:1a: 14:b7:60:2d:b1:83:a2:0f:d5:82:8a:3a:1e:5b:d0:6e:c4:62: 59:65:9b:51:de:01:5d:d1:fc:fe:4b:5a:bf:24:9f:a2:a0:06: 03:81:61:f3:ef:14:5a:50:2c:b5:8e:38:99:95:d4:d3:37:15: 16:de:10:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEknHn8ZPSwLKcTFlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDMxMTEzMTE0OFoXDTI1MDYwOTEzMTE0OFowLzEtMCsGA1UEAxMk MDBiNDI1MDUtOGI5MC00NmJiLWFhOTctYzljN2EwMDJlNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshINCsCqY2Zrg3k83EjXnbOw3mm4UEqM/muy y8dazHuoHLHEDvOAW4avuffXey2453wIpOW7C4PxsV+bOH2MurGSmXGf/c7lPuW5 wkZziT1VdVJ+YYV9B3w5EX3YOHgL1q81d5fQ7FMesz5a830bvBQo2R6vS/bZOLAc 0h/ATUJx5KCq3tMh37omE/kVJa6UZT+KkFG61duHgrBOr5SDmnmz9IHKV2OG7URy d+U399HGkDpRdnjaEt0Ifol6NXnV/D9qxcngr4dDfDk8Cj6GX4yj+qnE9mBSipSB wTkgGKbzo+zMaqzfEfb+E6UKSEweOsMno015znZua6VvKzyp+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFARi/X3laY5JrTvuO3bzs0VxiRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjFiZjUxMTMtZTU1Yi0z N2Y3LWFkYzktOGNkODdhZjAxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnKk2ct4aeuRgncnoYLJ/ai9LDnkFlscOSWJUzuQ+9BWTs6zW5BPb9i YD8SuOLFS517xaj5POT7qn3vBmLp/U5iSlWIZzBZKGv3EbNRzbrMizcjo2MsU5GA 5UFwT5JB7RtWR024gsbHAjoPfVZixGDamRHuzlSCe+hoCNy7pDoE+jGRe4Sbz5X+ 3g8FrDoBKEQrBwrPA4ndXxY+kqia9gb6X/64qWrfPHeojIBdo4g9kbfrAT0IAcPw SI83ovOQIE62kUv6GhS3YC2xg6IP1YKKOh5b0G7EYlllm1HeAV3R/P5LWr8kn6Kg BgOBYfPvFFpQLLWOOJmV1NM3FRbeELY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:09:22 2025 by rpki-client