$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa File: be997b55-faec-336a-8acc-c3ba457c6143.roa (raw, json) Hash identifier: MX0IzVT06p2JRchu+G/AmGqrrqcV8xum17LCfSwJlNQ= Subject key identifier: B8:BA:D2:6A:B9:E5:50:52:B4:22:B5:85:4E:CB:41:FF:0C:91:E8:F8 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F432858492A227D7D1295B8F028AAB7E0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa Signing time: Wed 12 Mar 2025 15:07:16 +0000 ROA not before: Wed 12 Mar 2025 15:07:16 +0000 ROA not after: Tue 10 Jun 2025 15:07:16 +0000 asID: 64267 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:22:7d:7d:12:95:b8:f0:28:aa:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 12 15:07:16 2025 GMT Not After : Jun 10 15:07:16 2025 GMT Subject: CN=dcd6a5ab-887b-411b-aac6-653d34b3ac2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:18:71:41:4b:52:73:08:9d:67:b7:c6:dc: c0:1e:19:bb:2a:02:df:58:8d:c6:d7:bb:40:ac:29: b5:41:10:e4:45:61:8a:5a:1c:57:8a:31:43:eb:4a: 62:64:2d:ce:ce:1b:8d:39:38:3d:42:a8:cb:2e:4f: 98:f4:4d:23:b9:bf:3a:f4:7d:ed:84:60:97:ce:92: b9:48:f7:e8:2c:ed:1a:5d:0c:0c:3d:67:75:e1:36: a4:a6:63:df:6f:5c:2f:56:3c:26:67:a9:93:97:df: 74:ea:c0:30:64:ef:77:90:05:1a:c0:73:e3:0e:f4: 7a:d7:38:e3:4a:ea:bc:f0:95:7c:86:c7:ff:51:bf: 9a:2e:d5:41:85:c0:34:8d:09:c2:cf:7f:22:4f:25: 23:72:d0:78:cf:da:11:37:76:a7:1e:c5:0c:1d:0f: b2:c1:b9:88:16:76:a0:aa:18:79:ba:80:ca:cb:e1: 67:a0:82:8d:cd:07:94:5f:6a:f8:7c:0b:44:1f:ab: f8:5e:ca:e4:67:18:a5:f0:05:c0:11:fd:f6:b4:26: e0:b3:cd:7f:5c:c0:02:60:df:f5:ac:23:19:36:e7: b8:15:fb:48:d1:d2:5b:24:3d:88:a1:8f:3d:9e:fe: ec:3b:e2:b1:9f:d1:aa:aa:7e:a1:39:9a:69:5b:82: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:D2:6A:B9:E5:50:52:B4:22:B5:85:4E:CB:41:FF:0C:91:E8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:31:cf:f6:c5:3c:f2:78:ad:cb:80:3e:b3:5a:c0:11:f9:75: 7c:18:f7:56:23:96:17:fa:59:cd:e5:c7:99:92:39:dc:e1:7e: 87:a7:15:2f:aa:6c:d6:7f:f2:ae:1d:7d:65:68:63:3e:53:a4: d5:a7:4b:4d:ed:f7:2d:f3:6e:57:d7:f7:49:bf:42:ed:06:5e: f9:2a:64:43:d1:aa:51:6f:53:37:cb:92:6e:14:ce:14:d3:12: 56:90:26:1f:b9:d3:6e:6e:09:1e:f5:f2:7b:ff:36:de:9f:b6: 50:55:02:37:c1:6c:21:d6:4b:14:8e:b3:49:79:6d:87:99:d6: b2:e4:29:5f:0f:f0:b7:29:37:11:93:f5:90:de:a2:5d:1e:4c: ff:93:be:14:b9:e5:d7:a7:65:ea:af:17:02:4f:7a:f4:2f:d5: d0:c6:17:15:ca:04:9c:7a:e4:df:5c:7d:07:7f:eb:20:45:0a: 1c:ee:4c:91:59:6e:86:fc:30:bd:24:24:0e:5e:07:4a:3d:64: a0:19:67:30:b1:89:00:ed:99:13:33:12:10:6a:a9:37:99:0b: 8b:89:37:d7:40:80:b0:58:22:70:28:1f:65:d7:8a:b4:92:a9: 5a:b9:60:09:72:7c:15:e9:7a:22:9a:d8:62:71:23:91:44:51: 0e:19:e6:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkqIn19EpW48Ciqt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDMxMjE1MDcxNloXDTI1MDYxMDE1MDcxNlowLzEtMCsGA1UEAxMk ZGNkNmE1YWItODg3Yi00MTFiLWFhYzYtNjUzZDM0YjNhYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTAYcUFLUnMInWe3xtzAHhm7KgLfWI3G17tA rCm1QRDkRWGKWhxXijFD60piZC3OzhuNOTg9QqjLLk+Y9E0jub869H3thGCXzpK5 SPfoLO0aXQwMPWd14TakpmPfb1wvVjwmZ6mTl9906sAwZO93kAUawHPjDvR61zjj Suq88JV8hsf/Ub+aLtVBhcA0jQnCz38iTyUjctB4z9oRN3anHsUMHQ+ywbmIFnag qhh5uoDKy+FnoIKNzQeUX2r4fAtEH6v4XsrkZxil8AXAEf32tCbgs81/XMACYN/1 rCMZNue4FftI0dJbJD2IoY89nv7sO+Kxn9Gqqn6hOZppW4JDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi60mq55VBStCK1hU7LQf8Mkej4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmU5OTdiNTUtZmFlYy0z MzZhLThhY2MtYzNiYTQ1N2M2MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0xz/bFPPJ4rcuAPrNawBH5dXwY91Yjlhf6Wc3lx5mSOdzhfoenFS+q bNZ/8q4dfWVoYz5TpNWnS03t9y3zblfX90m/Qu0GXvkqZEPRqlFvUzfLkm4UzhTT ElaQJh+5025uCR718nv/Nt6ftlBVAjfBbCHWSxSOs0l5bYeZ1rLkKV8P8LcpNxGT 9ZDeol0eTP+TvhS55denZeqvFwJPevQv1dDGFxXKBJx65N9cfQd/6yBFChzuTJFZ bob8ML0kJA5eB0o9ZKAZZzCxiQDtmRMzEhBqqTeZC4uJN9dAgLBYInAoH2XXirSS qVq5YAlyfBXpeiKa2GJxI5FEUQ4Z5no= -----END CERTIFICATE-----Generated at Mon Apr 7 13:10:55 2025 by rpki-client