$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15243669-c19d-3041-b027-008c90f8ad1e.roa File: 15243669-c19d-3041-b027-008c90f8ad1e.roa (raw, json) Hash identifier: pQF68p0RAA/7ijiJWqfCbgv3+BxVPXn2JzazhN0Qahw= Subject key identifier: 44:54:00:82:4D:22:49:52:83:38:3D:13:DE:26:2D:34:A5:9A:05:61 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584953C44622CCA37461564EB6D0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15243669-c19d-3041-b027-008c90f8ad1e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 198.3.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:46:22:cc:a3:74:61:56:4e:b6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=bc1615c9-ac00-4c81-83f2-abfafa76758c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:4a:90:b9:db:11:72:47:76:3e:40:5d:0e: 5f:fa:b0:76:fb:93:f9:bb:82:cd:0d:73:a2:d5:3e: f1:04:5a:39:71:29:8c:5a:75:1b:ea:6c:20:75:cb: 44:d7:55:fa:28:1c:4a:6f:56:75:6b:a3:a2:7c:75: 29:89:69:ac:cc:3c:a7:35:04:e3:a0:3a:01:02:ec: be:d9:86:a6:da:2f:1f:11:ec:f6:b7:19:13:eb:c0: 91:7e:c5:86:f2:36:f9:9a:b6:9e:38:29:44:8d:6b: 6b:d8:83:44:e9:26:a8:b2:69:6c:8a:47:75:7b:f4: bb:b5:93:00:a8:cb:15:ef:7c:e9:1f:b2:68:ad:46: c3:32:b1:3e:02:b4:50:df:a2:22:57:b0:8d:a7:87: 3e:58:00:69:76:bd:08:69:3e:9d:6a:56:f7:1a:bc: e6:dd:7c:af:16:fb:b4:b6:5f:a9:53:39:f9:98:88: 0b:fc:a5:e3:10:85:88:b5:c0:bd:8c:33:e5:8c:c5: 38:2c:da:bb:9f:3f:b4:36:7b:d1:a2:c7:97:b9:7b: 7a:43:df:41:9d:e2:e7:ac:77:e9:94:f1:46:cc:b7: 12:a9:6c:01:0a:45:6a:3d:8b:06:07:3f:da:ec:f7: 13:d0:2e:d7:d6:dc:dc:7e:b3:95:08:bb:6d:fa:33: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:54:00:82:4D:22:49:52:83:38:3D:13:DE:26:2D:34:A5:9A:05:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15243669-c19d-3041-b027-008c90f8ad1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.3.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:64:51:b6:54:60:e2:8d:4b:d8:81:e8:4f:70:2d:ed:8b:dd: f9:20:70:d7:7c:cc:03:2c:a4:03:c7:d9:d9:91:8b:51:f9:65: 8b:67:ab:51:ed:bc:25:8a:8c:fb:cd:b9:fd:97:b1:b5:38:3d: b6:13:ab:e9:16:e4:9c:77:50:9b:77:6b:c2:18:11:f5:37:91: 36:76:10:24:d7:bf:e8:de:d8:95:8a:89:f8:40:ee:74:2c:46: a5:c8:cb:96:46:b0:07:a1:dc:b1:92:76:02:21:9f:9d:7e:c6: 4d:50:f0:48:27:96:67:9c:3f:19:54:aa:bc:2e:35:54:5a:f3: 44:fe:f1:6d:65:e5:8a:c7:39:8a:db:45:d2:a3:4f:f6:c2:a3: 3e:5d:04:71:97:68:38:1e:8b:f1:3a:84:6b:17:44:40:26:09: fa:0c:c8:05:72:0e:09:dc:3f:30:ab:65:54:1d:f5:a2:90:4b: 20:39:54:32:9a:c9:27:c9:8b:c4:78:f2:43:8d:dd:fe:f2:4c: 6f:90:ff:df:cf:60:68:2a:22:81:e8:4b:2b:1e:f4:d5:4c:a4: b9:a9:ef:9d:7f:c5:8c:ab:8b:dd:5c:96:dc:54:40:61:cd:b1: 22:a2:60:f9:1c:6f:d3:ba:f5:ca:03:06:99:ed:27:e8:85:6f: b3:bd:ab:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEYizKN0YVZOttAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YmMxNjE1YzktYWMwMC00YzgxLTgzZjItYWJmYWZhNzY3NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEhKkLnbEXJHdj5AXQ5f+rB2+5P5u4LNDXOi 1T7xBFo5cSmMWnUb6mwgdctE11X6KBxKb1Z1a6OifHUpiWmszDynNQTjoDoBAuy+ 2Yam2i8fEez2txkT68CRfsWG8jb5mraeOClEjWtr2INE6Saosmlsikd1e/S7tZMA qMsV73zpH7JorUbDMrE+ArRQ36IiV7CNp4c+WABpdr0IaT6dalb3Grzm3XyvFvu0 tl+pUzn5mIgL/KXjEIWItcC9jDPljMU4LNq7nz+0NnvRoseXuXt6Q99BneLnrHfp lPFGzLcSqWwBCkVqPYsGBz/a7PcT0C7X1tzcfrOVCLtt+jMoKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERUAIJNIklSgzg9E94mLTSlmgVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTUyNDM2NjktYzE5ZC0z MDQxLWIwMjctMDA4YzkwZjhhZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxgMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5kUbZUYOKNS9iB6E9wLe2L3fkgcNd8zAMspAPH2dmRi1H5ZYtnq1Ht vCWKjPvNuf2XsbU4PbYTq+kW5Jx3UJt3a8IYEfU3kTZ2ECTXv+je2JWKifhA7nQs RqXIy5ZGsAeh3LGSdgIhn51+xk1Q8EgnlmecPxlUqrwuNVRa80T+8W1l5YrHOYrb RdKjT/bCoz5dBHGXaDgei/E6hGsXREAmCfoMyAVyDgncPzCrZVQd9aKQSyA5VDKa ySfJi8R48kON3f7yTG+Q/9/PYGgqIoHoSyse9NVMpLmp751/xYyri91cltxUQGHN sSKiYPkcb9O69coDBpntJ+iFb7O9q+c= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:26 2025 by rpki-client