$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa File: eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa (raw, json) Hash identifier: dpKoLGTyaPFZV9Ee1M+ScChfNpk5A3XHwV6k+lqqUCk= Subject key identifier: C2:3A:EB:D2:CA:E8:48:57:E0:1A:C1:8E:EE:85:4A:82:75:1D:AE:DA Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F43285848A400B69E1C045A27E064AC80 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 13627 IP address blocks: 198.186.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:b6:9e:1c:04:5a:27:e0:64:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=5bb9b00b-4a25-4d39-850b-b7fe2bcb41e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:5d:14:31:87:27:76:90:bd:4f:86:b2:f3: 05:81:98:c5:d1:2c:88:44:10:d7:3f:01:cd:ad:7a: a8:94:5b:2f:ed:5c:67:79:3d:10:e0:87:16:ec:52: 63:ef:cf:f2:d0:a1:7c:80:65:07:88:ac:57:f3:4f: 77:0a:62:48:39:b2:d0:0e:dd:c7:56:33:9c:b0:47: 87:64:c9:5e:92:7f:46:04:5b:fe:28:3d:66:07:69: b7:d7:d1:9f:6f:43:ba:93:92:c1:38:68:67:fc:92: 98:e1:14:c6:da:b1:ff:fc:4b:9c:f9:8d:ee:c8:6f: ac:e1:01:fc:a0:f2:b9:a4:0d:2e:63:8e:c7:d8:58: be:bc:2f:ca:36:c9:81:99:9e:12:4c:20:13:e8:25: da:73:0a:bb:4c:58:85:b4:2c:68:64:5c:2a:8b:92: b5:d1:80:7c:8f:bf:e2:47:32:ed:6d:29:8f:a8:50: 3d:b7:72:38:77:9f:8b:d8:71:64:b0:ea:88:f8:13: 8d:8e:74:d2:b1:78:5e:62:b7:ce:ac:97:c9:d2:f0: f6:e4:d3:96:ca:66:b0:50:ed:0a:0b:d6:14:7b:3f: 1d:8f:2a:d2:1b:23:27:47:aa:e5:dc:e9:11:d0:54: 3e:63:70:67:39:d8:a5:3f:eb:07:9c:d7:9a:6a:15: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:EB:D2:CA:E8:48:57:E0:1A:C1:8E:EE:85:4A:82:75:1D:AE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 198.186.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8a:70:dc:be:fe:9d:07:d5:d3:18:f6:86:0d:4d:4f:1a:dd: 07:37:55:97:8d:ac:f8:95:8a:2a:5e:d3:b5:90:69:c2:31:b2: fd:1f:a7:41:c0:1e:83:f7:61:26:f0:82:1a:81:47:ac:86:f8: 28:31:49:9a:4a:b8:0f:04:51:25:9e:0c:00:dd:b0:1f:b7:7f: c1:b8:6c:a4:d5:82:a1:92:f4:bf:8d:4e:9b:84:8e:4c:45:96: 03:ce:c2:44:97:b4:1e:51:31:13:a5:53:48:ec:66:c9:a7:e1: 3a:23:11:0d:43:00:e3:d6:dc:7b:80:2d:15:cf:e8:1c:55:2b: f6:39:02:db:06:3c:58:0c:9d:81:f2:9d:be:2a:58:10:cb:18: 91:04:a3:88:08:90:26:ee:f0:ba:a3:1e:77:4c:5e:bf:45:2a: e5:df:40:2a:77:b5:0f:63:6b:ae:cf:04:84:85:13:7b:ef:07: de:3e:a8:1b:1f:57:af:bc:5c:11:1e:e1:6c:22:ab:d6:33:3f: 4a:24:06:5b:1b:03:07:99:ce:3e:2d:c2:f1:05:32:5d:b3:0c: b2:78:52:3d:6d:67:fd:98:70:89:01:be:dc:22:8c:cb:6c:9f: eb:5d:ab:f6:df:25:7d:1d:47:da:a7:90:74:eb:7e:74:fb:7d: a3:27:2f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALaeHARaJ+BkrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NWJiOWIwMGItNGEyNS00ZDM5LTg1MGItYjdmZTJiY2I0MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpldFDGHJ3aQvU+GsvMFgZjF0SyIRBDXPwHN rXqolFsv7VxneT0Q4IcW7FJj78/y0KF8gGUHiKxX8093CmJIObLQDt3HVjOcsEeH ZMlekn9GBFv+KD1mB2m319Gfb0O6k5LBOGhn/JKY4RTG2rH//Euc+Y3uyG+s4QH8 oPK5pA0uY47H2Fi+vC/KNsmBmZ4STCAT6CXacwq7TFiFtCxoZFwqi5K10YB8j7/i RzLtbSmPqFA9t3I4d5+L2HFksOqI+BONjnTSsXheYrfOrJfJ0vD25NOWymawUO0K C9YUez8djyrSGyMnR6rl3OkR0FQ+Y3BnOdilP+sHnNeaahWFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI669LK6EhX4BrBju6FSoJ1Ha7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvZWIyZTBjOWMtMGZlMi0z Njk5LWE2OGItNjExM2E2ZDBiOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+KcNy+/p0H1dMY9oYNTU8a3Qc3VZeNrPiViipe07WQacIxsv0fp0HA HoP3YSbwghqBR6yG+CgxSZpKuA8EUSWeDADdsB+3f8G4bKTVgqGS9L+NTpuEjkxF lgPOwkSXtB5RMROlU0jsZsmn4TojEQ1DAOPW3HuALRXP6BxVK/Y5AtsGPFgMnYHy nb4qWBDLGJEEo4gIkCbu8LqjHndMXr9FKuXfQCp3tQ9ja67PBISFE3vvB94+qBsf V6+8XBEe4Wwiq9YzP0okBlsbAweZzj4twvEFMl2zDLJ4Uj1tZ/2YcIkBvtwijMts n+tdq/bfJX0dR9qnkHTrfnT7faMnL8M= -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:27 2025 by rpki-client