$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa File: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (raw, json) Hash identifier: 1JRmzjJDAaHP4JZdW2+YmKaxu/eXz1PNMpCKB/5YY+Y= Subject key identifier: 74:2D:FB:D6:CE:48:F7:22:E0:B6:DE:CD:F2:D8:9C:BA:21:A1:FC:A3 Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F432858494CC93FB12DC92173EE37ED80 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 8075 IP address blocks: 198.51.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3f:b1:2d:c9:21:73:ee:37:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=0ab74e42-ce45-40a5-8eb3-51008207d88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:2c:68:e9:43:24:4d:6a:38:c3:ce:44:8b: 77:56:59:66:ec:95:e8:f9:d9:7d:3f:d6:b0:ae:de: d9:20:c7:01:e3:8c:95:7d:6a:0c:f1:46:b5:85:7d: 00:62:b6:08:0a:f4:eb:3b:53:cb:66:c3:90:e8:1a: 28:1e:fb:0d:c5:63:59:3a:18:0e:85:45:47:c1:6f: 72:ed:e4:69:fc:21:d8:39:6b:e1:88:b3:d4:3a:07: d0:06:11:47:e1:e0:1d:20:e6:10:e6:a5:60:9a:ee: f0:35:98:06:62:37:ad:3c:46:c6:77:03:7f:55:20: 2c:bd:48:4d:52:1c:ee:71:ba:a4:e0:36:84:37:a0: a8:72:74:ff:03:c3:db:8e:46:f0:fc:1b:e2:01:52: 58:76:5f:9d:1b:cc:70:8c:7a:61:e7:c7:e3:1c:20: 92:39:fd:d5:45:e9:65:93:2b:3f:d4:54:2a:38:f2: cb:1f:4e:fd:91:46:11:0a:8a:25:2a:36:32:98:70: f6:ed:40:11:3f:ee:74:1a:68:f2:85:46:3c:d8:07: 77:22:bf:f6:10:ac:82:cc:e2:67:f5:c3:5a:e0:29: c5:48:8f:0d:c8:03:c2:24:56:0f:d3:b0:2e:be:08: bd:7a:55:b8:cd:cb:1f:93:83:cc:1d:ea:af:e9:c4: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:FB:D6:CE:48:F7:22:E0:B6:DE:CD:F2:D8:9C:BA:21:A1:FC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: 198.51.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:12:47:9b:e4:bd:94:f9:b0:cc:e1:ee:75:e4:9f:cd:c8:a1: 9f:c0:69:67:00:81:ab:61:6c:09:7f:aa:6c:7b:14:54:94:2c: 50:01:c9:61:f4:ed:47:bf:ff:82:3e:f5:da:88:3e:a1:d3:10: f7:b0:3c:64:b8:23:cc:05:ae:a2:9e:46:06:1c:82:5a:87:65: 28:2d:1e:74:b2:22:7b:69:17:2f:29:63:74:65:69:43:dd:84: 6e:d7:7a:4b:8e:33:40:90:f6:86:85:0f:f4:83:ee:75:13:d5: 3c:16:f9:52:79:14:21:04:ce:3f:6e:4a:0a:37:76:82:e3:ee: 26:37:54:5f:2d:98:fd:31:21:4d:ba:e6:40:3f:cd:74:45:5e: 5c:56:75:4f:77:6f:69:82:df:5b:56:40:30:5a:a6:64:d9:b3: b4:81:87:5d:24:39:0e:46:53:60:36:8d:a6:4f:50:81:66:f8: b4:3b:af:6b:51:74:d8:8d:e3:bc:84:54:02:60:21:65:df:ef: 2f:58:66:38:84:4d:dd:3d:1f:66:17:71:86:a9:fc:bb:fd:83: 65:1d:39:15:fb:52:30:38:0e:94:df:87:16:e3:82:e2:21:28: 13:14:ff:1b:fd:49:ab:ff:c4:0a:f2:b3:93:c4:c5:75:77:95: f3:8f:08:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT+xLckhc+437YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MGFiNzRlNDItY2U0NS00MGE1LThlYjMtNTEwMDgyMDdkODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliAsaOlDJE1qOMPORIt3Vllm7JXo+dl9P9aw rt7ZIMcB44yVfWoM8Ua1hX0AYrYICvTrO1PLZsOQ6BooHvsNxWNZOhgOhUVHwW9y 7eRp/CHYOWvhiLPUOgfQBhFH4eAdIOYQ5qVgmu7wNZgGYjetPEbGdwN/VSAsvUhN Uhzucbqk4DaEN6CocnT/A8Pbjkbw/BviAVJYdl+dG8xwjHph58fjHCCSOf3VRell kys/1FQqOPLLH079kUYRCoolKjYymHD27UARP+50GmjyhUY82Ad3Ir/2EKyCzOJn 9cNa4CnFSI8NyAPCJFYP07Auvgi9elW4zcsfk4PMHeqv6cTPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQt+9bOSPci4LbezfLYnLohofyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvNWU2YzVjMWItMWYxOS0z NDIyLTllODEtZjJmNjA4ZDczOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQSR5vkvZT5sMzh7nXkn83IoZ/AaWcAgathbAl/qmx7FFSULFAByWH0 7Ue//4I+9dqIPqHTEPewPGS4I8wFrqKeRgYcglqHZSgtHnSyIntpFy8pY3RlaUPd hG7XekuOM0CQ9oaFD/SD7nUT1TwW+VJ5FCEEzj9uSgo3doLj7iY3VF8tmP0xIU26 5kA/zXRFXlxWdU93b2mC31tWQDBapmTZs7SBh10kOQ5GU2A2jaZPUIFm+LQ7r2tR dNiN47yEVAJgIWXf7y9YZjiETd09H2YXcYap/Lv9g2UdORX7UjA4DpTfhxbjguIh KBMU/xv9Sav/xArys5PExXV3lfOPCLU= -----END CERTIFICATE-----Generated at Sat Apr 5 00:24:45 2025 by rpki-client