$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa File: 1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa (raw, json) Hash identifier: Yz/phE3JkBaW1bM/wDzb8rhsWRkr+PKCHl1pOeQzMtA= Subject key identifier: F6:85:0E:A7:20:94:89:81:90:6E:54:F6:BE:96:FF:DF:40:94:2D:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FFCC54C7ED1EC3B823B4F300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa Signing time: Tue 25 Feb 2025 11:09:43 +0000 ROA not before: Tue 25 Feb 2025 11:09:43 +0000 ROA not after: Mon 26 May 2025 10:09:43 +0000 asID: 30036 IP address blocks: 198.40.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:cc:54:c7:ed:1e:c3:b8:23:b4:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 25 11:09:43 2025 GMT Not After : May 26 10:09:43 2025 GMT Subject: CN=d5b861f4-db82-40b6-a482-6045ef4c198b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:17:d0:de:8c:c3:bc:dd:5d:73:8e:22:1b:75: d5:f8:8e:5d:9f:da:ac:74:c5:b4:0a:2c:4c:23:c9: 8b:e0:5f:f8:5b:59:45:5b:ba:85:72:2b:d8:8e:c1: 98:18:99:2a:a4:7c:c6:73:f9:a9:ec:a0:41:b0:c7: 35:65:2a:1e:d5:cb:a9:4b:67:f3:09:83:bf:ab:65: c7:55:8f:0b:b3:e5:b2:a7:de:5b:74:4b:f1:9b:71: 1f:60:63:07:e4:e9:fc:4c:84:fb:9a:d7:9a:a6:b1: 67:a7:8b:f1:16:d6:57:62:45:10:30:11:23:d4:01: b8:92:15:f0:69:08:2c:1d:27:d1:07:3b:b9:91:f7: 5e:dd:26:59:9f:b6:3e:5f:cf:2d:68:09:85:18:38: 7a:71:04:53:86:90:cd:b2:dd:de:d5:06:7b:ce:73: a3:6e:d5:9e:5a:50:c4:c4:22:3f:b7:ac:fd:c4:20: 06:ce:67:76:6d:bc:04:b7:7b:2f:19:b2:97:6b:a0: 5e:6a:d2:b9:09:2b:15:7f:81:09:da:5c:a3:62:5c: 34:01:58:1c:28:17:89:40:4a:7a:f4:64:e3:7c:23: fe:87:1e:8b:b0:6f:2c:57:24:07:ea:5e:62:0a:38: b1:35:fe:ca:92:7a:14:34:66:1f:50:33:b8:60:8b: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:85:0E:A7:20:94:89:81:90:6E:54:F6:BE:96:FF:DF:40:94:2D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ac:21:6d:6d:2e:f7:61:a1:0a:3b:55:e1:81:0c:b1:9b:80: 7d:c6:5f:a1:f5:cf:a2:ea:09:cf:be:8e:2c:b0:ce:e7:2a:cf: 8a:3c:7f:22:c8:66:53:6c:5d:a2:71:d2:52:c3:27:cf:2d:fb: d7:f7:d8:86:21:35:97:0f:7c:fe:d3:72:e5:1e:82:ac:73:11: 05:36:02:30:61:6a:87:00:1f:5e:5e:50:93:36:1d:3c:46:1f: a4:6a:18:b7:c1:57:f5:a9:9a:88:49:6d:cf:71:d4:a2:59:a9: 9c:bd:ac:aa:0c:d3:03:de:e8:f4:83:6d:63:0c:b1:f8:64:40: 7a:11:a9:1b:7e:1d:56:55:21:39:bf:b2:12:f2:d1:07:a4:b5: b7:c6:2f:c5:7b:75:14:94:05:b8:b3:6b:d5:ff:0f:f4:98:30: 5a:51:c4:ec:c6:66:1a:05:db:e8:7e:8a:56:39:03:a2:1e:f4: b2:31:16:33:9d:cb:dc:2a:cd:71:61:0c:4c:2d:a3:bd:12:ba: bc:ef:d3:fb:81:06:50:c1:01:5d:9a:93:c6:e3:0e:99:17:cc: 7c:17:2b:24:78:3d:88:8f:4f:12:fb:5c:54:68:2c:fc:c0:bc: 9b:2a:04:5b:03:1f:7c:6c:44:d5:26:64:26:1a:00:51:5f:49: 5b:7b:0b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/zFTH7R7DuCO08wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNTExMDk0M1oXDTI1MDUyNjEwMDk0M1owLzEtMCsGA1UEAxMk ZDViODYxZjQtZGI4Mi00MGI2LWE0ODItNjA0NWVmNGMxOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghfQ3ozDvN1dc44iG3XV+I5dn9qsdMW0CixM I8mL4F/4W1lFW7qFcivYjsGYGJkqpHzGc/mp7KBBsMc1ZSoe1cupS2fzCYO/q2XH VY8Ls+Wyp95bdEvxm3EfYGMH5On8TIT7mteaprFnp4vxFtZXYkUQMBEj1AG4khXw aQgsHSfRBzu5kfde3SZZn7Y+X88taAmFGDh6cQRThpDNst3e1QZ7znOjbtWeWlDE xCI/t6z9xCAGzmd2bbwEt3svGbKXa6BeatK5CSsVf4EJ2lyjYlw0AVgcKBeJQEp6 9GTjfCP+hx6LsG8sVyQH6l5iCjixNf7KknoUNGYfUDO4YIsbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaFDqcglImBkG5U9r6W/99AlC37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWE1ZDlkMGEtM2Q0Yi0z YTA5LWE0NjYtYWFhMTQxZThiMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2sIW1tLvdhoQo7VeGBDLGbgH3GX6H1z6LqCc++jiywzucqz4o8fyLI ZlNsXaJx0lLDJ88t+9f32IYhNZcPfP7TcuUegqxzEQU2AjBhaocAH15eUJM2HTxG H6RqGLfBV/WpmohJbc9x1KJZqZy9rKoM0wPe6PSDbWMMsfhkQHoRqRt+HVZVITm/ shLy0QektbfGL8V7dRSUBbiza9X/D/SYMFpRxOzGZhoF2+h+ilY5A6Ie9LIxFjOd y9wqzXFhDEwto70Surzv0/uBBlDBAV2ak8bjDpkXzHwXKyR4PYiPTxL7XFRoLPzA vJsqBFsDH3xsRNUmZCYaAFFfSVt7C5o= -----END CERTIFICATE-----Generated at Tue Apr 8 23:53:47 2025 by rpki-client