$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa File: be96b7e5-94af-357e-b42b-06756e4de524.roa (raw, json) Hash identifier: 8+1oTwMZIAwaQQxoGNAnBwRbnBt6uB3b7vCpR39NDWA= Subject key identifier: 84:5F:00:F6:21:E2:07:B2:B1:DB:71:18:AA:51:32:AD:0E:31:AD:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848FFCC88B4C93D3A8A098D1180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa Signing time: Tue 25 Feb 2025 11:10:08 +0000 ROA not before: Tue 25 Feb 2025 11:10:08 +0000 ROA not after: Mon 26 May 2025 10:10:08 +0000 asID: 30036 IP address blocks: 198.40.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:cc:88:b4:c9:3d:3a:8a:09:8d:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 25 11:10:08 2025 GMT Not After : May 26 10:10:08 2025 GMT Subject: CN=88a3d818-4f61-42c6-a9af-f83aa9a341f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:cb:e2:26:bb:0c:8f:42:66:5a:7e:94:c8: 2d:e7:dd:9f:cb:cc:0c:ec:fc:21:c1:bc:4c:4c:35: ae:6f:10:f3:4b:f6:5f:c2:7f:27:15:8c:75:ea:65: 26:48:f7:bb:8a:52:d9:eb:ea:6c:b8:29:36:6c:64: 73:64:73:a6:40:bb:ac:1a:5f:c4:88:40:3c:77:4e: c7:9d:dd:55:b4:b0:39:04:c2:b9:58:e2:04:39:14: 06:a8:33:20:73:13:f1:bc:0d:00:52:44:2a:4f:5b: d9:c3:0e:33:56:0d:d8:bc:46:a1:0e:72:41:d4:42: ca:b0:38:07:bc:c7:f5:37:7f:2f:03:2c:1e:ab:a7: 8c:e2:4a:00:9d:d7:8f:02:2f:b0:e2:0a:95:46:48: fb:b7:7b:eb:3a:24:9a:c9:68:47:70:a9:12:af:e9: 30:26:c5:25:85:6e:11:81:6c:51:19:9d:e7:95:20: f7:5e:6e:89:7c:4c:18:74:55:ac:0a:d2:e1:7c:5e: d0:5c:a5:21:86:52:85:9d:71:06:23:93:76:08:a7: 5a:be:6e:e5:f5:c4:81:52:08:81:78:d0:3f:b8:1a: f5:43:a2:11:d6:3d:1c:ca:81:03:50:7e:fe:97:53: f6:2b:d8:f9:ba:b9:44:db:73:51:80:ad:25:8d:62: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5F:00:F6:21:E2:07:B2:B1:DB:71:18:AA:51:32:AD:0E:31:AD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6d:2d:68:48:28:0f:30:15:23:4b:56:0c:09:23:23:b7:93: a5:01:15:fc:b9:e5:cc:41:1a:5c:ff:c8:95:f6:ba:82:db:e9: f6:54:dc:31:da:b1:5b:f2:46:7b:eb:c0:76:78:73:6b:55:0f: 39:8e:a4:ed:aa:86:08:f7:c5:a2:4b:e5:d4:e9:e6:76:f3:d7: 4c:3b:f4:c0:fd:de:c7:f9:c2:63:64:61:c0:49:61:c8:89:2a: da:60:31:8d:6f:a2:33:c7:f7:c9:c5:b5:23:8d:f4:70:82:88: e3:db:4a:54:2b:fb:2d:90:b1:60:c7:59:24:11:31:98:00:ee: b5:a9:92:08:a4:d2:c9:fa:dd:aa:a7:c9:d3:0c:07:b5:e7:27: bd:ae:4d:10:1f:c4:4e:01:78:24:13:e0:29:8f:d0:e1:6a:76: c8:6a:65:84:6a:99:e8:47:65:9a:54:60:75:6d:ea:c4:78:5a: 20:bf:c3:16:54:8d:fe:53:bf:22:a2:2f:af:67:8d:ca:37:2d: ce:bb:92:2f:ef:26:81:2e:32:f9:64:53:6d:44:50:b1:18:b4: e3:83:a3:f6:79:06:52:ad:d1:65:4c:4c:d8:ce:47:95:02:7d: ef:0c:89:b1:5d:b5:b5:fd:93:00:5e:51:d2:cb:e5:4b:2b:72: ea:04:27:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/zIi0yT06igmNEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNTExMTAwOFoXDTI1MDUyNjEwMTAwOFowLzEtMCsGA1UEAxMk ODhhM2Q4MTgtNGY2MS00MmM2LWE5YWYtZjgzYWE5YTM0MWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZvL4ia7DI9CZlp+lMgt592fy8wM7PwhwbxM TDWubxDzS/Zfwn8nFYx16mUmSPe7ilLZ6+psuCk2bGRzZHOmQLusGl/EiEA8d07H nd1VtLA5BMK5WOIEORQGqDMgcxPxvA0AUkQqT1vZww4zVg3YvEahDnJB1ELKsDgH vMf1N38vAyweq6eM4koAndePAi+w4gqVRkj7t3vrOiSayWhHcKkSr+kwJsUlhW4R gWxRGZ3nlSD3Xm6JfEwYdFWsCtLhfF7QXKUhhlKFnXEGI5N2CKdavm7l9cSBUgiB eNA/uBr1Q6IR1j0cyoEDUH7+l1P2K9j5urlE23NRgK0ljWL+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRfAPYh4geysdtxGKpRMq0OMa0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU5NmI3ZTUtOTRhZi0z NTdlLWI0MmItMDY3NTZlNGRlNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFtLWhIKA8wFSNLVgwJIyO3k6UBFfy55cxBGlz/yJX2uoLb6fZU3DHa sVvyRnvrwHZ4c2tVDzmOpO2qhgj3xaJL5dTp5nbz10w79MD93sf5wmNkYcBJYciJ KtpgMY1vojPH98nFtSON9HCCiOPbSlQr+y2QsWDHWSQRMZgA7rWpkgik0sn63aqn ydMMB7XnJ72uTRAfxE4BeCQT4CmP0OFqdshqZYRqmehHZZpUYHVt6sR4WiC/wxZU jf5TvyKiL69njco3Lc67ki/vJoEuMvlkU21EULEYtOODo/Z5BlKt0WVMTNjOR5UC fe8MibFdtbX9kwBeUdLL5UsrcuoEJ4o= -----END CERTIFICATE-----Generated at Wed Apr 9 00:08:53 2025 by rpki-client