$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa File: d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa (raw, json) Hash identifier: UPsV786qxqR652zTLcGwCuA7gqOtDqI4nFafjvyYifc= Subject key identifier: 8A:4A:E3:23:AF:BC:E3:37:64:55:E7:48:DC:80:24:A7:C7:92:D1:03 Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F43285848AF2B7D154CDED0D54068D390 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18943 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7d:15:4c:de:d0:d5:40:68:d3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=62148af3-48f1-4e33-aa9c-8e564950668b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:15:31:b0:39:b6:e5:8a:73:82:1c:a6:69: c0:bc:1b:2c:85:36:7b:14:15:87:93:7e:27:82:61: f7:74:f8:75:98:f5:d6:94:29:9b:62:89:e9:66:a9: c4:4a:f2:e5:f9:2e:e9:d9:f2:16:4c:43:4a:15:c8: d2:92:7e:63:4d:a5:bc:45:2b:a6:38:cb:e0:3e:9f: f7:68:21:8e:23:44:20:25:06:a8:f9:49:25:bd:d7: 89:20:3c:d7:cc:54:27:71:5e:47:8d:69:36:9a:bb: a8:9a:c2:63:ef:14:4e:00:cf:6d:e3:77:60:7f:14: 30:52:f6:ba:5b:8b:c4:eb:03:f2:0d:ec:43:d0:f8: 1f:c9:0d:ae:87:37:41:e0:8b:bc:6b:3e:89:bd:be: 27:4e:ae:45:53:5a:46:59:50:de:c4:95:1b:ce:aa: b5:15:b1:5d:e8:a7:a9:33:17:14:49:99:6f:ef:46: f6:ce:05:43:11:76:8f:0d:16:9f:d4:fc:99:5d:c6: b7:87:83:e4:c2:2b:ca:ac:fc:bd:13:4b:f5:8d:02: 40:54:83:7e:df:ec:33:05:f7:72:f0:68:dc:22:58: 65:f1:44:fd:73:0c:70:4d:c5:5a:c9:63:50:24:f6: 9a:5f:05:58:b1:51:e2:f9:ef:17:8d:59:16:52:a2: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4A:E3:23:AF:BC:E3:37:64:55:E7:48:DC:80:24:A7:C7:92:D1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:87:7d:9a:24:48:99:15:6e:c7:76:c8:82:6d:6c:e2:84:e7: 14:7d:85:6e:15:78:1a:e0:6b:c5:6e:77:ef:47:78:9e:d0:12: fb:8c:c3:6d:2d:d4:84:26:97:c9:a4:d8:47:4b:fb:28:c5:2d: bf:24:e9:e6:08:10:61:d3:10:af:19:5b:ad:c3:dc:d0:ec:2e: 7b:c7:ed:de:4b:5e:82:c9:0f:63:7f:4d:a5:6c:51:4f:13:6a: d3:2e:b1:92:29:cc:d6:77:34:12:75:54:4b:be:4d:4e:8d:9a: ce:f4:22:d7:f8:ec:7a:85:17:20:d8:9d:4a:83:82:1a:00:6d: f1:0f:6e:a4:4b:0b:1c:61:1d:97:76:e0:d4:ac:8a:20:e4:c1: cf:d4:2e:cc:e0:34:be:65:c8:84:e9:b3:31:ba:34:7e:c3:c6: dd:db:b4:88:a1:c2:61:53:c2:09:e3:ef:ae:97:65:34:00:c2: 1b:b5:cb:81:1d:4e:73:bf:4c:f6:50:f1:7a:be:8f:45:10:b1: fa:1f:e6:e8:3e:1a:73:5a:cf:a1:2c:0f:46:d7:ab:43:50:61: 60:7c:bd:bc:e0:71:88:09:87:79:0c:55:4e:da:4d:6d:03:5f: 2d:5f:a8:e6:79:24:38:3d:70:88:c7:f3:ff:1e:78:ae:56:a6: 37:07:28:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK30VTN7Q1UBo05AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NjIxNDhhZjMtNDhmMS00ZTMzLWFhOWMtOGU1NjQ5NTA2NjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBQVMbA5tuWKc4IcpmnAvBsshTZ7FBWHk34n gmH3dPh1mPXWlCmbYonpZqnESvLl+S7p2fIWTENKFcjSkn5jTaW8RSumOMvgPp/3 aCGOI0QgJQao+UklvdeJIDzXzFQncV5HjWk2mruomsJj7xROAM9t43dgfxQwUva6 W4vE6wPyDexD0PgfyQ2uhzdB4Iu8az6Jvb4nTq5FU1pGWVDexJUbzqq1FbFd6Kep MxcUSZlv70b2zgVDEXaPDRaf1PyZXca3h4PkwivKrPy9E0v1jQJAVIN+3+wzBfdy 8GjcIlhl8UT9cwxwTcVayWNQJPaaXwVYsVHi+e8XjVkWUqKHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpK4yOvvOM3ZFXnSNyAJKfHktEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDgyOGMyMmYtZTNiMy0z YmIxLWIxNjQtOGRjMzBkYTVhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOHfZokSJkVbsd2yIJtbOKE5xR9hW4VeBrga8Vud+9HeJ7QEvuMw20t 1IQml8mk2EdL+yjFLb8k6eYIEGHTEK8ZW63D3NDsLnvH7d5LXoLJD2N/TaVsUU8T atMusZIpzNZ3NBJ1VEu+TU6Nms70Itf47HqFFyDYnUqDghoAbfEPbqRLCxxhHZd2 4NSsiiDkwc/ULszgNL5lyITpszG6NH7Dxt3btIihwmFTwgnj766XZTQAwhu1y4Ed TnO/TPZQ8Xq+j0UQsfof5ug+GnNaz6EsD0bXq0NQYWB8vbzgcYgJh3kMVU7aTW0D Xy1fqOZ5JDg9cIjH8/8eeK5WpjcHKH4= -----END CERTIFICATE-----Generated at Sun Apr 6 13:31:51 2025 by rpki-client