$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa File: 89a846c9-5a33-333a-a489-267263a98c98.roa (raw, json) Hash identifier: KHS8uMIk8M6SBq8dbG8UJ8Wc7ADDWOJFQ9YG0Vco/Vk= Subject key identifier: 24:D2:83:01:2C:EC:F7:18:91:A9:A4:66:77:04:6A:09:59:CD:2E:1C Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584908815B1CA9D464C90F52B590 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 14593 IP address blocks: 198.54.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5b:1c:a9:d4:64:c9:0f:52:b5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=36157520-5bf1-4654-8df9-ececdd5fb0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:fa:7d:a3:0d:87:3d:46:e6:0f:71:71:dc: d8:4d:ce:92:02:7f:e7:96:65:1a:af:9a:ca:ee:1c: 3e:73:94:a7:48:0a:bd:e6:23:16:67:25:9a:23:7a: ec:97:66:81:64:32:f2:63:68:c5:d1:00:ce:85:1d: 00:05:05:e9:a1:89:b4:b6:7f:95:21:5b:da:c7:c4: 43:3b:6d:17:d2:46:d4:af:eb:92:ea:cf:ad:55:89: fc:87:6e:1a:b7:10:13:32:ff:a3:4e:c9:0f:48:01: b6:48:a5:6a:b0:8c:2a:96:25:7b:d5:c1:16:57:c0: 39:34:e2:15:bb:23:88:22:be:09:f6:33:73:39:82: 06:2b:3f:c1:52:4d:a2:f0:ee:28:ce:1e:8b:fb:69: 6f:c6:73:86:eb:04:7a:bc:0a:ea:28:90:3c:2a:a6: c8:6f:46:c6:69:2b:8e:32:98:88:7b:20:87:e5:9d: aa:aa:a0:14:98:78:97:8b:8b:98:34:50:c5:a9:ce: a2:08:13:b7:15:9a:0c:6c:96:d5:b5:0a:37:d4:90: f7:17:1f:d8:53:b9:27:9b:30:e8:eb:51:0c:7f:67: e4:26:cd:36:58:e6:b0:07:d9:70:26:e0:16:6f:5a: 46:b9:9b:7f:83:aa:08:e4:f8:19:ad:ea:e7:64:9c: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:83:01:2C:EC:F7:18:91:A9:A4:66:77:04:6A:09:59:CD:2E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 198.54.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:11:fa:82:04:04:56:80:5f:67:3d:e6:ee:37:62:ef:00:a7: 0a:a5:15:00:f3:97:25:c1:b2:04:41:f8:0a:ab:73:af:b8:c1: 35:4b:b7:37:73:e0:5b:b8:28:70:2a:05:f4:45:ba:ae:85:c7: 67:86:75:71:b8:b8:6f:75:a8:9a:bb:7a:19:29:38:ca:fc:98: bd:4f:71:80:3b:79:fb:0f:ae:61:cb:eb:91:b6:4a:f4:81:f2: db:2b:be:9a:ab:6d:b4:cc:59:42:59:a5:b6:c3:7c:36:4f:2c: b8:9f:e6:25:e1:f3:ef:90:e3:6e:71:0e:7e:f6:2f:22:61:0e: 59:1a:99:16:9f:d0:53:cc:21:f5:ef:f1:2b:08:45:f5:44:ae: f3:a1:96:50:33:ad:90:51:6d:10:c1:53:e0:69:ab:e5:5e:52: af:e5:56:ae:e8:66:bf:0d:c3:20:6c:d5:ca:55:89:ea:ba:32: f2:b9:3e:6f:ba:a6:4a:37:c3:6d:d6:00:23:27:34:84:81:65: 42:68:fa:37:8c:0d:e9:09:5a:14:a9:c2:38:d7:8e:d9:3f:6f: e8:4f:ab:c0:06:98:ae:94:2a:25:34:dd:85:1a:ac:26:85:6c: ca:08:51:ea:69:1b:90:35:90:e3:91:c8:83:93:58:9f:7f:cd: f6:11:a8:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgVscqdRkyQ9StZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MzYxNTc1MjAtNWJmMS00NjU0LThkZjktZWNlY2RkNWZiMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP36faMNhz1G5g9xcdzYTc6SAn/nlmUar5rK 7hw+c5SnSAq95iMWZyWaI3rsl2aBZDLyY2jF0QDOhR0ABQXpoYm0tn+VIVvax8RD O20X0kbUr+uS6s+tVYn8h24atxATMv+jTskPSAG2SKVqsIwqliV71cEWV8A5NOIV uyOIIr4J9jNzOYIGKz/BUk2i8O4ozh6L+2lvxnOG6wR6vArqKJA8KqbIb0bGaSuO MpiIeyCH5Z2qqqAUmHiXi4uYNFDFqc6iCBO3FZoMbJbVtQo31JD3Fx/YU7knmzDo 61EMf2fkJs02WOawB9lwJuAWb1pGuZt/g6oI5PgZrernZJxcxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTSgwEs7PcYkamkZncEaglZzS4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvODlhODQ2YzktNWEzMy0z MzNhLWE0ODktMjY3MjYzYTk4Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMR+oIEBFaAX2c95u43Yu8ApwqlFQDzlyXBsgRB+Aqrc6+4wTVLtzdz 4Fu4KHAqBfRFuq6Fx2eGdXG4uG91qJq7ehkpOMr8mL1PcYA7efsPrmHL65G2SvSB 8tsrvpqrbbTMWUJZpbbDfDZPLLif5iXh8++Q425xDn72LyJhDlkamRaf0FPMIfXv 8SsIRfVErvOhllAzrZBRbRDBU+Bpq+VeUq/lVq7oZr8NwyBs1cpVieq6MvK5Pm+6 pko3w23WACMnNISBZUJo+jeMDekJWhSpwjjXjtk/b+hPq8AGmK6UKiU03YUarCaF bMoIUeppG5A1kOORyIOTWJ9/zfYRqAM= -----END CERTIFICATE-----Generated at Sat Apr 5 13:29:50 2025 by rpki-client