$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4e1945-c24a-36e0-95da-e7a1ce6ec5da.roa File: 2a4e1945-c24a-36e0-95da-e7a1ce6ec5da.roa (raw, json) Hash identifier: +bcmeIbA0Ps7CArBuMSH0g5BCDKbZpvcPOPEowEOOe4= Subject key identifier: 60:14:00:98:71:CD:74:C9:A7:6E:3A:11:2A:30:1A:AE:6C:58:8B:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CAB624F4A68BB97CB6680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4e1945-c24a-36e0-95da-e7a1ce6ec5da.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 162.151.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:ab:62:4f:4a:68:bb:97:cb:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5482c935-c291-4c26-a234-5b96b60629ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:82:38:82:3b:c6:7b:25:0e:6e:13:25:6b:76: ce:e6:5c:ae:c4:80:49:e9:15:8d:e1:6a:d8:b7:d2: 49:48:22:8e:21:a7:67:2e:3a:88:f9:aa:28:c5:58: 74:5c:72:21:be:5c:6d:94:53:b1:92:f1:76:d0:95: 35:fe:eb:c5:1f:1e:4f:17:3e:28:b3:e1:79:67:e7: c1:97:8c:45:77:b1:fe:ba:fe:93:49:c5:90:19:c6: 91:b6:02:a0:b1:8c:da:db:bd:0b:b7:b0:7b:77:0e: 6d:6f:7b:86:5b:94:ca:ba:68:87:6c:03:f7:f7:6f: fd:45:b6:36:12:33:f8:af:9b:46:5f:0b:1c:dc:f9: f9:7b:c0:4b:f6:7a:17:0b:ed:80:c2:89:0f:f8:1a: 83:62:d1:e3:7c:89:34:4f:a6:8a:0b:a1:55:1e:fa: 60:89:69:fa:90:f7:71:51:57:94:ef:2f:e7:72:c6: 48:a5:95:0c:d1:36:ba:de:09:3e:f5:82:f1:ff:a6: 72:f5:4c:8d:49:a2:4d:b9:2a:52:f2:ca:11:c5:ad: 77:90:a3:2c:69:03:7d:d2:9c:ee:8c:ce:da:ed:1f: 3d:55:3a:f5:a8:50:5f:bd:08:fc:de:14:ae:b1:37: 19:57:36:7e:1a:4d:c3:bd:0f:f1:9a:cc:ec:1e:35: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:14:00:98:71:CD:74:C9:A7:6E:3A:11:2A:30:1A:AE:6C:58:8B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4e1945-c24a-36e0-95da-e7a1ce6ec5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.151.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6a:92:2e:89:9a:55:a6:d9:c6:4d:0a:16:c5:e3:ce:59:c1: d5:21:fa:37:53:b6:6d:b6:b4:27:d0:a6:11:c2:fe:de:e9:9c: f1:be:1d:30:47:27:ac:fd:bf:bd:3c:28:39:c3:6b:45:e6:41: da:3c:77:91:1f:46:60:61:a8:1f:83:39:30:89:16:2c:4a:44: 47:1d:75:aa:7a:06:7b:04:7a:2b:f8:d6:85:2b:2e:91:b2:12: 1e:7a:fb:48:76:53:77:37:1f:dd:b5:b2:37:31:c3:b9:7f:99: f5:0d:db:7a:dc:3c:13:aa:7c:08:0c:70:8e:e8:28:19:1a:cd: c6:7f:9f:ad:da:ac:eb:e1:f5:6f:1e:65:8f:8d:ed:80:47:ec: f7:0c:5a:0e:dc:8e:65:3c:7d:e3:3e:81:74:9a:1e:73:3c:14: ae:53:65:fb:d4:75:5c:5d:44:9e:fa:0d:f0:67:61:c7:bb:85: 22:ca:3f:d8:b9:32:8f:b1:c1:d6:36:a5:00:67:2d:41:22:6e: be:d3:58:e1:2c:46:5b:79:fe:e8:60:8d:4f:ea:be:51:52:4a: dd:28:5b:aa:77:56:38:15:ef:68:8b:5f:41:2f:7f:e8:41:36: f6:a5:98:62:d8:e7:31:54:07:72:33:a6:9d:08:f8:c8:eb:68: e7:73:fb:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebKtiT0pou5fLZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTQ4MmM5MzUtYzI5MS00YzI2LWEyMzQtNWI5NmI2MDYyOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYI4gjvGeyUObhMla3bO5lyuxIBJ6RWN4WrY t9JJSCKOIadnLjqI+aooxVh0XHIhvlxtlFOxkvF20JU1/uvFHx5PFz4os+F5Z+fB l4xFd7H+uv6TScWQGcaRtgKgsYza270Lt7B7dw5tb3uGW5TKumiHbAP392/9RbY2 EjP4r5tGXwsc3Pn5e8BL9noXC+2AwokP+BqDYtHjfIk0T6aKC6FVHvpgiWn6kPdx UVeU7y/ncsZIpZUM0Ta63gk+9YLx/6Zy9UyNSaJNuSpS8soRxa13kKMsaQN90pzu jM7a7R89VTr1qFBfvQj83hSusTcZVzZ+Gk3DvQ/xmszsHjVJzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAUAJhxzXTJp246ESowGq5sWItWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE0ZTE5NDUtYzI0YS0z NmUwLTk1ZGEtZTdhMWNlNmVjNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBopdiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5qki6JmlWm2cZNChbF485ZwdUh+jdTtm22tCfQphHC/t7pnPG+HTBH J6z9v708KDnDa0XmQdo8d5EfRmBhqB+DOTCJFixKREcddap6BnsEeiv41oUrLpGy Eh56+0h2U3c3H921sjcxw7l/mfUN23rcPBOqfAgMcI7oKBkazcZ/n63arOvh9W8e ZY+N7YBH7PcMWg7cjmU8feM+gXSaHnM8FK5TZfvUdVxdRJ76DfBnYce7hSLKP9i5 Mo+xwdY2pQBnLUEibr7TWOEsRlt5/uhgjU/qvlFSSt0oW6p3VjgV72iLX0Evf+hB NvalmGLY5zFUB3Izpp0I+MjraOdz+wU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:46 2025 by rpki-client