$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa File: 420963fb-a3d2-3813-9896-a813e2840697.roa (raw, json) Hash identifier: 1BM3QgYrTBhZAKv5/a60e/v4vDFmAXEiz9k/TXKIShU= Subject key identifier: 75:FB:85:64:C4:FA:BC:17:DF:69:A5:2A:25:F4:DF:5D:8C:A6:EA:C9 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584944692D5A78649A605CA9BA80 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 2495 IP address blocks: 198.248.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2d:5a:78:64:9a:60:5c:a9:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=2734979d-07a3-4618-a93a-794bd33c8024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:e2:89:90:75:f1:36:45:07:35:cb:e3:38: 34:ce:60:34:98:ae:a0:8f:7c:28:98:83:46:f9:34: 2a:d0:09:56:3b:80:7c:e8:8e:9d:0d:15:22:d7:cf: 0d:41:26:4b:e5:e0:b7:b1:4c:26:e8:3e:7c:81:2d: f5:41:55:f3:29:71:ff:c1:72:7c:22:19:dc:29:03: 30:7b:39:db:46:2e:0b:a4:18:a9:40:69:d6:b9:fd: 62:4b:a1:b1:a5:61:88:8d:ea:b7:35:28:8f:4c:59: 1e:7e:e5:b0:a8:3c:04:d9:6c:25:86:56:fc:a3:54: 15:39:cc:d2:d8:f9:2e:93:04:da:f7:af:8e:d1:1b: 63:33:8a:78:59:7d:05:ec:91:92:bd:c0:d4:91:32: c3:e3:6d:b2:8c:0d:20:8f:ff:8c:1d:49:2b:27:4b: ee:9b:2f:c1:32:4b:44:e0:9b:10:c7:64:55:6f:1d: b2:88:ab:30:4e:0c:e1:68:f5:60:66:a9:91:05:e4: a4:2d:77:6b:1c:a5:19:b8:e9:91:39:3e:19:04:cc: 2c:84:d9:ef:0f:ba:f8:b7:93:4d:74:65:2c:b5:e2: a9:11:a4:8b:df:dd:9a:c8:4a:b3:bf:c8:fa:9b:d2: 10:48:9d:bf:da:eb:0e:b6:ce:ae:16:b8:c5:1d:47: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FB:85:64:C4:FA:BC:17:DF:69:A5:2A:25:F4:DF:5D:8C:A6:EA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:94:e6:a4:d8:df:65:ad:b8:06:1c:e1:41:da:3c:ba:c9:f9: f1:f7:dd:59:8e:49:0c:bd:9c:9e:a1:e7:19:66:e1:9e:15:1f: 96:cd:9c:75:34:a9:52:c8:5b:9f:dd:9f:05:8b:c4:5a:90:19: 90:4a:ed:95:a2:48:ca:6b:a8:f7:06:b0:e0:66:12:d3:23:80: 8b:f9:f0:3e:16:d2:7a:72:df:64:38:31:14:f6:02:7e:4b:c7: 58:0a:e1:78:e4:ef:f5:9b:5e:5c:14:e2:81:ad:97:a4:2c:65: c4:fd:14:81:70:c2:93:05:b5:57:95:ff:50:67:1b:ae:2e:67: 4c:7c:dd:ca:43:24:c4:ad:c2:a7:3d:7a:43:b0:69:1a:ad:fe: 7f:01:09:6e:0f:8a:db:74:ce:34:42:c8:c8:23:c6:6b:8b:62: cd:c4:2c:92:80:e0:22:f0:c9:d8:82:25:c2:70:dd:c8:ce:77: 96:a5:bc:e2:8a:fb:66:a1:79:d3:c3:e4:e9:f6:fc:15:f1:79: e6:06:dc:42:a6:1f:0e:50:8f:7d:9f:c2:72:e5:2f:b0:ae:1c: 75:b2:49:7c:cc:e9:42:f0:d8:fd:c2:fe:4f:63:26:c3:7f:fd: 65:02:9b:12:92:fa:56:18:46:be:2b:fe:4b:21:8e:12:76:cd: fe:31:99:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaS1aeGSaYFypuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MjczNDk3OWQtMDdhMy00NjE4LWE5M2EtNzk0YmQzM2M4MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKLiiZB18TZFBzXL4zg0zmA0mK6gj3womING +TQq0AlWO4B86I6dDRUi188NQSZL5eC3sUwm6D58gS31QVXzKXH/wXJ8IhncKQMw eznbRi4LpBipQGnWuf1iS6GxpWGIjeq3NSiPTFkefuWwqDwE2Wwlhlb8o1QVOczS 2PkukwTa96+O0RtjM4p4WX0F7JGSvcDUkTLD422yjA0gj/+MHUkrJ0vumy/BMktE 4JsQx2RVbx2yiKswTgzhaPVgZqmRBeSkLXdrHKUZuOmROT4ZBMwshNnvD7r4t5NN dGUsteKpEaSL392ayEqzv8j6m9IQSJ2/2usOts6uFrjFHUdp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX7hWTE+rwX32mlKiX0312MpurJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvNDIwOTYzZmItYTNkMi0z ODEzLTk4OTYtYTgxM2UyODQwNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqU5qTY32WtuAYc4UHaPLrJ+fH33VmOSQy9nJ6h5xlm4Z4VH5bNnHU0 qVLIW5/dnwWLxFqQGZBK7ZWiSMprqPcGsOBmEtMjgIv58D4W0npy32Q4MRT2An5L x1gK4Xjk7/WbXlwU4oGtl6QsZcT9FIFwwpMFtVeV/1BnG64uZ0x83cpDJMStwqc9 ekOwaRqt/n8BCW4Pitt0zjRCyMgjxmuLYs3ELJKA4CLwydiCJcJw3cjOd5alvOKK +2ahedPD5On2/BXxeeYG3EKmHw5Qj32fwnLlL7CuHHWySXzM6ULw2P3C/k9jJsN/ /WUCmxKS+lYYRr4r/kshjhJ2zf4xmRI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:10:54 2025 by rpki-client