$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa File: a869d388-8367-3ca6-b27c-a77b7ecce0da.roa (raw, json) Hash identifier: aQTZb7+9omAQ7ARWiLlsnIXpHJPZoMb6rCvOtt3TY2c= Subject key identifier: 95:52:5F:66:DC:14:16:8E:75:59:C8:22:C2:70:8F:D2:27:33:1D:58 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F43285848E16BE2E9B1AAAB7C821BDA00 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 20177 IP address blocks: 198.248.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e2:e9:b1:aa:ab:7c:82:1b:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=aa67d0ec-f66d-432b-9da7-ffa6ca0bc614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:55:fe:b0:63:77:31:1a:11:58:3c:b5:db: 2c:7e:40:60:45:73:37:ce:af:7f:b1:3d:aa:a7:c7: a7:4a:bc:3c:39:6b:48:8b:79:6a:90:6c:b4:f0:98: c5:15:55:44:ba:ea:9a:f6:e2:94:3b:1e:10:f0:b0: 54:6c:68:79:d1:51:81:2e:8f:01:20:98:56:96:ee: a3:e9:36:f8:11:05:d6:34:90:e7:35:97:b7:c6:4d: d1:4f:42:78:77:ad:eb:70:b2:cd:bb:13:b1:c3:dc: ee:9e:d2:16:1c:c2:ac:52:9a:8f:82:9d:85:80:f8: bd:d4:cb:22:92:7d:e9:35:4f:b1:63:11:69:b2:b4: 56:0c:10:78:67:9b:65:76:6f:af:78:9b:bb:d9:0e: 9c:6f:60:b6:2e:b7:8a:42:0e:01:8c:e5:a0:3d:7c: bf:ec:b8:a9:89:fe:50:02:8f:1a:09:50:9a:b3:3b: 6f:f3:e5:94:2c:0c:d5:d6:69:76:32:59:5a:27:8a: e3:54:2b:26:ad:b7:30:27:f3:13:72:03:3c:ee:97: 02:b9:07:d4:b7:57:9d:db:d4:70:4e:47:7b:b1:4c: bf:d1:30:25:e8:95:44:cf:e5:5e:5b:b9:99:73:64: 00:d8:df:2d:6a:70:ec:23:b9:17:92:a6:ac:d8:f9: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:52:5F:66:DC:14:16:8E:75:59:C8:22:C2:70:8F:D2:27:33:1D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:53:84:32:80:4c:5e:93:91:d8:67:dc:40:45:3b:bd:bc:8f: 60:92:ff:3b:8c:06:de:4b:60:85:e7:16:8e:1e:16:5f:10:c6: ef:8f:20:9a:1c:43:03:ce:4e:69:33:6e:7a:f8:26:14:81:6c: a0:f6:c5:5b:b2:bc:98:88:56:f6:39:f3:fa:b2:ea:35:21:17: 6d:df:46:6e:27:cc:7a:25:0a:77:b6:b5:42:df:ac:db:10:bb: af:ff:ba:cf:fc:cb:1f:f7:fc:e3:0e:3c:aa:15:f3:d8:09:c0: 40:1b:41:97:df:b7:46:7e:54:d3:d1:aa:a3:de:40:d9:5d:00: 79:7e:be:28:25:28:30:2e:ba:c7:c0:69:9a:b7:0f:70:01:29: ae:70:86:11:c7:c9:17:a7:83:87:8a:26:b6:34:8d:da:44:48: bd:81:bf:9e:43:30:fe:2b:54:72:58:74:3a:d7:be:a7:f1:52: ca:fd:4d:d6:f1:4c:d4:4d:f5:4b:cd:79:54:99:8b:80:9d:2b: fd:1c:bc:db:9a:86:e1:90:a1:a3:8c:14:9a:a7:bd:44:6f:4b: 76:6c:76:67:8d:16:17:a4:64:69:fe:c4:70:40:f6:91:2c:02: 44:08:bf:9e:b8:35:6c:2f:08:01:92:0a:64:80:39:60:73:c3: c7:a1:4e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+LpsaqrfIIb2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YWE2N2QwZWMtZjY2ZC00MzJiLTlkYTctZmZhNmNhMGJjNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXtV/rBjdzEaEVg8tdssfkBgRXM3zq9/sT2q p8enSrw8OWtIi3lqkGy08JjFFVVEuuqa9uKUOx4Q8LBUbGh50VGBLo8BIJhWlu6j 6Tb4EQXWNJDnNZe3xk3RT0J4d63rcLLNuxOxw9zuntIWHMKsUpqPgp2FgPi91Msi kn3pNU+xYxFpsrRWDBB4Z5tldm+veJu72Q6cb2C2LreKQg4BjOWgPXy/7Lipif5Q Ao8aCVCasztv8+WULAzV1ml2MllaJ4rjVCsmrbcwJ/MTcgM87pcCuQfUt1ed29Rw Tkd7sUy/0TAl6JVEz+VeW7mZc2QA2N8tanDsI7kXkqas2PkrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVSX2bcFBaOdVnIIsJwj9InMx1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYTg2OWQzODgtODM2Ny0z Y2E2LWIyN2MtYTc3YjdlY2NlMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvgHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9ThDKATF6Tkdhn3EBFO728j2CS/zuMBt5LYIXnFo4eFl8Qxu+PIJoc QwPOTmkzbnr4JhSBbKD2xVuyvJiIVvY58/qy6jUhF23fRm4nzHolCne2tULfrNsQ u6//us/8yx/3/OMOPKoV89gJwEAbQZfft0Z+VNPRqqPeQNldAHl+viglKDAuusfA aZq3D3ABKa5whhHHyReng4eKJrY0jdpESL2Bv55DMP4rVHJYdDrXvqfxUsr9Tdbx TNRN9UvNeVSZi4CdK/0cvNuahuGQoaOMFJqnvURvS3ZsdmeNFhekZGn+xHBA9pEs AkQIv564NWwvCAGSCmSAOWBzw8ehThg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:10 2025 by rpki-client