$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1493c9ea-7a6a-388b-93df-8b15de964e3e.roa File: 1493c9ea-7a6a-388b-93df-8b15de964e3e.roa (raw, json) Hash identifier: KGNU3xBcuCiPe0EFEI/gLQ25iR6c1+M0197I/hso9nM= Subject key identifier: 98:7D:AF:54:D5:DE:C7:7E:81:8B:8F:D4:1B:00:8C:E9:5F:61:C8:F3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848CC7B8AD642A2C4A43BF40800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1493c9ea-7a6a-388b-93df-8b15de964e3e.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8a:d6:42:a2:c4:a4:3b:f4:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=44e16fb9-84af-4ab3-aa7c-64e4ad0edc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:a9:da:91:50:d5:ff:79:eb:17:90:1c:62: 43:5d:e5:be:90:16:29:a7:ac:3a:c9:e5:7f:0a:69: bd:29:a8:d9:8c:b7:c2:bc:a2:bd:8a:9a:81:85:50: be:5e:a1:db:ef:72:cb:02:f7:55:52:cc:6f:25:c7: 26:d9:ae:23:1b:2e:fe:c0:0f:6b:33:69:47:b7:07: d8:ef:e1:c8:85:4f:64:ff:be:c9:d1:63:6b:8d:83: bf:57:8f:f8:8e:9b:37:60:8f:ed:e4:d0:bd:7e:2e: fc:68:b8:b5:97:bc:d5:0b:92:16:05:ad:17:86:65: 50:f1:0a:96:63:39:b8:10:b8:7b:c8:06:08:84:8c: d7:67:c7:15:6a:0c:92:7c:ce:7f:57:08:32:4b:4c: 04:1f:49:bf:10:f3:65:0a:47:e3:d6:a3:c5:aa:30: bd:b7:50:08:57:6a:38:07:8d:04:a4:1e:05:35:19: 17:b9:ac:ab:33:0e:72:e8:a0:17:3d:2d:7d:7d:34: 3a:87:82:5d:e5:cd:30:0b:82:2b:73:a1:7e:7a:3e: 2d:da:83:2b:5a:8c:9b:27:37:fd:be:ed:65:c9:93: 78:20:f0:87:7a:76:32:42:54:8d:98:5f:6b:dc:e8: 1e:8f:8b:e7:3b:f6:70:7b:f7:de:52:66:c8:10:19: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:AF:54:D5:DE:C7:7E:81:8B:8F:D4:1B:00:8C:E9:5F:61:C8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1493c9ea-7a6a-388b-93df-8b15de964e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d0:c2:6a:7a:77:a0:69:c1:0d:1b:64:5b:b5:e7:65:ba:a3: ab:62:e0:ad:63:13:06:55:ba:cf:45:9a:aa:e5:d4:74:f5:19: 89:ab:b3:6b:d8:7d:54:f4:94:8f:70:42:03:16:d2:a1:fa:5d: b9:20:37:4e:25:5f:09:43:93:98:21:cb:06:1a:99:0a:24:57: 30:8d:49:43:12:a1:6c:be:b9:29:e0:df:88:9a:8c:d8:71:ed: 95:66:f8:a6:0d:15:d7:8e:91:69:d7:e3:e6:75:64:50:18:e5: 28:9e:81:18:62:54:f9:b8:ff:68:00:90:bd:3b:33:ac:b1:ad: d4:bd:7f:28:97:e1:00:ea:6f:b5:83:0b:13:34:e6:44:77:39: af:36:b1:23:0a:37:33:49:85:8e:7d:7a:bd:41:e0:fb:20:28: ca:5a:f5:87:04:27:71:0f:32:64:e6:11:2f:5e:0b:bf:65:b6: 57:f0:5c:98:d1:1a:4c:e0:cb:7f:3c:5c:b9:ba:fc:f9:dc:e6: e1:e1:a4:20:b9:60:44:a3:42:d1:cd:3c:a0:6b:57:05:40:65: fa:90:98:29:8a:23:9b:15:fa:1c:8a:5f:63:99:35:a7:8a:a4: 2f:dc:3d:b9:4c:a7:a7:41:c2:94:d8:18:00:46:46:27:e9:53: 84:80:1f:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjMe4rWQqLEpDv0CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NDRlMTZmYjktODRhZi00YWIzLWFhN2MtNjRlNGFkMGVkYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dSp2pFQ1f956xeQHGJDXeW+kBYpp6w6yeV/ Cmm9KajZjLfCvKK9ipqBhVC+XqHb73LLAvdVUsxvJccm2a4jGy7+wA9rM2lHtwfY 7+HIhU9k/77J0WNrjYO/V4/4jps3YI/t5NC9fi78aLi1l7zVC5IWBa0XhmVQ8QqW Yzm4ELh7yAYIhIzXZ8cVagySfM5/VwgyS0wEH0m/EPNlCkfj1qPFqjC9t1AIV2o4 B40EpB4FNRkXuayrMw5y6KAXPS19fTQ6h4Jd5c0wC4Irc6F+ej4t2oMrWoybJzf9 vu1lyZN4IPCHenYyQlSNmF9r3Ogej4vnO/Zwe/feUmbIEBmRCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJh9r1TV3sd+gYuP1BsAjOlfYcjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTQ5M2M5ZWEtN2E2YS0z ODhiLTkzZGYtOGIxNWRlOTY0ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAvdDCanp3oGnBDRtkW7XnZbqjq2LgrWMTBlW6z0WaquXUdPUZiauza9h9 VPSUj3BCAxbSofpduSA3TiVfCUOTmCHLBhqZCiRXMI1JQxKhbL65KeDfiJqM2HHt lWb4pg0V146Radfj5nVkUBjlKJ6BGGJU+bj/aACQvTszrLGt1L1/KJfhAOpvtYML EzTmRHc5rzaxIwo3M0mFjn16vUHg+yAoylr1hwQncQ8yZOYRL14Lv2W2V/BcmNEa TODLfzxcubr8+dzm4eGkILlgRKNC0c08oGtXBUBl+pCYKYojmxX6HIpfY5k1p4qk L9w9uUynp0HClNgYAEZGJ+lThIAfTA== -----END CERTIFICATE-----Generated at Fri Apr 4 17:28:03 2025 by rpki-client