$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa File: 0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa (raw, json) Hash identifier: +DNVv9NY19E5K4tMYme4D/HqkfKdyZLtFwCpvCpUHW0= Subject key identifier: 5D:03:64:AE:91:CB:18:54:B6:1C:DA:E9:B8:8D:9F:13:F7:4B:53:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17A1B0102E91039FF29D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 198.41.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7a:1b:01:02:e9:10:39:ff:29:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=432b1853-4454-4b48-a6fe-273cd198f516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4d:ba:bd:ff:bb:d1:27:73:4e:8d:cb:57:7e: ca:fb:f8:5f:2a:96:17:c6:ea:e1:f8:2e:50:60:67: f0:1d:83:4c:02:84:48:37:fa:56:d7:af:97:24:db: 9b:8b:4c:d7:b1:0e:eb:9d:b2:7b:a6:c6:d5:00:c2: 3a:0a:6d:af:e9:82:7f:64:5c:c6:bf:52:68:38:7f: f0:73:07:92:97:88:36:5a:25:c4:ce:2f:cd:80:70: a9:a9:29:fa:fa:63:6b:0f:71:21:7b:88:f4:50:be: e4:ba:fc:5b:f0:5a:bf:89:16:04:72:a8:7d:a5:db: 01:1f:6d:6a:00:1f:6b:db:2b:fc:37:37:25:22:9c: 1c:e9:90:56:9b:8c:32:70:b3:7d:20:81:0a:ab:d6: 59:29:e5:d5:40:42:55:1e:fa:7c:83:13:43:e5:6c: 8f:39:cf:fd:78:5f:74:7a:fc:95:8d:cc:5c:29:13: 86:e7:de:c2:14:7d:0b:fa:b5:ad:ef:4e:7b:f0:f2: 83:08:33:07:c1:7b:48:a2:39:e9:28:8b:23:1e:6a: 29:0a:a2:87:b2:4f:e7:4f:56:a0:a8:27:ec:38:79: 2f:ac:df:e0:d1:58:e8:34:57:1a:f5:50:57:fc:01: 8c:77:71:de:31:f7:22:15:0b:25:cd:b3:86:0f:a6: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:03:64:AE:91:CB:18:54:B6:1C:DA:E9:B8:8D:9F:13:F7:4B:53:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f7:2f:0b:1c:89:a2:67:14:a0:67:4a:62:1f:fb:b0:82:a5: e8:36:73:09:8f:8f:b0:22:1b:73:7a:ab:a3:67:84:4f:33:bf: 63:25:55:3e:8f:7d:c7:7c:0d:48:ec:33:12:21:10:80:c2:c6: fd:18:fd:87:40:4a:0c:5f:43:d7:cc:0a:b3:97:3f:32:3e:79: f8:6e:93:2b:c3:de:42:52:d9:b8:68:0c:37:be:ea:d2:d1:d7: 0f:db:94:b3:73:cc:2e:0a:f8:85:88:3a:ec:57:b8:a8:13:18: 73:95:62:ac:63:29:62:b9:03:66:61:ad:96:04:fc:91:15:25: 77:2a:b7:2e:19:ba:fd:23:ee:bc:6d:3b:7f:db:9b:b2:11:a1: d0:b7:76:2c:bf:20:22:9e:fe:fb:4b:7e:13:63:14:87:d1:1e: e6:d1:c3:f4:03:e3:25:a1:01:95:24:72:20:5c:4a:13:40:21: 63:54:18:8d:e4:14:02:67:29:0a:fe:0a:76:3d:38:10:57:26: 08:92:de:3d:1b:0e:9c:ba:78:15:14:40:69:d7:bf:f2:17:90: 07:2c:96:b3:d2:fd:7d:3f:0f:c7:e1:66:5d:36:02:8f:1e:2c: 8e:12:f8:22:70:1a:0f:0b:10:ac:aa:41:d6:0f:c7:f5:19:81: b7:84:d2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XobAQLpEDn/KdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NDMyYjE4NTMtNDQ1NC00YjQ4LWE2ZmUtMjczY2QxOThmNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl026vf+70SdzTo3LV37K+/hfKpYXxurh+C5Q YGfwHYNMAoRIN/pW16+XJNubi0zXsQ7rnbJ7psbVAMI6Cm2v6YJ/ZFzGv1JoOH/w cweSl4g2WiXEzi/NgHCpqSn6+mNrD3Ehe4j0UL7kuvxb8Fq/iRYEcqh9pdsBH21q AB9r2yv8NzclIpwc6ZBWm4wycLN9IIEKq9ZZKeXVQEJVHvp8gxND5WyPOc/9eF90 evyVjcxcKROG597CFH0L+rWt70578PKDCDMHwXtIojnpKIsjHmopCqKHsk/nT1ag qCfsOHkvrN/g0VjoNFca9VBX/AGMd3HeMfciFQslzbOGD6ZScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0DZK6RyxhUthza6biNnxP3S1PiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNmZDZkYjktMTQ5OC0z Y2ZhLWE3M2YtOGEyYjIyYzYxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb3LwsciaJnFKBnSmIf+7CCpeg2cwmPj7AiG3N6q6NnhE8zv2MlVT6P fcd8DUjsMxIhEIDCxv0Y/YdASgxfQ9fMCrOXPzI+efhukyvD3kJS2bhoDDe+6tLR 1w/blLNzzC4K+IWIOuxXuKgTGHOVYqxjKWK5A2ZhrZYE/JEVJXcqty4Zuv0j7rxt O3/bm7IRodC3diy/ICKe/vtLfhNjFIfRHubRw/QD4yWhAZUkciBcShNAIWNUGI3k FAJnKQr+CnY9OBBXJgiS3j0bDpy6eBUUQGnXv/IXkAcslrPS/X0/D8fhZl02Ao8e LI4S+CJwGg8LEKyqQdYPx/UZgbeE0kQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:05 2025 by rpki-client