$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/4197acd6-1432-3319-babe-3a616a1afcaf.roa File: 4197acd6-1432-3319-babe-3a616a1afcaf.roa (raw, json) Hash identifier: Qkbd/a/4qgcx57ikDhFOOUwKF/BKlnWG2WiwqrkDb/A= Subject key identifier: 69:9D:6B:00:E8:7A:51:CF:DA:A0:17:0C:24:50:09:48:22:61:57:00 Certificate issuer: /CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f Certificate serial: 010D0C9F4328584902EC14A69585D54BB715D43C Authority key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/4197acd6-1432-3319-babe-3a616a1afcaf.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 55082 IP address blocks: 198.135.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:14:a6:95:85:d5:4b:b7:15:d4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=1f10d04c-d24d-43e9-8d9f-f971485c2934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:9f:ba:f1:ae:fa:a6:0d:1e:a2:53:6a:65: f1:d4:fa:c4:a0:e9:db:69:19:3d:f6:58:f2:55:f5: 56:b1:55:ff:4c:30:2b:b4:f0:e8:85:49:28:53:20: ec:54:53:fc:1f:1f:2a:52:05:18:72:06:34:37:44: a9:ae:54:8f:0b:cf:24:95:2b:9f:0e:b9:40:53:f5: d4:c8:9d:7c:03:29:b5:53:d4:ec:12:a4:ce:14:8c: 0a:d4:e4:e0:29:ba:df:04:d5:36:b7:1d:49:91:ed: 5e:a8:7a:c4:60:87:28:ef:94:72:6c:d6:08:79:01: c1:27:31:f6:33:9f:aa:90:e0:58:35:c7:41:86:00: 83:95:fe:a3:c9:0c:db:bd:cc:2e:ae:98:58:02:d9: b8:bd:a2:c5:95:e7:b4:da:25:0a:1d:c8:04:75:08: aa:96:49:a5:ce:08:91:a4:f9:18:1b:36:2f:f5:d0: 21:b7:e1:dd:45:12:fd:75:0e:da:e2:31:89:24:6c: 6e:82:6a:46:5b:e6:62:9b:5d:68:4a:b7:c4:19:5a: 85:52:38:ff:38:a8:62:53:c5:7e:b8:0d:44:7d:80: 97:06:87:05:3c:01:5c:e3:96:ce:bd:e4:09:02:8a: 09:ee:0c:9d:43:dc:76:fe:70:bf:8d:cf:79:c2:d9: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:6B:00:E8:7A:51:CF:DA:A0:17:0C:24:50:09:48:22:61:57:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/4197acd6-1432-3319-babe-3a616a1afcaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl X509v3 Authority Key Identifier: keyid:9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer sbgp-ipAddrBlock: critical IPv4: 198.135.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:89:4c:3e:b8:5f:b3:55:a3:a1:15:db:96:d7:90:97:48:88: c0:6c:4a:c9:67:f2:28:be:76:6d:5a:80:dc:10:ed:50:50:9f: 19:31:04:93:8a:74:ae:43:0f:51:69:47:d5:e0:2d:57:0f:53: 1d:c9:ed:4a:a2:4b:68:b8:01:ac:51:77:92:27:35:fe:22:a9: f5:0b:ad:7e:d6:02:7f:03:8b:10:26:22:eb:8f:b7:b4:c3:02: 35:70:8c:03:30:fb:8f:58:6c:68:59:d0:ba:db:5a:c4:be:ca: 3e:c0:aa:bc:f4:90:10:16:bf:c5:39:0d:3e:69:1f:4d:68:c1: b0:a4:0d:43:cf:6a:5d:27:e6:d8:8a:65:eb:af:03:a9:71:4f: 80:00:57:d0:31:d2:44:ec:58:c6:88:84:e6:f5:c2:23:89:58: 91:2c:11:35:dc:33:1f:95:48:f4:9a:e8:e1:52:3b:57:a4:46: c8:2a:61:f6:cc:ab:57:e3:4c:b5:ae:e3:17:44:b4:5b:45:df: d9:0b:d5:8f:19:d9:dd:9c:07:4e:53:ab:50:0d:dd:02:2d:0a: 04:bd:73:92:fc:d5:b6:4f:ea:ae:77:5a:de:60:de:51:11:2a: 26:e4:d1:fb:da:58:12:ab:9f:98:aa:5f:b1:b5:08:fe:7c:65: f3:de:d4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BSmlYXVS7cV1DwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYzYWUyMTEtMWM2Yy00ZTk4LTljYWEtOWU0YTlhMzg2 YjNmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MWYxMGQwNGMtZDI0ZC00M2U5LThkOWYtZjk3MTQ4NWMyOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfifuvGu+qYNHqJTamXx1PrEoOnbaRk99ljy VfVWsVX/TDArtPDohUkoUyDsVFP8Hx8qUgUYcgY0N0SprlSPC88klSufDrlAU/XU yJ18Aym1U9TsEqTOFIwK1OTgKbrfBNU2tx1Jke1eqHrEYIco75RybNYIeQHBJzH2 M5+qkOBYNcdBhgCDlf6jyQzbvcwurphYAtm4vaLFlee02iUKHcgEdQiqlkmlzgiR pPkYGzYv9dAht+HdRRL9dQ7a4jGJJGxugmpGW+Zim11oSrfEGVqFUjj/OKhiU8V+ uA1EfYCXBocFPAFc45bOveQJAooJ7gydQ9x2/nC/jc95wtndyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmdawDoelHP2qAXDCRQCUgiYVcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjNh ZTIxMS0xYzZjLTRlOTgtOWNhYS05ZTRhOWEzODZiM2YvNDE5N2FjZDYtMTQzMi0z MzE5LWJhYmUtM2E2MTZhMWFmY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWYzYWUyMTEtMWM2Yy00ZTk4LTlj YWEtOWU0YTlhMzg2YjNmLzFmM2FlMjExLTFjNmMtNGU5OC05Y2FhLTllNGE5YTM4 NmIzZi5jcmwwHwYDVR0jBBgwFoAUngILC8OLpgzhOHuszDAjMZzQjSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjNhZTIxMS0xYzZjLTRlOTgtOWNhYS05ZTRh OWEzODZiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxof5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2JTD64X7NVo6EV25bXkJdIiMBsSsln8ii+dm1agNwQ7VBQnxkxBJOK dK5DD1FpR9XgLVcPUx3J7UqiS2i4AaxRd5InNf4iqfULrX7WAn8DixAmIuuPt7TD AjVwjAMw+49YbGhZ0LrbWsS+yj7Aqrz0kBAWv8U5DT5pH01owbCkDUPPal0n5tiK ZeuvA6lxT4AAV9Ax0kTsWMaIhOb1wiOJWJEsETXcMx+VSPSa6OFSO1ekRsgqYfbM q1fjTLWu4xdEtFtF39kL1Y8Z2d2cB05Tq1AN3QItCgS9c5L81bZP6q53Wt5g3lER Kibk0fvaWBKrn5iqX7G1CP58ZfPe1KI= -----END CERTIFICATE-----Generated at Sun Apr 6 10:55:25 2025 by rpki-client