$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa File: 43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa (raw, json) Hash identifier: zAGdARegSkSqAH8AaPNRg2fd7ErGBtNxSvTa9F3TFAU= Subject key identifier: 68:98:50:36:8E:F4:9A:E3:72:5A:55:17:5E:8E:13:E3:62:23:FA:77 Certificate issuer: /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Certificate serial: 010D0C9F43285848A29B4CE960443ADAFCF33BC0 Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 397984 IP address blocks: 198.184.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4c:e9:60:44:3a:da:fc:f3:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=0e485b98-17a5-49d6-bac8-8f5561219c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:10:0b:b4:91:0c:8c:df:96:f2:7f:06:ba: fd:1b:b6:3d:1b:3d:db:e5:e8:d4:2d:cd:0c:62:30: 55:a3:3d:ca:0b:1c:49:98:21:d3:dc:c7:fb:ba:19: cc:53:37:ec:c5:3c:81:37:1f:8b:ce:7d:e9:c0:b3: b9:e2:35:5d:fd:ae:12:d8:b6:ce:d4:15:1a:70:5a: fb:0c:74:9d:31:57:71:4e:fe:c7:35:5a:6a:76:1e: c1:97:7d:b2:4a:5d:e5:aa:ef:3d:c4:60:aa:05:b6: 19:04:9f:b4:c5:0e:e6:1f:6c:47:eb:e0:e9:73:bb: 35:96:54:b0:e9:52:a2:c0:4a:7f:ba:bb:c1:77:1a: 73:5e:08:25:b6:a3:a7:e6:84:22:3e:a5:ed:b5:eb: 1d:9c:46:8f:e3:7b:59:9f:7c:f6:79:b0:04:d5:ce: c3:af:fa:29:ae:52:0d:ff:57:98:f3:d6:fb:36:f8: 5a:22:26:ba:27:c1:c2:3f:88:f1:02:6e:3c:8f:cb: 7c:bb:92:80:9e:7b:e9:e1:fb:98:e1:57:e8:e2:94: d7:81:0c:d9:4b:67:ae:8b:93:17:b0:60:54:0f:40: fd:df:e3:b7:7e:51:2a:5b:9b:79:e7:3d:88:56:33: 0d:d6:9e:a9:b6:8f:cb:66:94:be:95:0d:86:43:75: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:98:50:36:8E:F4:9A:E3:72:5A:55:17:5E:8E:13:E3:62:23:FA:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl X509v3 Authority Key Identifier: keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer sbgp-ipAddrBlock: critical IPv4: 198.184.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6e:0c:55:30:c2:63:fd:67:7a:5f:09:63:71:a9:58:9f:91: c5:23:34:3a:9b:e7:1f:c0:98:db:f3:cd:da:b4:43:fe:99:5f: 92:a9:cb:9f:58:41:87:ad:f0:df:8b:e4:62:2d:4e:5a:40:a0: 6f:04:d7:b6:66:11:6b:a3:c6:f3:b4:44:9d:4f:fa:8c:c4:93: e0:ff:39:7d:0b:c0:a8:e8:cd:26:fd:67:33:f1:aa:5d:9d:05: 65:98:fe:f1:7a:80:6f:cb:f7:ca:fb:32:7f:ca:6b:8d:a0:e4: d3:ef:6e:b9:37:78:8c:b1:67:51:da:21:d1:20:fb:48:fb:c2: 33:27:ab:b8:63:a5:c6:30:a1:4f:2e:92:9a:bd:22:ae:dc:d2: c2:ef:34:8e:6e:a7:c0:4d:5b:18:03:23:ab:78:cb:51:24:c6: b8:c3:f2:fb:6c:b0:f1:15:46:dd:ca:1e:53:5d:7c:f3:c8:ee: 90:3c:a7:d7:e1:c0:c8:31:52:45:e1:b6:8b:b2:b0:bb:ed:f8: fe:ac:2b:8f:ea:df:12:00:9c:62:ae:d9:b6:dd:b4:bc:59:e1: 9b:dc:d5:8c:8d:75:a1:09:0b:be:b2:60:21:8b:ed:13:cc:6a: 3a:7f:75:8b:53:23:be:f9:36:8f:2c:b0:6c:f9:4b:1d:3c:e6: 1d:06:df:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0zpYEQ62vzzO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm NDJlMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk MGU0ODViOTgtMTdhNS00OWQ2LWJhYzgtOGY1NTYxMjE5YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudgQC7SRDIzflvJ/Brr9G7Y9Gz3b5ejULc0M YjBVoz3KCxxJmCHT3Mf7uhnMUzfsxTyBNx+Lzn3pwLO54jVd/a4S2LbO1BUacFr7 DHSdMVdxTv7HNVpqdh7Bl32ySl3lqu89xGCqBbYZBJ+0xQ7mH2xH6+Dpc7s1llSw 6VKiwEp/urvBdxpzXggltqOn5oQiPqXttesdnEaP43tZn3z2ebAE1c7Dr/oprlIN /1eY89b7NvhaIia6J8HCP4jxAm48j8t8u5KAnnvp4fuY4Vfo4pTXgQzZS2eui5MX sGBUD0D93+O3flEqW5t55z2IVjMN1p6pto/LZpS+lQ2GQ3U/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiYUDaO9JrjclpVF16OE+NiI/p3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvNDNlNzg2MzQtZWNhOC0z MTU4LThmYjMtZTNkOWYzYmE1ZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2 ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxriDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAduDFUwwmP9Z3pfCWNxqVifkcUjNDqb5x/AmNvzzdq0Q/6ZX5Kpy59Y QYet8N+L5GItTlpAoG8E17ZmEWujxvO0RJ1P+ozEk+D/OX0LwKjozSb9ZzPxql2d BWWY/vF6gG/L98r7Mn/Ka42g5NPvbrk3eIyxZ1HaIdEg+0j7wjMnq7hjpcYwoU8u kpq9Iq7c0sLvNI5up8BNWxgDI6t4y1EkxrjD8vtssPEVRt3KHlNdfPPI7pA8p9fh wMgxUkXhtouysLvt+P6sK4/q3xIAnGKu2bbdtLxZ4Zvc1YyNdaEJC76yYCGL7RPM ajp/dYtTI775No8ssGz5Sx085h0G37I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:34 2025 by rpki-client