$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa File: 0856a966-01ae-37fe-8009-b52a5f3f3096.roa (raw, json) Hash identifier: PMe6HtsbHAQQu2GzMew7XtXKiK4zemRUCFU3S2QWvFM= Subject key identifier: B5:66:44:16:39:69:5A:15:C1:61:6B:7C:11:40:B4:42:15:D1:5D:01 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584953C420BCC7FFBECDB5A6F900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 7029 IP address blocks: 198.20.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:20:bc:c7:ff:be:cd:b5:a6:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a37eb2df-1e09-48a5-ad8d-6075dfb99c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:31:d7:53:60:af:b5:09:b1:ce:65:73:52: b2:a4:82:5e:df:15:0a:69:e7:97:da:a6:98:06:4f: 13:f0:ff:38:14:53:06:4d:d6:0a:9e:d2:db:b4:30: e7:93:8d:1c:88:65:ec:7f:d3:96:ce:84:c0:a7:71: f1:e9:5a:d8:e8:e7:76:59:3b:c1:0d:4e:0a:72:a7: 58:2c:a4:85:ea:b7:2a:24:63:34:6d:59:b0:af:ae: 2f:09:17:a1:4b:ca:09:b0:3c:1c:d4:17:36:ed:9b: fd:f3:e1:c1:cb:bc:9d:cc:c5:6e:9e:b7:91:0d:75: b5:4f:da:87:56:4a:3b:c6:51:22:a8:29:7f:16:cf: b7:49:ca:4e:27:be:85:93:2a:a2:f4:1b:a0:18:24: d3:15:84:b3:3c:c5:d4:43:4e:b4:7c:71:90:59:e9: 98:55:d6:e9:7f:64:3e:0e:d4:b5:a9:85:ce:a1:21: ee:e9:a5:fb:ac:70:64:93:29:22:87:a4:e9:c8:7e: bd:29:ff:f5:ce:29:1d:c7:5b:8b:93:9f:0b:e3:20: fe:5d:56:e8:13:0e:2a:18:55:90:20:d8:87:e3:ee: 23:1b:13:ca:c4:16:1f:63:5c:a8:93:c1:24:24:b1: cc:38:16:b1:ab:86:9f:7d:e0:d0:fa:8c:70:02:54: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:66:44:16:39:69:5A:15:C1:61:6B:7C:11:40:B4:42:15:D1:5D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c3:9d:e2:12:71:b6:e5:4a:e8:19:00:70:eb:82:a4:d0:44: 50:ec:2a:3c:d1:84:be:57:82:8a:c1:b1:40:bc:2a:2f:c4:b0: 5f:08:c9:c5:67:74:2e:9a:c9:ef:cf:f9:38:b7:b0:6f:06:fe: dd:7b:39:42:ad:5a:8a:f3:85:3b:83:94:fc:11:89:89:dc:0c: 04:c9:cf:84:cf:cd:2e:71:c0:3c:06:11:9b:c0:5a:c2:d5:7b: de:e8:50:ab:69:12:dc:fc:72:51:3c:22:a6:74:6e:05:61:a0: e6:b6:7c:bf:26:c9:4b:c1:4b:66:8e:0e:4f:29:a7:39:49:59: c3:9c:b3:34:53:a3:e8:08:f5:8c:13:b7:35:08:8e:b7:cf:ee: 4b:4d:22:8d:2f:7a:b6:6c:d6:b0:4e:5e:10:88:c3:3d:a2:cd: e9:ec:1f:60:e9:f4:35:6f:c7:62:6b:8b:4c:30:51:06:b6:01: 91:e3:cf:7d:b2:c3:8f:1f:ed:4a:ff:8a:d4:38:cb:bb:0a:97: 09:4d:35:af:18:95:25:b6:ca:be:e1:15:26:c7:f3:00:df:6f: d3:1f:5e:0b:ae:6c:0f:eb:f4:06:54:14:16:dd:f4:e3:3c:be: e8:3f:8c:b8:50:e9:78:ab:c7:bc:3a:1c:69:16:02:45:27:1e: fc:1f:4d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCC8x/++zbWm+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTM3ZWIyZGYtMWUwOS00OGE1LWFkOGQtNjA3NWRmYjk5YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU4x11Ngr7UJsc5lc1KypIJe3xUKaeeX2qaY Bk8T8P84FFMGTdYKntLbtDDnk40ciGXsf9OWzoTAp3Hx6VrY6Od2WTvBDU4KcqdY LKSF6rcqJGM0bVmwr64vCRehS8oJsDwc1Bc27Zv98+HBy7ydzMVunreRDXW1T9qH Vko7xlEiqCl/Fs+3ScpOJ76Fkyqi9BugGCTTFYSzPMXUQ060fHGQWemYVdbpf2Q+ DtS1qYXOoSHu6aX7rHBkkykih6TpyH69Kf/1zikdx1uLk58L4yD+XVboEw4qGFWQ INiH4+4jGxPKxBYfY1yok8EkJLHMOBaxq4affeDQ+oxwAlQYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVmRBY5aVoVwWFrfBFAtEIV0V0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDg1NmE5NjYtMDFhZS0z N2ZlLTgwMDktYjUyYTVmM2YzMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjDneIScbblSugZAHDrgqTQRFDsKjzRhL5XgorBsUC8Ki/EsF8IycVn dC6aye/P+Ti3sG8G/t17OUKtWorzhTuDlPwRiYncDATJz4TPzS5xwDwGEZvAWsLV e97oUKtpEtz8clE8IqZ0bgVhoOa2fL8myUvBS2aODk8ppzlJWcOcszRTo+gI9YwT tzUIjrfP7ktNIo0verZs1rBOXhCIwz2izensH2Dp9DVvx2Jri0wwUQa2AZHjz32y w48f7Ur/itQ4y7sKlwlNNa8YlSW2yr7hFSbH8wDfb9MfXguubA/r9AZUFBbd9OM8 vug/jLhQ6Xirx7w6HGkWAkUnHvwfTcQ= -----END CERTIFICATE-----Generated at Sat Apr 5 00:11:44 2025 by rpki-client