$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d7b13dc-f663-331e-9342-fd01a1d52e85.roa File: 5d7b13dc-f663-331e-9342-fd01a1d52e85.roa (raw, json) Hash identifier: wmvijffw7XCJAwjuyIeVjWEstS2/f6g1r2gCmFcjt7o= Subject key identifier: 81:1B:75:E6:E7:64:EF:45:2D:BC:4E:DC:41:48:AF:15:5C:FF:68:9A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858487325BCCF887D69B85235E340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d7b13dc-f663-331e-9342-fd01a1d52e85.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 54600 IP address blocks: 198.20.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:bc:cf:88:7d:69:b8:52:35:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=b5752cc2-3305-4591-8c49-80547bb2f734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:ad:f1:b5:ae:58:97:09:58:64:e3:cb:57: 64:bc:38:27:ad:de:f6:94:bd:12:98:e1:44:7a:6e: 12:5a:ec:0f:75:58:a0:10:70:4c:0b:29:d6:09:33: 73:25:b5:cc:8d:26:a8:bd:b1:ab:2b:f7:a4:52:3f: ec:c9:d6:9b:d4:f7:82:44:45:36:2b:1a:d8:51:b8: 17:7b:e3:b5:91:ff:54:67:24:6b:50:de:7d:12:dd: 11:25:fb:f4:08:0f:64:f0:af:84:ee:8b:67:97:d2: 35:80:72:93:0b:89:61:5f:6b:be:2d:d2:9e:fa:17: e8:bc:bb:fa:81:dd:71:7a:66:fe:01:bf:38:ea:7c: ec:b5:7e:25:a7:37:fd:87:95:64:ff:eb:9b:13:17: 57:92:71:ee:fb:b7:46:a7:18:9a:de:5e:8f:4c:6b: ca:c3:fc:38:e5:45:7a:e6:21:b2:0b:80:73:10:be: 51:42:9a:b6:4a:7d:a6:71:fb:81:42:da:15:82:3d: 4e:2c:ea:1b:df:53:eb:18:88:34:f9:16:4c:38:87: 36:75:89:83:e4:d6:25:84:a8:51:b7:8a:13:f3:78: b9:44:62:ce:d1:31:be:28:53:71:74:e9:18:1b:1d: df:e4:4e:08:a0:0a:39:73:c7:b7:61:2b:8d:49:39: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1B:75:E6:E7:64:EF:45:2D:BC:4E:DC:41:48:AF:15:5C:FF:68:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d7b13dc-f663-331e-9342-fd01a1d52e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:74:39:68:12:03:ac:11:33:9f:b5:2c:d3:3b:f7:1e:cb:bd: 37:b2:40:83:ca:94:d2:2d:54:68:97:0e:73:eb:95:1d:ed:70: d5:e0:d5:c3:ff:7f:6f:8e:74:38:a9:32:0b:3e:d0:64:0a:ec: 45:d3:2f:1f:56:63:ab:b5:e6:c9:d9:93:b5:b0:08:6c:01:74: ff:1a:5d:85:16:a7:b2:63:71:e6:47:80:b0:f7:da:e5:59:1f: 7e:98:84:c1:c9:74:44:a2:34:83:35:f8:c0:2b:37:0b:0a:aa: 0f:76:ca:62:a9:7a:9d:b6:aa:f9:10:51:92:ad:5b:55:88:33: 4a:00:65:06:bb:8d:7d:6e:31:e8:d6:29:93:bf:06:6a:d2:f0: 52:69:6d:2a:97:94:cc:49:50:91:0f:f5:06:b3:05:6b:31:7e: c9:e1:a3:d8:c7:21:e3:12:d1:e4:93:04:a7:cc:db:17:73:98: 2a:c5:3c:a6:ca:27:c7:80:f8:ad:76:a6:f1:51:f9:95:e2:fb: c5:ca:8c:00:76:ad:86:73:7c:8e:c4:9a:2a:50:a5:2c:fb:4c: 72:21:cd:17:22:de:11:85:5e:80:8b:3d:e6:5c:ab:6b:ec:8e: 1a:1a:6a:97:81:11:05:9e:e2:83:c4:b8:ef:bb:c0:54:10:27: b8:73:87:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbzPiH1puFI140AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk YjU3NTJjYzItMzMwNS00NTkxLThjNDktODA1NDdiYjJmNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh2t8bWuWJcJWGTjy1dkvDgnrd72lL0SmOFE em4SWuwPdVigEHBMCynWCTNzJbXMjSaovbGrK/ekUj/sydab1PeCREU2KxrYUbgX e+O1kf9UZyRrUN59Et0RJfv0CA9k8K+E7otnl9I1gHKTC4lhX2u+LdKe+hfovLv6 gd1xemb+Ab846nzstX4lpzf9h5Vk/+ubExdXknHu+7dGpxia3l6PTGvKw/w45UV6 5iGyC4BzEL5RQpq2Sn2mcfuBQtoVgj1OLOob31PrGIg0+RZMOIc2dYmD5NYlhKhR t4oT83i5RGLO0TG+KFNxdOkYGx3f5E4IoAo5c8e3YSuNSTm6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEbdebnZO9FLbxO3EFIrxVc/2iaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWQ3YjEzZGMtZjY2My0z MzFlLTkzNDItZmQwMWExZDUyZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB0OWgSA6wRM5+1LNM79x7LvTeyQIPKlNItVGiXDnPrlR3tcNXg1cP/ f2+OdDipMgs+0GQK7EXTLx9WY6u15snZk7WwCGwBdP8aXYUWp7JjceZHgLD32uVZ H36YhMHJdESiNIM1+MArNwsKqg92ymKpep22qvkQUZKtW1WIM0oAZQa7jX1uMejW KZO/BmrS8FJpbSqXlMxJUJEP9QazBWsxfsnho9jHIeMS0eSTBKfM2xdzmCrFPKbK J8eA+K12pvFR+ZXi+8XKjAB2rYZzfI7EmipQpSz7THIhzRci3hGFXoCLPeZcq2vs jhoaapeBEQWe4oPEuO+7wFQQJ7hzh7c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:50 2025 by rpki-client