$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c01ec7c8-3024-3f5d-a64d-dd3a1094e7ac.roa File: c01ec7c8-3024-3f5d-a64d-dd3a1094e7ac.roa (raw, json) Hash identifier: DZi3PiHkVnHuCxgkppJur6YOz3X748TJaR4wjkHohJs= Subject key identifier: A9:E1:01:B3:03:42:EA:AD:39:AC:DE:58:85:BD:86:D8:6C:21:69:94 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858487325BCE1F467462AA08A2940 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c01ec7c8-3024-3f5d-a64d-dd3a1094e7ac.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 7029 IP address blocks: 198.20.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:bc:e1:f4:67:46:2a:a0:8a:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=74bdcf46-2d1a-4d6d-b9b6-c58bee6fc9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:18:e3:4d:15:ce:19:60:f7:eb:03:c8:a4: fd:8e:bf:b2:99:60:e9:50:6c:3b:de:3a:62:82:08: 37:d7:6a:79:4e:09:a2:23:db:3c:2c:81:ee:74:95: 3e:64:84:ed:6a:f4:6f:69:c7:ef:7b:5d:53:00:79: d1:4a:08:57:60:fb:62:b7:85:7d:4e:69:69:98:79: 63:38:4b:fd:93:f6:9a:5f:07:b0:71:bb:05:ff:08: e1:6b:64:cc:fe:61:bb:72:cb:63:3d:44:6c:e1:e4: dd:70:23:d7:e3:91:e1:1a:18:b5:d9:c1:fa:c6:a0: e8:80:65:c3:37:66:eb:1a:e3:12:31:b7:e5:ff:29: 3c:4a:e9:3a:fe:87:f7:25:79:67:98:42:e4:0b:28: c5:2d:65:b9:46:a3:cb:72:15:13:38:82:d8:da:c0: 95:43:a7:f2:65:5d:31:14:8a:14:f5:26:1d:9c:a7: 1c:c9:08:d3:e1:e5:c4:53:b2:05:72:05:c9:f6:5b: 2e:34:8c:90:2f:2c:00:c5:af:93:ea:38:57:0c:5f: 03:d2:84:57:63:49:31:bc:90:ce:61:97:57:bf:be: ad:8e:a6:cb:87:bd:61:eb:7c:6a:5b:a7:7d:bd:c2: 7b:8e:34:9d:d5:9b:1a:43:2e:8a:cf:f6:f4:8a:81: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:01:B3:03:42:EA:AD:39:AC:DE:58:85:BD:86:D8:6C:21:69:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c01ec7c8-3024-3f5d-a64d-dd3a1094e7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:16:da:32:9a:72:ca:6f:9e:37:e5:60:b4:13:50:92:d5: 3c:1a:5e:9e:04:bc:53:4f:10:09:cf:a5:61:cb:46:d9:e7:14: 52:06:02:37:4d:e1:8e:69:6b:e9:23:5f:22:aa:95:8e:01:02: 2e:55:db:40:a1:00:21:a7:33:f4:b7:b1:9b:d1:29:c1:29:4a: 73:d8:a0:b1:c9:2a:b6:8f:c2:77:4f:28:67:18:31:be:60:e8: 17:7d:69:eb:e1:24:d5:d4:10:68:aa:b6:bd:06:4d:74:c6:28: 4e:69:13:5d:b9:98:92:fd:3e:20:7e:42:fd:88:d2:68:49:c3: f1:74:22:59:b4:24:40:54:44:11:0b:4f:37:e0:74:71:61:47: 47:41:98:58:b7:ea:13:1a:db:00:49:82:2c:d9:69:9c:54:51: fd:eb:f2:b6:c4:14:30:7a:d6:85:29:f8:e8:67:94:0a:8e:9f: b7:25:57:f0:0d:83:33:87:8d:ac:4f:18:f7:85:00:1d:0c:9c: 7d:3e:a7:8e:69:8f:b6:3c:44:e5:fa:9e:a7:44:4d:90:33:73: cf:8d:89:b2:6d:72:0f:2e:f4:55:91:c1:e7:81:0e:8b:ca:b9: a8:1e:83:9e:94:41:b8:bb:a5:ef:e3:c9:12:4d:1a:93:eb:f3: 5f:7a:e3:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbzh9GdGKqCKKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk NzRiZGNmNDYtMmQxYS00ZDZkLWI5YjYtYzU4YmVlNmZjOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL4Y400Vzhlg9+sDyKT9jr+ymWDpUGw73jpi ggg312p5TgmiI9s8LIHudJU+ZITtavRvacfve11TAHnRSghXYPtit4V9TmlpmHlj OEv9k/aaXwewcbsF/wjha2TM/mG7cstjPURs4eTdcCPX45HhGhi12cH6xqDogGXD N2brGuMSMbfl/yk8Suk6/of3JXlnmELkCyjFLWW5RqPLchUTOILY2sCVQ6fyZV0x FIoU9SYdnKccyQjT4eXEU7IFcgXJ9lsuNIyQLywAxa+T6jhXDF8D0oRXY0kxvJDO YZdXv76tjqbLh71h63xqW6d9vcJ7jjSd1ZsaQy6Kz/b0ioEkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnhAbMDQuqtOazeWIW9hthsIWmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzAxZWM3YzgtMzAyNC0z ZjVkLWE2NGQtZGQzYTEwOTRlN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXMFtoymnLKb5435WC0E1CS1TwaXp4EvFNPEAnPpWHLRtnnFFIGAjdN 4Y5pa+kjXyKqlY4BAi5V20ChACGnM/S3sZvRKcEpSnPYoLHJKraPwndPKGcYMb5g 6Bd9aevhJNXUEGiqtr0GTXTGKE5pE125mJL9PiB+Qv2I0mhJw/F0Ilm0JEBURBEL TzfgdHFhR0dBmFi36hMa2wBJgizZaZxUUf3r8rbEFDB61oUp+OhnlAqOn7clV/AN gzOHjaxPGPeFAB0MnH0+p45pj7Y8ROX6nqdETZAzc8+NibJtcg8u9FWRweeBDovK uageg56UQbi7pe/jyRJNGpPr819648k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:08 2025 by rpki-client