$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa File: 79f5998a-9c67-3633-9ae6-274922dd2fed.roa (raw, json) Hash identifier: Q/+NFqv/QbXQsKlHwV2LlUuFxyfN4yVdO2XKmLauYTY= Subject key identifier: CF:95:68:0F:FD:DE:59:99:3F:31:47:FE:C1:88:5A:DD:84:D9:5C:C8 Certificate issuer: /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Certificate serial: 010D0C9F4328584943BDD76058F15768EC2D1E80 Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa Signing time: Fri 21 Mar 2025 19:15:29 +0000 ROA not before: Fri 21 Mar 2025 19:15:29 +0000 ROA not after: Thu 19 Jun 2025 19:15:29 +0000 asID: 16509 IP address blocks: 198.51.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:bd:d7:60:58:f1:57:68:ec:2d:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Validity Not Before: Mar 21 19:15:29 2025 GMT Not After : Jun 19 19:15:29 2025 GMT Subject: CN=7ed55542-78ab-4802-a543-1efa680bd095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:03:3a:ee:52:6c:35:2e:d5:0a:30:cb:71: c7:99:88:b4:6d:3b:0f:1d:62:b5:82:2d:ed:ce:68: 49:86:7b:21:2f:b4:f8:ca:be:d8:f1:3f:16:f1:22: cd:3e:97:10:5f:84:c9:20:b5:04:ca:df:43:6d:d0: c0:2e:9d:4e:93:70:3e:5c:f8:8e:cd:53:25:b3:a3: 36:47:30:3c:10:f4:99:1a:6f:ac:ed:d3:d6:2c:f9: 83:4c:63:03:ea:8f:a7:28:cf:3c:fa:8b:98:92:eb: 44:e1:aa:a3:fe:d9:3d:3b:74:ec:33:7e:18:e9:d0: 52:0d:67:b0:26:ad:c5:53:bb:85:c4:ba:c8:32:83: cd:7c:4d:2c:95:04:0d:88:0a:67:46:ec:4b:5c:b9: 73:71:ab:fc:21:23:8b:13:0e:76:72:25:40:47:92: ea:05:39:7f:71:59:75:dc:df:c4:97:df:cc:f2:c5: 48:e7:94:dc:35:40:9e:18:82:db:61:e7:c8:fa:8b: bc:ea:3e:c9:a8:1d:13:44:6a:a2:e6:a9:31:e0:c8: 05:be:a8:3f:fc:d5:6f:9a:af:d1:12:4e:97:df:90: d7:8f:ee:51:88:91:21:aa:b0:d8:5c:1f:6d:6f:e1: d2:e4:03:2a:25:ea:51:22:a3:84:77:b1:de:54:d7: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:95:68:0F:FD:DE:59:99:3F:31:47:FE:C1:88:5A:DD:84:D9:5C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl X509v3 Authority Key Identifier: keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer sbgp-ipAddrBlock: critical IPv4: 198.51.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d6:e7:59:cb:18:0c:c0:85:cf:44:a6:91:50:bc:66:2d:af: 85:f7:aa:f3:4b:0a:47:5a:f6:ad:fc:3f:34:68:73:e9:a1:f9: 31:9e:90:93:5b:6a:a0:f5:4f:e6:45:0a:d3:d4:7f:5a:a9:0d: fc:9a:5e:0a:d8:8b:ca:2c:f7:42:ab:91:72:41:84:9a:da:56: 98:fd:2e:bd:52:04:28:35:ad:45:21:7e:e3:52:0b:9d:09:97: 43:43:1b:d8:36:b0:96:d4:38:6e:44:97:21:8b:ec:78:8e:5d: 25:d2:ba:5a:a1:41:d7:73:d6:e5:72:c3:09:17:c7:be:f7:16: 7b:66:f7:e4:d8:5e:39:d3:08:eb:72:3b:46:20:8b:b3:7c:7e: 54:5c:2f:3b:c7:45:2d:2b:3c:39:28:6a:cf:bb:7a:8a:f8:99: da:4c:43:c3:6e:5f:e9:7b:9c:19:9a:42:89:5e:61:5e:66:28: ca:25:1d:4d:df:f7:5f:a8:df:ae:e9:6b:82:97:4f:f5:dc:9d: 27:a9:86:d9:37:21:e2:14:49:fd:e1:30:fe:87:aa:5d:9e:ee: 4f:eb:32:40:6a:a7:5e:4e:92:db:13:f9:29:8a:d3:99:2d:de: 14:dc:e5:3a:9b:6d:61:8a:34:c9:a4:c1:a7:1e:a3:61:25:bd: ea:4a:1d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDvddgWPFXaOwtHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzYjA0YTMtYjdjMS00YTAzLTk0MjctYzFmMDNkODEw ZDM4MB4XDTI1MDMyMTE5MTUyOVoXDTI1MDYxOTE5MTUyOVowLzEtMCsGA1UEAxMk N2VkNTU1NDItNzhhYi00ODAyLWE1NDMtMWVmYTY4MGJkMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF0DOu5SbDUu1Qowy3HHmYi0bTsPHWK1gi3t zmhJhnshL7T4yr7Y8T8W8SLNPpcQX4TJILUEyt9DbdDALp1Ok3A+XPiOzVMls6M2 RzA8EPSZGm+s7dPWLPmDTGMD6o+nKM88+ouYkutE4aqj/tk9O3TsM34Y6dBSDWew Jq3FU7uFxLrIMoPNfE0slQQNiApnRuxLXLlzcav8ISOLEw52ciVAR5LqBTl/cVl1 3N/El9/M8sVI55TcNUCeGILbYefI+ou86j7JqB0TRGqi5qkx4MgFvqg//NVvmq/R Ek6X35DXj+5RiJEhqrDYXB9tb+HS5AMqJepRIqOEd7HeVNc8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+VaA/93lmZPzFH/sGIWt2E2VzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mZjNi MDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYwM2Q4MTBkMzgvNzlmNTk5OGEtOWM2Ny0z NjMzLTlhZTYtMjc0OTIyZGQyZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmYzYjA0YTMtYjdjMS00YTAzLTk0 MjctYzFmMDNkODEwZDM4L2ZmM2IwNGEzLWI3YzEtNGEwMy05NDI3LWMxZjAzZDgx MGQzOC5jcmwwHwYDVR0jBBgwFoAUSeUP+OY4sjhthGnSv2dCtv0jCVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mZjNiMDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYw M2Q4MTBkMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjO/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrW51nLGAzAhc9EppFQvGYtr4X3qvNLCkda9q38PzRoc+mh+TGekJNb aqD1T+ZFCtPUf1qpDfyaXgrYi8os90KrkXJBhJraVpj9Lr1SBCg1rUUhfuNSC50J l0NDG9g2sJbUOG5ElyGL7HiOXSXSulqhQddz1uVywwkXx773Fntm9+TYXjnTCOty O0Ygi7N8flRcLzvHRS0rPDkoas+7eor4mdpMQ8NuX+l7nBmaQoleYV5mKMolHU3f 91+o367pa4KXT/XcnSephtk3IeIUSf3hMP6Hql2e7k/rMkBqp15OktsT+SmK05kt 3hTc5TqbbWGKNMmkwaceo2ElvepKHYE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:40 2025 by rpki-client