$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa File: bd9188e8-ffee-390e-87df-a36c96325cad.roa (raw, json) Hash identifier: txiz/jT0h+S4OnzewlHUi+jiCp6JK6MaZC9RZ74hu+s= Subject key identifier: 1F:90:4B:9A:35:C6:73:EA:51:B1:F5:9C:97:AC:D7:E7:F2:79:33:C1 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F43285849FE0FEFF5642F550280F96180 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 398872 IP address blocks: 198.134.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ef:f5:64:2f:55:02:80:f9:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=a9421ab7-d322-4876-a2ea-ec779f8fc407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ff:9a:9d:a2:0f:21:2f:dc:d7:2e:8e:02:c7: ab:b4:e0:d6:9a:df:85:e2:6b:d8:f2:48:13:31:dc: c5:cd:ca:9d:2d:ab:59:bf:3a:3e:ee:1f:5d:cb:d7: 01:20:52:0b:7e:b0:7a:63:cb:8b:3e:03:51:5c:a5: 64:71:bd:41:69:bf:e9:75:33:cc:4c:63:d8:c3:fa: d7:ab:bb:48:0c:97:93:78:92:27:c3:82:f3:cb:15: dd:6b:a1:b1:00:6d:f2:48:72:32:d0:14:39:aa:fe: d9:7a:ae:f9:32:ad:e4:00:3a:8f:fd:d4:6a:7f:b7: 57:10:7b:34:dc:1f:24:eb:a4:f8:35:af:1e:db:d9: 4d:ac:3b:74:39:66:df:0f:37:41:f0:5f:c5:53:f0: bb:b0:dd:7d:95:3b:1f:62:86:a8:98:0a:53:85:e2: 5f:83:94:81:5c:c1:ad:ad:5d:c2:51:dd:3b:e4:e4: 81:8c:40:bf:96:0c:85:0a:71:e2:b7:3f:90:6f:b8: 5b:51:c9:bf:50:da:5d:3c:3f:13:f9:da:45:93:0b: e6:9a:88:94:fe:45:f7:fe:1c:55:4b:19:60:8d:57: b0:d8:a5:b8:7f:fe:bf:c8:e6:1a:39:fb:2e:cf:e9: 56:25:08:b5:04:3a:cb:a9:dc:cd:ed:24:9d:c9:e2: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:90:4B:9A:35:C6:73:EA:51:B1:F5:9C:97:AC:D7:E7:F2:79:33:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 198.134.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:82:b7:76:d1:c3:19:8c:ca:c7:7d:9c:ac:d9:23:6f:5a:08: 50:42:0e:00:a4:5c:69:d3:fa:b5:40:a5:f6:d4:f3:8c:b9:ff: b6:c1:ad:a4:8f:fa:2d:05:c1:aa:6e:3f:34:55:59:3a:e1:29: 80:b6:8c:8b:24:9c:65:93:f0:85:07:70:f8:71:b0:2c:ab:8a: ae:f0:41:20:58:17:ef:27:a9:9b:88:6e:84:cb:fe:bd:5e:0f: b6:29:18:1a:29:5d:1a:f2:66:8f:66:2a:e1:d0:8b:7c:b2:f7: 1d:5c:dd:f0:b7:68:41:63:0d:52:fe:ff:cd:a3:51:33:8c:d3: 96:c4:d1:f0:e2:76:8d:0c:48:89:11:e9:94:5f:37:03:75:a2: f9:7a:f7:28:65:c9:cc:1c:26:1e:45:20:43:81:23:a7:4b:d2: 70:a0:e7:f7:5f:9d:10:22:a9:7a:ee:23:3a:51:17:a6:b6:c1: 1a:52:8d:c5:1c:da:15:90:4e:fa:ff:23:eb:23:e2:3a:8d:cd: 3f:3a:38:29:a7:0a:ee:a9:76:59:58:22:76:a7:9d:7a:b6:5e: 46:05:65:bd:ea:70:42:2e:42:57:81:25:e7:b1:dd:65:5d:6f: 34:eb:91:7b:46:7f:59:66:b0:23:f0:a8:a9:ed:0b:94:6f:95: 8e:3d:0c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+/1ZC9VAoD5YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YTk0MjFhYjctZDMyMi00ODc2LWEyZWEtZWM3NzlmOGZjNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv+anaIPIS/c1y6OAsertODWmt+F4mvY8kgT MdzFzcqdLatZvzo+7h9dy9cBIFILfrB6Y8uLPgNRXKVkcb1Bab/pdTPMTGPYw/rX q7tIDJeTeJInw4LzyxXda6GxAG3ySHIy0BQ5qv7Zeq75Mq3kADqP/dRqf7dXEHs0 3B8k66T4Na8e29lNrDt0OWbfDzdB8F/FU/C7sN19lTsfYoaomApTheJfg5SBXMGt rV3CUd075OSBjEC/lgyFCnHitz+Qb7hbUcm/UNpdPD8T+dpFkwvmmoiU/kX3/hxV SxlgjVew2KW4f/6/yOYaOfsuz+lWJQi1BDrLqdzN7SSdyeIKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+QS5o1xnPqUbH1nJes1+fyeTPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvYmQ5MTg4ZTgtZmZlZS0z OTBlLTg3ZGYtYTM2Yzk2MzI1Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuCt3bRwxmMysd9nKzZI29aCFBCDgCkXGnT+rVApfbU84y5/7bBraSP +i0FwapuPzRVWTrhKYC2jIsknGWT8IUHcPhxsCyriq7wQSBYF+8nqZuIboTL/r1e D7YpGBopXRryZo9mKuHQi3yy9x1c3fC3aEFjDVL+/82jUTOM05bE0fDido0MSIkR 6ZRfNwN1ovl69yhlycwcJh5FIEOBI6dL0nCg5/dfnRAiqXruIzpRF6a2wRpSjcUc 2hWQTvr/I+sj4jqNzT86OCmnCu6pdllYInannXq2XkYFZb3qcEIuQleBJeex3WVd bzTrkXtGf1lmsCPwqKntC5RvlY49DK8= -----END CERTIFICATE-----Generated at Tue Jul 1 01:17:08 2025 by rpki-client