$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa File: bd9188e8-ffee-390e-87df-a36c96325cad.roa (raw, json) Hash identifier: fRapqL4HUZCj0Z6toD6+dexHAfTEKB4BU8xiFNbiOrM= Subject key identifier: 3B:E6:ED:AB:20:A8:C9:21:AC:49:0C:3E:65:AD:F3:96:1C:57:38:E9 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F432858491ED6DF27EA76A1E487921680 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 398872 IP address blocks: 198.134.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:df:27:ea:76:a1:e4:87:92:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=2048c17d-30aa-46ab-885f-7cc893cf2b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:49:0a:01:09:39:b7:ba:a7:ce:8d:19:0a: 13:f4:ab:66:43:e1:d6:27:09:c9:72:50:98:c2:ab: 40:31:41:22:c4:12:91:23:ae:fc:64:0c:f5:26:62: c4:71:d4:e6:24:ee:f9:40:7d:83:b8:62:83:33:92: 1b:0e:75:f4:ff:55:3d:fe:14:ea:18:78:fd:43:43: 42:d5:35:12:2a:f9:f2:c2:8c:3a:80:a6:07:f8:b1: f9:85:1a:ed:d9:8d:c1:d0:50:7b:1e:e4:1b:e3:36: 5d:74:86:8d:7c:37:8b:2e:e8:2c:40:2a:14:a8:9e: e1:e5:5e:db:d6:00:41:c4:c6:a3:e0:d6:c9:29:b4: 56:99:7e:1a:0d:09:3e:25:89:7c:75:e2:8b:eb:0d: 77:97:23:82:ee:57:82:d3:81:e7:c8:d4:70:92:66: 23:21:3c:05:67:de:a5:df:a9:26:64:4f:ca:0f:bc: 93:64:f6:b0:3d:6c:32:0b:fc:0d:9b:f9:ec:c8:d0: cb:d8:b1:26:a6:0b:a6:a3:90:a4:b7:d0:fa:01:13: b6:fe:99:06:80:a4:93:1d:63:0c:9f:4e:51:9f:23: ec:a0:d7:a7:e0:85:bb:f8:e7:e9:a1:3a:4d:3a:50: 2a:0d:55:39:b9:94:bd:e2:53:65:ab:85:84:2c:19: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:ED:AB:20:A8:C9:21:AC:49:0C:3E:65:AD:F3:96:1C:57:38:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 198.134.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:fb:dc:50:fb:dd:b2:b3:a5:dc:8b:65:bf:ac:4c:3a:d7:61: 4f:86:a9:c1:2f:f9:80:34:5a:6d:63:12:1d:6f:02:58:3c:0c: ed:54:9f:ab:96:7e:5c:8e:88:7f:b7:95:0b:77:40:da:d1:e3: 74:d7:ae:46:3d:66:93:c6:6a:23:af:ae:0b:6c:63:15:cd:17: ef:7e:21:2e:35:26:80:9c:20:4f:1d:4a:c6:fa:77:4f:e4:06: 8a:eb:9c:10:0c:0f:df:fa:87:02:85:51:10:cf:16:0b:84:43: 27:83:6e:ff:a4:f9:1a:54:b8:bf:54:3e:ac:99:d3:48:00:fc: b8:63:41:2b:93:2c:7d:f9:58:36:bd:25:b1:f9:a3:d0:3f:52: d8:0a:35:2f:15:2a:7e:3b:c3:bc:77:d2:3f:4d:60:ae:12:52: 75:9c:31:a2:60:11:51:86:be:39:6a:c4:67:a0:4c:5d:85:e9: f3:e7:9b:8f:e6:ba:93:b5:5c:39:9c:7f:64:1c:b9:0a:7e:43: 28:7d:c3:b9:de:17:85:e0:5f:5e:63:56:21:eb:7a:ab:4a:7e: 06:41:a3:f0:31:bb:96:b5:a8:f4:e6:b9:ae:24:3a:97:75:b7: 40:ad:79:e8:4e:f7:66:28:70:42:fd:27:69:36:77:7a:a5:e9: 93:57:06:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t8n6nah5IeSFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MjA0OGMxN2QtMzBhYS00NmFiLTg4NWYtN2NjODkzY2YyYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml9JCgEJObe6p86NGQoT9KtmQ+HWJwnJclCY wqtAMUEixBKRI678ZAz1JmLEcdTmJO75QH2DuGKDM5IbDnX0/1U9/hTqGHj9Q0NC 1TUSKvnywow6gKYH+LH5hRrt2Y3B0FB7HuQb4zZddIaNfDeLLugsQCoUqJ7h5V7b 1gBBxMaj4NbJKbRWmX4aDQk+JYl8deKL6w13lyOC7leC04HnyNRwkmYjITwFZ96l 36kmZE/KD7yTZPawPWwyC/wNm/nsyNDL2LEmpgumo5Ckt9D6ARO2/pkGgKSTHWMM n05RnyPsoNen4IW7+OfpoTpNOlAqDVU5uZS94lNlq4WELBkAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvm7asgqMkhrEkMPmWt85YcVzjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvYmQ5MTg4ZTgtZmZlZS0z OTBlLTg3ZGYtYTM2Yzk2MzI1Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf73FD73bKzpdyLZb+sTDrXYU+GqcEv+YA0Wm1jEh1vAlg8DO1Un6uW flyOiH+3lQt3QNrR43TXrkY9ZpPGaiOvrgtsYxXNF+9+IS41JoCcIE8dSsb6d0/k BorrnBAMD9/6hwKFURDPFguEQyeDbv+k+RpUuL9UPqyZ00gA/LhjQSuTLH35WDa9 JbH5o9A/UtgKNS8VKn47w7x30j9NYK4SUnWcMaJgEVGGvjlqxGegTF2F6fPnm4/m upO1XDmcf2QcuQp+Qyh9w7neF4XgX15jViHreqtKfgZBo/Axu5a1qPTmua4kOpd1 t0CteehO92YocEL9J2k2d3ql6ZNXBsE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:02:46 2025 by rpki-client