$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa File: a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (raw, json) Hash identifier: VQ6POHYXogPFnL+G9lIUl/1UTQnYZAHaGSFEbuq4PEc= Subject key identifier: D9:EB:33:AA:D9:9E:C8:82:A3:57:16:1B:01:82:F8:41:A1:15:B0:F4 Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F43285849350E82FD66749576F6A20000 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 399668 IP address blocks: 198.206.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:82:fd:66:74:95:76:f6:a2:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a8a0e495-ee63-471a-9cf1-276b2b277c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:1d:22:e8:f1:26:eb:39:8f:ec:29:7f:c8: 27:a8:4a:a8:2d:13:49:de:01:cf:42:6e:e1:3c:36: 7b:a1:3a:fa:85:c3:af:e6:6a:25:26:35:af:29:2f: 9a:69:a1:f4:20:eb:5a:2b:ac:31:48:c4:a8:15:ea: 38:e2:ce:79:a6:b5:3d:6e:fe:69:7d:92:a7:18:1e: 2a:50:3c:70:1f:c7:61:fe:83:8b:07:56:8c:c8:a4: 25:99:c9:f0:80:c4:f0:57:cf:b8:e5:11:a6:d2:70: 53:c2:d0:01:26:18:df:7d:36:c1:92:58:10:28:11: 6e:4d:0a:d5:7a:2a:ef:1b:b8:5d:b6:de:2f:c6:2b: 9b:37:e5:a6:3f:18:b4:19:69:b3:c0:fa:6f:10:bb: 3b:a8:82:00:b0:eb:42:63:f5:bf:b5:bb:13:06:3c: 32:af:42:9b:80:d3:b9:c7:44:0f:d5:db:ea:a8:b0: 01:8d:56:58:23:c2:15:7d:82:b9:be:c9:94:3e:3d: 4f:7c:4d:ce:03:cf:bb:bd:f8:06:e9:d3:05:da:88: 09:6e:ad:01:49:ef:e6:e3:50:02:e5:df:98:dd:47: e0:eb:01:fb:fe:72:06:25:b0:11:bc:e0:c1:ba:3b: 8a:66:0c:97:19:b9:24:80:40:35:31:8b:f7:23:f1: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:33:AA:D9:9E:C8:82:A3:57:16:1B:01:82:F8:41:A1:15:B0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:a6:21:6f:85:4c:26:52:0c:13:75:2f:5c:dd:72:40:1b:2b: 0e:dd:76:a9:6a:d6:3e:4f:e7:d6:28:84:09:6a:c8:0f:30:01: 4d:15:85:09:f1:3f:b0:d9:4e:09:de:94:88:b9:5f:09:c1:5f: 41:b9:3a:dc:5c:2f:62:ac:d8:8d:bb:cc:26:54:28:18:d9:ec: c3:17:d9:32:16:f2:8b:39:ac:65:4e:db:2c:16:86:53:4d:00: 12:84:e7:a4:62:ec:1b:60:ac:9b:89:7b:24:72:14:92:25:f6: 46:0d:6e:a1:3b:ae:99:77:17:5a:d7:19:eb:06:25:ed:6c:df: 99:bf:2e:be:db:dc:ac:6a:44:b3:b7:6f:67:e3:ed:2e:b9:20: 33:9e:ba:d5:7c:69:68:22:92:ca:00:c8:8d:a4:7c:c1:f9:3c: f1:8f:f7:d2:14:77:0c:46:b5:74:0f:43:d9:ad:aa:af:33:bc: ee:a8:89:c7:f8:22:20:e4:f9:f5:99:20:07:76:f9:46:75:f2: 87:87:ef:f7:09:50:79:86:1a:6e:1a:f7:fa:1b:0f:94:b4:13: b8:69:a1:78:b2:7e:69:f1:ed:48:e1:f8:4d:e6:52:85:65:52: d5:1e:4a:84:ed:28:b3:2a:51:ed:f4:f9:0f:59:9a:af:54:51: 16:ce:34:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DoL9ZnSVdvaiAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YThhMGU0OTUtZWU2My00NzFhLTljZjEtMjc2YjJiMjc3YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiMdIujxJus5j+wpf8gnqEqoLRNJ3gHPQm7h PDZ7oTr6hcOv5molJjWvKS+aaaH0IOtaK6wxSMSoFeo44s55prU9bv5pfZKnGB4q UDxwH8dh/oOLB1aMyKQlmcnwgMTwV8+45RGm0nBTwtABJhjffTbBklgQKBFuTQrV eirvG7hdtt4vxiubN+WmPxi0GWmzwPpvELs7qIIAsOtCY/W/tbsTBjwyr0KbgNO5 x0QP1dvqqLABjVZYI8IVfYK5vsmUPj1PfE3OA8+7vfgG6dMF2ogJbq0BSe/m41AC 5d+Y3Ufg6wH7/nIGJbARvODBujuKZgyXGbkkgEA1MYv3I/EnXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnrM6rZnsiCo1cWGwGC+EGhFbD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvYTg2ZTI1NmItYjRiYi0z YmUwLWFhZjctMjAxZTA2ZTgxYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMumIW+FTCZSDBN1L1zdckAbKw7ddqlq1j5P59YohAlqyA8wAU0VhQnx P7DZTgnelIi5XwnBX0G5OtxcL2Ks2I27zCZUKBjZ7MMX2TIW8os5rGVO2ywWhlNN ABKE56Ri7BtgrJuJeyRyFJIl9kYNbqE7rpl3F1rXGesGJe1s35m/Lr7b3KxqRLO3 b2fj7S65IDOeutV8aWgiksoAyI2kfMH5PPGP99IUdwxGtXQPQ9mtqq8zvO6oicf4 IiDk+fWZIAd2+UZ18oeH7/cJUHmGGm4a9/obD5S0E7hpoXiyfmnx7Ujh+E3mUoVl UtUeSoTtKLMqUe30+Q9Zmq9UURbONGE= -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:23 2025 by rpki-client