$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/8e4606df-ba0c-3bfb-b611-7a1b50205487.roa File: 8e4606df-ba0c-3bfb-b611-7a1b50205487.roa (raw, json) Hash identifier: uEwmsVonmisYJGUcNA/84+2V0SEFUezR8f7E5IKSRnU= Subject key identifier: D6:51:C1:28:44:6C:59:2F:A5:4E:CE:87:31:97:B3:15:10:DD:FB:B0 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584905B6B404557C71720A7D1E80 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/8e4606df-ba0c-3bfb-b611-7a1b50205487.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 6079 IP address blocks: 208.99.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b4:04:55:7c:71:72:0a:7d:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=887830df-aa30-41eb-93f0-03d9a4ae4396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:03:4b:b2:f3:f5:31:08:c5:c4:87:03:2b:50: 51:bf:8f:0d:c5:40:70:d2:b1:0d:1d:99:4b:a0:31: b4:82:f6:09:b4:e1:1c:f8:b0:d5:85:dd:69:db:f6: 0b:44:6a:d0:f7:5a:c6:49:8b:ff:56:0d:f7:f8:2e: 5e:66:51:1e:c3:1a:77:ca:a5:61:09:7a:22:a6:1f: 21:e1:25:d3:04:85:5e:15:d8:cd:66:fc:99:12:bf: 16:12:78:82:26:dd:62:89:6d:43:18:67:1a:7f:8b: 93:aa:26:84:5a:95:71:74:19:fe:8a:df:c6:3a:ea: c6:59:fe:9a:13:cb:2f:3f:ac:8a:21:7b:72:a0:d5: de:c8:26:59:a9:39:0f:c7:9d:40:4f:3c:fc:bc:9b: 97:5e:a9:79:36:c5:31:e0:4b:00:e7:ec:76:6e:1f: 31:1e:e4:01:99:89:6e:a8:64:4f:ba:69:f2:fc:b8: 31:18:8e:99:0a:33:b3:40:86:b6:51:64:ce:f9:62: 17:7f:bc:24:45:84:7a:f1:9c:51:35:20:18:fd:07: 94:f4:38:ba:d8:9e:dd:f4:a0:44:78:7e:7a:de:f2: 76:75:64:a6:ca:58:4b:fd:f9:f2:5f:76:4f:c2:eb: 60:77:c5:15:c0:45:7e:98:7b:44:d1:39:27:16:e1: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:51:C1:28:44:6C:59:2F:A5:4E:CE:87:31:97:B3:15:10:DD:FB:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/8e4606df-ba0c-3bfb-b611-7a1b50205487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:74:3e:43:e6:33:5c:d5:d4:82:6e:c2:be:81:c6:1a:b4:f9: cc:9b:24:87:d6:04:e8:e1:7e:41:a2:4a:c2:19:f9:de:52:36: 28:c6:93:dc:af:9c:aa:f7:5d:75:50:57:85:80:05:b2:97:10: 22:92:ee:7a:c9:ad:ee:a7:fa:67:ef:a5:c8:1b:6a:68:e5:aa: 6a:1a:49:1c:83:bf:05:b6:db:8c:ec:7b:c5:f4:48:df:f8:59: aa:81:75:24:2c:96:24:8b:30:2a:b9:e4:19:8f:74:b3:30:80: 02:3a:52:8a:62:06:d7:24:62:a4:44:9f:9a:bb:88:2b:d5:03: a6:c4:7e:6f:d0:97:08:4b:79:4c:24:1b:0c:53:d0:eb:77:b0: 58:cd:71:9d:43:8e:16:92:ba:2b:1b:dc:da:56:fd:d4:ae:6a: 2c:36:af:29:39:82:27:0c:5e:a3:38:6a:7f:43:eb:48:b3:67: 71:0f:81:8c:66:65:bb:70:f7:51:98:a6:d6:bf:4d:f8:27:43: 00:bc:a6:a5:81:ba:ff:06:13:d9:e7:f5:bc:36:2b:3e:f4:f7: 02:6c:17:4b:49:69:de:33:1f:7b:32:e5:46:99:28:87:30:5f: 6f:bb:5a:67:8c:70:1e:d5:5a:af:df:d4:d9:63:d8:c6:34:f9: 89:3e:50:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrQEVXxxcgp9HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ODg3ODMwZGYtYWEzMC00MWViLTkzZjAtMDNkOWE0YWU0Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgNLsvP1MQjFxIcDK1BRv48NxUBw0rENHZlL oDG0gvYJtOEc+LDVhd1p2/YLRGrQ91rGSYv/Vg33+C5eZlEewxp3yqVhCXoiph8h 4SXTBIVeFdjNZvyZEr8WEniCJt1iiW1DGGcaf4uTqiaEWpVxdBn+it/GOurGWf6a E8svP6yKIXtyoNXeyCZZqTkPx51ATzz8vJuXXql5NsUx4EsA5+x2bh8xHuQBmYlu qGRPumny/LgxGI6ZCjOzQIa2UWTO+WIXf7wkRYR68ZxRNSAY/QeU9Di62J7d9KBE eH563vJ2dWSmylhL/fnyX3ZPwutgd8UVwEV+mHtE0TknFuE9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZRwShEbFkvpU7OhzGXsxUQ3fuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvOGU0NjA2ZGYtYmEwYy0z YmZiLWI2MTEtN2ExYjUwMjA1NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF0PkPmM1zV1IJuwr6Bxhq0+cybJIfWBOjhfkGiSsIZ+d5SNijGk9yv nKr3XXVQV4WABbKXECKS7nrJre6n+mfvpcgbamjlqmoaSRyDvwW224zse8X0SN/4 WaqBdSQsliSLMCq55BmPdLMwgAI6UopiBtckYqREn5q7iCvVA6bEfm/QlwhLeUwk GwxT0Ot3sFjNcZ1DjhaSuisb3NpW/dSuaiw2ryk5gicMXqM4an9D60izZ3EPgYxm Zbtw91GYpta/TfgnQwC8pqWBuv8GE9nn9bw2Kz709wJsF0tJad4zH3sy5UaZKIcw X2+7WmeMcB7VWq/f1Nlj2MY0+Yk+UCY= -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:43 2025 by rpki-client