$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: LuS20+IFalG3wzsZ27y7vtM5zCBS/Pk8c9czrJqc21Y= Subject key identifier: 04:23:E3:4E:78:82:50:AB:8D:B3:C1:D4:37:EC:DA:DC:1B:6C:C3:32 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F43285848F65BE8717C9ADA070A258E80 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e8:71:7c:9a:da:07:0a:25:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=f9f9d50e-b7a9-472c-8082-c2b3b8865632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:3d:bb:4a:e1:73:1d:ea:61:da:4a:6d:4e: e8:68:a9:ab:58:f4:c1:7f:d6:40:a5:87:ef:71:dd: 41:aa:f4:f6:20:fe:fb:86:08:2d:fa:53:8b:b2:c4: 79:b6:b0:7d:b0:43:53:71:7d:f0:18:fc:fb:4e:4f: 14:74:64:7c:19:18:e0:f8:2e:75:25:ff:e3:ff:5f: 0c:4d:6a:d6:8f:32:83:0c:ed:8f:d7:bd:0d:6b:95: da:64:a1:94:14:e6:34:1b:42:5f:c0:c6:71:bd:30: 20:d9:f9:03:40:ed:d8:3e:9f:55:c9:a1:78:70:34: 11:7c:6e:81:4a:27:a1:fe:e4:b4:db:2e:29:97:a1: 10:f9:a5:45:d7:2c:48:6c:97:6b:77:10:68:e4:1b: 5e:71:6d:3f:4c:0c:c8:4b:0c:74:e4:ba:54:a0:6f: 85:4c:52:4f:1e:fe:fd:4a:48:7d:b3:b3:8e:03:21: 31:27:ff:e1:25:43:86:87:fc:98:09:33:07:a8:6c: c5:dc:b3:c6:50:bf:29:68:2e:5b:01:70:d3:70:be: e5:1e:3c:b1:e8:5b:dc:35:f9:70:b6:10:c7:d2:33: da:c8:12:f5:2d:24:01:98:34:d2:bd:ee:ae:44:d2: 29:35:a3:7b:19:9e:cb:46:7f:1f:1a:73:19:49:48: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:E3:4E:78:82:50:AB:8D:B3:C1:D4:37:EC:DA:DC:1B:6C:C3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0a:d6:bd:76:7b:78:cb:22:56:09:de:d4:6d:f9:d6:54:aa: ea:f0:8a:0d:2d:3c:cd:37:5b:50:d5:83:a8:e8:2d:36:bc:00: ed:8f:7e:8d:b6:b6:76:d5:75:f4:79:ae:76:a4:5d:eb:51:78: f8:f8:c5:31:3b:9a:ca:57:9b:24:8d:81:24:8e:64:5f:fc:44: 15:11:64:75:09:67:4d:4d:2c:46:4c:e5:17:4a:a6:6d:33:9b: d8:ac:ca:5f:ed:7b:ca:95:e9:5b:39:4e:6b:a0:43:7a:81:9a: f3:40:21:6e:99:ce:85:ff:5d:4b:7e:14:3b:ac:ad:88:b2:8b: 70:bf:37:a0:0a:ed:59:27:ec:02:83:09:94:11:e9:75:bd:99: 30:51:1d:71:39:ad:d5:e5:85:ff:ed:77:02:a6:33:ff:fc:c9: 25:b6:70:b6:aa:b2:e2:d5:c1:55:10:0d:f4:10:b8:3a:2d:f1: c8:70:e9:82:f6:d0:99:97:43:34:c3:a8:c8:96:e3:e3:d4:5f: 22:36:22:ca:2a:86:a2:48:fc:da:68:b8:b0:ce:31:69:8d:80: da:3b:c6:eb:5f:73:71:6e:7f:00:4a:14:a3:3d:9e:ad:fa:f5: d9:93:32:c7:2e:b3:ef:30:70:ae:19:df:87:8e:e2:09:a9:9a: 88:da:b7:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+hxfJraBwoljoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZjlmOWQ1MGUtYjdhOS00NzJjLTgwODItYzJiM2I4ODY1NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+A9u0rhcx3qYdpKbU7oaKmrWPTBf9ZApYfv cd1BqvT2IP77hggt+lOLssR5trB9sENTcX3wGPz7Tk8UdGR8GRjg+C51Jf/j/18M TWrWjzKDDO2P170Na5XaZKGUFOY0G0JfwMZxvTAg2fkDQO3YPp9VyaF4cDQRfG6B Sieh/uS02y4pl6EQ+aVF1yxIbJdrdxBo5BtecW0/TAzISwx05LpUoG+FTFJPHv79 Skh9s7OOAyExJ//hJUOGh/yYCTMHqGzF3LPGUL8paC5bAXDTcL7lHjyx6FvcNflw thDH0jPayBL1LSQBmDTSve6uRNIpNaN7GZ7LRn8fGnMZSUg5MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQj4054glCrjbPB1Dfs2twbbMMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8K1r12e3jLIlYJ3tRt+dZUqurwig0tPM03W1DVg6joLTa8AO2Pfo22 tnbVdfR5rnakXetRePj4xTE7mspXmySNgSSOZF/8RBURZHUJZ01NLEZM5RdKpm0z m9isyl/te8qV6Vs5TmugQ3qBmvNAIW6ZzoX/XUt+FDusrYiyi3C/N6AK7Vkn7AKD CZQR6XW9mTBRHXE5rdXlhf/tdwKmM//8ySW2cLaqsuLVwVUQDfQQuDot8chw6YL2 0JmXQzTDqMiW4+PUXyI2IsoqhqJI/NpouLDOMWmNgNo7xutfc3FufwBKFKM9nq36 9dmTMscus+8wcK4Z34eO4gmpmojat9g= -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:39 2025 by rpki-client