$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa File: 2f12a581-2028-3c4a-af0c-35b5904553d4.roa (raw, json) Hash identifier: l7f1JBuOomFEe3z9jr44PtIe6wCqYoBOIrpJGvuj1s0= Subject key identifier: 73:EA:FC:3A:9B:86:94:EC:30:92:D0:E5:5F:7B:07:92:01:72:BB:06 Certificate issuer: /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f Certificate serial: 010D0C9F432858492E13BF06752BE06CB88A2C00 Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 393316 IP address blocks: 198.169.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bf:06:75:2b:e0:6c:b8:8a:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=95befa0d-456f-43ba-a72b-ae95d3109422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:44:6b:c0:75:25:10:00:c1:65:b5:03:63: d9:0a:2d:cc:d3:e8:ac:65:1a:2c:3f:55:46:0e:a3: 28:5e:23:16:4a:07:f3:40:4a:61:9d:0b:0c:95:86: 19:b4:3b:06:54:90:3e:64:06:df:f5:b7:8c:da:b1: b2:ad:d4:7d:af:ea:96:38:78:09:28:76:53:c2:c2: 53:0c:89:57:39:1f:f9:75:e6:4b:f1:7c:3b:36:4e: 2e:5e:a0:a7:de:34:84:27:11:1f:01:fb:74:8d:02: df:61:92:d0:b8:f6:e1:75:2a:9a:88:30:c0:fe:ab: 28:2f:43:1a:97:99:86:7c:2c:88:fb:3f:25:76:59: 83:48:4a:71:55:52:0c:0c:2c:6d:95:03:da:41:a9: 20:5a:33:85:49:d0:dd:29:64:1e:1c:48:b2:a3:49: a6:0b:c0:9b:ae:b9:36:ba:7f:de:37:2a:cf:c6:bf: 48:02:f3:d0:3e:55:d9:9f:7d:91:38:02:a0:59:43: db:66:04:72:59:07:53:0e:aa:41:a2:28:86:0a:7e: dc:a2:b7:47:e8:f4:34:8a:6e:9d:57:4c:1e:74:af: ff:ec:f3:33:fe:95:a4:b0:fa:93:4b:e8:5c:43:fe: f7:a1:bf:9b:97:b0:bf:45:c7:d0:22:2f:62:f2:dd: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EA:FC:3A:9B:86:94:EC:30:92:D0:E5:5F:7B:07:92:01:72:BB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl X509v3 Authority Key Identifier: keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer sbgp-ipAddrBlock: critical IPv4: 198.169.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b6:72:32:5a:f9:1c:38:2b:4d:7b:29:c8:5e:b2:99:9c:12: 66:c3:d6:0c:e8:45:5f:2c:fd:97:19:e9:29:fa:05:27:08:cf: 6e:8f:a4:b9:c2:89:5d:87:3a:04:71:28:dd:06:e1:f2:33:24: 1f:2a:91:b0:58:7f:e7:17:bb:92:6d:bc:27:ba:0c:bf:ae:5d: c7:7c:8c:1f:fa:91:d5:ae:aa:68:d9:f9:74:d2:92:58:a2:63: f1:da:3b:96:10:3e:3a:96:f6:0b:3a:4a:77:d9:ea:65:58:13: cf:05:4a:72:1f:bc:34:f0:1b:be:18:0d:d2:a9:03:46:08:87: ca:d7:1c:72:f4:d8:17:a8:e7:3a:16:af:23:7c:51:43:ea:35: f4:19:79:f3:e7:98:9d:1c:18:cf:e1:b0:57:46:d1:59:ac:a4: b9:5f:cc:2b:c3:29:a2:b9:fd:55:47:09:cf:b6:4f:86:c6:0a: c7:39:13:02:97:32:58:e4:57:e0:ef:fd:ee:89:f2:03:3b:aa: 09:b4:20:99:07:3d:cb:d8:28:e2:b4:c3:1d:98:f8:d2:d0:83: 82:2d:e5:70:b6:45:74:b9:db:7a:c0:f4:b4:c0:eb:e0:fb:68: 46:bf:83:fe:3b:66:72:44:86:4c:4c:e6:8f:10:70:28:91:2a: 64:9d:13:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE78GdSvgbLiKLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOTdlYzgtYzg4MS00NWFhLWFjNDktMjVlZTIxYTkz YTVmMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk OTViZWZhMGQtNDU2Zi00M2JhLWE3MmItYWU5NWQzMTA5NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/xEa8B1JRAAwWW1A2PZCi3M0+isZRosP1VG DqMoXiMWSgfzQEphnQsMlYYZtDsGVJA+ZAbf9beM2rGyrdR9r+qWOHgJKHZTwsJT DIlXOR/5deZL8Xw7Nk4uXqCn3jSEJxEfAft0jQLfYZLQuPbhdSqaiDDA/qsoL0Ma l5mGfCyI+z8ldlmDSEpxVVIMDCxtlQPaQakgWjOFSdDdKWQeHEiyo0mmC8Cbrrk2 un/eNyrPxr9IAvPQPlXZn32ROAKgWUPbZgRyWQdTDqpBoiiGCn7cordH6PQ0im6d V0wedK//7PMz/pWksPqTS+hcQ/73ob+bl7C/RcfQIi9i8t3eUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPq/DqbhpTsMJLQ5V97B5IBcrsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5 N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVlMjFhOTNhNWYvMmYxMmE1ODEtMjAyOC0z YzRhLWFmMGMtMzViNTkwNDU1M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDBlOTdlYzgtYzg4MS00NWFhLWFj NDktMjVlZTIxYTkzYTVmL2QwZTk3ZWM4LWM4ODEtNDVhYS1hYzQ5LTI1ZWUyMWE5 M2E1Zi5jcmwwHwYDVR0jBBgwFoAUOHsSt98MP59S/msN47XbcN6/l0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVl MjFhOTNhNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA22cjJa+Rw4K017KchespmcEmbD1gzoRV8s/ZcZ6Sn6BScIz26PpLnC iV2HOgRxKN0G4fIzJB8qkbBYf+cXu5JtvCe6DL+uXcd8jB/6kdWuqmjZ+XTSklii Y/HaO5YQPjqW9gs6SnfZ6mVYE88FSnIfvDTwG74YDdKpA0YIh8rXHHL02Beo5zoW ryN8UUPqNfQZefPnmJ0cGM/hsFdG0VmspLlfzCvDKaK5/VVHCc+2T4bGCsc5EwKX MljkV+Dv/e6J8gM7qgm0IJkHPcvYKOK0wx2Y+NLQg4It5XC2RXS523rA9LTA6+D7 aEa/g/47ZnJEhkxM5o8QcCiRKmSdE3k= -----END CERTIFICATE-----Generated at Sat Apr 12 21:45:26 2025 by rpki-client