$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa File: 29a955ce-5759-3b14-b6e2-a31c4567f553.roa (raw, json) Hash identifier: x/t0pTwQAzrCDRLuDsKxV5p3UmvDKvZTLofQ0AmHANc= Subject key identifier: 0D:F9:BE:96:B8:44:C6:B4:A9:C1:CD:9F:67:97:BF:8D:17:E0:8A:FF Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285848A830A80C8D9F3AF86AD92A80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 1239 IP address blocks: 198.68.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a8:0c:8d:9f:3a:f8:6a:d9:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=fa311868-7315-47a7-aa59-b2e3c2074b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:cb:d6:d7:e0:8b:23:9c:11:8a:57:f0:e2: 67:01:76:d7:bd:e4:5c:10:61:65:71:9a:6a:ce:05: 01:70:57:73:00:66:10:ef:6c:14:92:3c:4b:83:52: 29:9f:92:40:ba:13:a6:48:89:64:5c:bb:30:b8:c7: 3d:e9:4b:ab:74:86:38:4d:7c:7f:de:ab:01:fd:35: 51:ea:42:98:76:ff:58:0e:a1:58:8d:6a:82:6f:af: 17:a9:6e:6d:b4:b8:3d:bb:ec:50:e5:e7:b2:ec:6a: 06:d0:72:ce:7c:62:31:66:b7:eb:43:33:09:b9:00: dc:a0:be:91:eb:d8:ef:53:e7:39:b5:42:fe:f8:f3: ab:0a:86:03:43:43:bc:41:e1:67:f1:c4:1d:25:14: cf:2b:cf:d1:5b:9b:d4:fe:c9:ec:e6:f6:51:7b:0c: 63:33:20:54:f1:29:06:6a:17:fd:b7:c0:11:12:ee: f8:5f:0d:dc:d3:8c:bc:3b:08:34:3d:bd:41:4a:05: 2a:fe:fa:85:c5:d3:b0:6c:b2:4e:1d:30:8b:97:2e: f3:c2:86:ad:6e:11:7a:69:e1:38:4a:f7:8e:d8:8d: 05:3f:56:5b:3d:48:1e:a4:b9:bd:10:1d:b1:74:f9: 17:6f:33:31:f0:7b:82:c3:a3:d2:5e:74:f0:05:2c: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:BE:96:B8:44:C6:B4:A9:C1:CD:9F:67:97:BF:8D:17:E0:8A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/29a955ce-5759-3b14-b6e2-a31c4567f553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.68.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:e4:b2:33:35:64:48:c1:8a:32:0c:e7:8c:66:87:27:d9:ee: ec:83:0a:6d:da:8a:2e:f8:b4:2e:a6:e9:d6:3b:c7:0d:ae:56: 56:73:fc:7c:27:67:41:53:99:35:58:3a:af:4c:ce:e4:9c:4d: 2f:a5:b9:10:3f:5c:b1:e6:58:2a:35:93:7a:1d:88:4e:3f:08: e6:95:0f:37:bb:3e:33:65:a7:b9:23:4e:2b:c6:64:d2:64:48: b9:ab:aa:05:a2:4a:d2:df:88:96:33:23:06:97:8c:06:b6:ac: 01:85:0b:1d:d5:51:ef:5f:c9:1c:fa:19:ff:64:ee:8d:21:af: 61:5b:7b:63:80:8e:a2:f4:3c:11:1d:d7:26:2e:5b:8f:98:c7: 94:46:0b:bf:09:a1:50:50:bf:77:19:93:93:30:5f:b3:7d:87: c6:1f:a6:9a:36:73:1a:06:af:81:9e:17:61:39:f6:8a:47:11: 26:e7:93:8b:f4:c6:36:d6:c2:0f:1d:51:46:d5:dd:7a:19:52: ac:5c:32:58:dc:0d:5d:43:2e:3d:2a:d6:3b:65:24:ee:87:db: eb:f3:78:f2:03:da:05:81:95:9a:46:91:68:d5:39:93:4c:5d: 1d:33:5e:a5:83:04:0b:af:e3:43:27:af:7b:a4:30:ef:9d:2a: 27:79:69:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKgMjZ86+GrZKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmEzMTE4NjgtNzMxNS00N2E3LWFhNTktYjJlM2MyMDc0YjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJXL1tfgiyOcEYpX8OJnAXbXveRcEGFlcZpq zgUBcFdzAGYQ72wUkjxLg1Ipn5JAuhOmSIlkXLswuMc96UurdIY4TXx/3qsB/TVR 6kKYdv9YDqFYjWqCb68XqW5ttLg9u+xQ5eey7GoG0HLOfGIxZrfrQzMJuQDcoL6R 69jvU+c5tUL++POrCoYDQ0O8QeFn8cQdJRTPK8/RW5vU/sns5vZRewxjMyBU8SkG ahf9t8AREu74Xw3c04y8Owg0Pb1BSgUq/vqFxdOwbLJOHTCLly7zwoatbhF6aeE4 SveO2I0FP1ZbPUgepLm9EB2xdPkXbzMx8HuCw6PSXnTwBSyeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA35vpa4RMa0qcHNn2eXv40X4Ir/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMjlhOTU1Y2UtNTc1OS0z YjE0LWI2ZTItYTMxYzQ1NjdmNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3ksjM1ZEjBijIM54xmhyfZ7uyDCm3aii74tC6m6dY7xw2uVlZz/Hwn Z0FTmTVYOq9MzuScTS+luRA/XLHmWCo1k3odiE4/COaVDze7PjNlp7kjTivGZNJk SLmrqgWiStLfiJYzIwaXjAa2rAGFCx3VUe9fyRz6Gf9k7o0hr2Fbe2OAjqL0PBEd 1yYuW4+Yx5RGC78JoVBQv3cZk5MwX7N9h8Yfppo2cxoGr4GeF2E59opHESbnk4v0 xjbWwg8dUUbV3XoZUqxcMljcDV1DLj0q1jtlJO6H2+vzePID2gWBlZpGkWjVOZNM XR0zXqWDBAuv40Mnr3ukMO+dKid5acs= -----END CERTIFICATE-----Generated at Fri Mar 14 13:25:58 2025 by rpki-client