$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/742af798-e596-3173-a4f0-3e231e82bd5d.roa File: 742af798-e596-3173-a4f0-3e231e82bd5d.roa (raw, json) Hash identifier: MR9W6jf8fPgeYtYBJxuZbXFauR7jIAjKCRyTPihGQao= Subject key identifier: 2F:F4:4D:78:7A:BB:E5:4F:67:41:FF:A9:C8:1B:C7:2B:10:88:3C:5A Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858487FB5D78913B3D6E3089B41C0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/742af798-e596-3173-a4f0-3e231e82bd5d.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 1239 IP address blocks: 198.67.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d7:89:13:b3:d6:e3:08:9b:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=b0dd72db-36a6-416f-a5f6-e75ceb718373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:83:42:c6:b1:4a:00:4c:ab:24:38:18:71: 58:ea:72:06:b2:33:79:e0:de:92:7e:f7:60:c1:d4: 24:ea:43:cc:d3:37:21:cb:c7:a6:82:c7:f7:25:42: 67:bf:81:7c:99:ed:c0:77:0a:dd:9a:73:e8:a9:b1: d7:39:5a:1c:d9:52:50:0f:88:d7:16:ef:83:3d:3c: 21:d6:c3:a9:86:fe:5b:7a:fb:d5:21:8b:99:aa:de: 29:e4:94:91:a0:f7:77:88:b8:48:ad:bf:76:66:00: 1f:c9:47:f1:ad:71:c6:0e:e3:c7:23:31:0f:7d:75: 08:de:e3:f7:87:c5:dd:40:61:cf:23:6f:3b:b8:ea: 11:73:b6:35:dc:56:aa:84:e0:1a:ab:28:4a:76:af: 9c:3e:a1:3e:d9:7e:9c:0e:80:8f:b5:a9:e3:30:85: 11:69:d7:d3:d4:c5:4e:0b:12:4f:30:cb:01:75:f2: ff:50:0a:47:67:11:87:d8:3e:c1:f6:f7:6a:b5:85: df:42:df:f8:da:f1:d7:43:1a:17:08:a9:37:07:25: 54:ca:5b:c9:3d:bf:33:46:2b:f5:18:6f:3a:ef:b9: ad:97:c2:0b:e2:e4:91:61:08:44:b1:9a:40:78:47: 02:b4:09:b1:7a:45:28:bf:4a:20:d5:84:57:28:a9: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:4D:78:7A:BB:E5:4F:67:41:FF:A9:C8:1B:C7:2B:10:88:3C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/742af798-e596-3173-a4f0-3e231e82bd5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:94:b3:01:6f:69:0a:ba:c8:eb:9d:a9:e5:9f:b9:af:e9:4b: af:de:fe:f4:17:a1:b8:39:6a:a1:79:c7:79:ac:80:86:23:52: 43:3a:2f:a6:8a:e3:5f:42:6a:1b:2a:17:9f:ab:06:30:6f:2b: b2:71:a9:6e:f9:96:e1:f1:39:c7:3b:05:69:a0:ae:60:36:b3: 29:aa:42:b6:f4:e1:1a:07:33:13:e4:e0:a7:36:89:71:5e:b3: f8:41:5a:b1:a7:92:f4:d3:44:73:84:39:c7:6e:45:f3:cc:eb: 3d:b2:42:e1:46:a7:79:02:69:e7:5c:97:92:ec:7f:45:c7:e6: 2e:33:ad:6b:7b:a2:90:5d:64:a8:6b:63:78:0c:00:86:b0:84: 2a:05:7f:03:6f:9c:ac:41:7c:05:c7:9a:aa:db:9a:16:6c:76: 4b:08:3f:f0:0b:ed:7d:c4:9b:9f:f1:01:66:8b:d9:e5:65:5b: 6e:03:8c:b6:1d:5f:f6:99:5c:09:8d:96:14:11:ba:80:6f:32: 6b:83:b0:58:69:0e:e5:6c:72:fe:1f:0b:3c:f2:60:d5:1d:25: 24:d4:75:91:9f:78:c5:3d:45:7c:88:12:fd:ab:f1:e6:cd:96: 2e:a7:03:c8:49:53:c8:24:f1:a0:79:dc:c4:aa:3e:15:25:e3: 30:e7:61:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdeJE7PW4wibQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk YjBkZDcyZGItMzZhNi00MTZmLWE1ZjYtZTc1Y2ViNzE4MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRuDQsaxSgBMqyQ4GHFY6nIGsjN54N6Sfvdg wdQk6kPM0zchy8emgsf3JUJnv4F8me3AdwrdmnPoqbHXOVoc2VJQD4jXFu+DPTwh 1sOphv5bevvVIYuZqt4p5JSRoPd3iLhIrb92ZgAfyUfxrXHGDuPHIzEPfXUI3uP3 h8XdQGHPI287uOoRc7Y13FaqhOAaqyhKdq+cPqE+2X6cDoCPtanjMIURadfT1MVO CxJPMMsBdfL/UApHZxGH2D7B9vdqtYXfQt/42vHXQxoXCKk3ByVUylvJPb8zRiv1 GG8677mtl8IL4uSRYQhEsZpAeEcCtAmxekUov0og1YRXKKmfGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/0TXh6u+VPZ0H/qcgbxysQiDxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNzQyYWY3OTgtZTU5Ni0z MTczLWE0ZjAtM2UyMzFlODJiZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiUswFvaQq6yOudqeWfua/pS6/e/vQXobg5aqF5x3msgIYjUkM6L6aK 419CahsqF5+rBjBvK7JxqW75luHxOcc7BWmgrmA2symqQrb04RoHMxPk4Kc2iXFe s/hBWrGnkvTTRHOEOcduRfPM6z2yQuFGp3kCaedcl5Lsf0XH5i4zrWt7opBdZKhr Y3gMAIawhCoFfwNvnKxBfAXHmqrbmhZsdksIP/AL7X3Em5/xAWaL2eVlW24DjLYd X/aZXAmNlhQRuoBvMmuDsFhpDuVscv4fCzzyYNUdJSTUdZGfeMU9RXyIEv2r8ebN li6nA8hJU8gk8aB53MSqPhUl4zDnYbo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:48 2025 by rpki-client