$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa File: cb74f0af-7659-30b1-9411-47e725d27122.roa (raw, json) Hash identifier: u0aPostqt9VyWS6HjkA/xYLyIIztxRXNT+0A8tM8QjM= Subject key identifier: C4:E1:2E:04:3B:73:C5:39:F1:11:14:30:8D:77:0F:BB:98:82:95:E6 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858491ED6E3E03A2BDCCBD947C060 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e3:e0:3a:2b:dc:cb:d9:47:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=0c899229-df59-4dc2-92de-e0dc39ad4aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:2c:19:28:22:9b:6f:c4:11:ed:0f:22:5e: 25:93:d4:c0:5c:f5:93:bc:85:57:56:21:04:a3:1d: d1:dc:54:c1:70:eb:25:7e:23:53:45:98:d9:40:18: ac:9c:7e:3e:63:44:82:c2:12:25:01:95:3a:5e:28: 0a:83:66:2c:bb:7f:64:ee:65:fb:53:55:91:a9:4f: 41:c5:7b:b3:89:a2:f9:39:f5:33:79:c7:98:cb:f7: c0:79:02:19:f4:99:70:6c:3a:e9:de:0d:69:c2:01: 38:19:08:a8:6b:3d:3f:f7:0d:f1:81:e7:8a:e2:5e: fd:33:c1:e2:68:63:73:68:c4:f9:eb:22:b0:f4:c3: 42:98:e2:44:10:4a:c9:3b:8e:e7:63:51:01:24:3f: 96:b3:2d:36:68:0c:ca:a1:97:f0:74:d6:53:d8:4a: 2f:50:cf:5b:c2:cd:2d:60:73:39:5b:5c:7d:39:f0: 9d:50:4e:6c:3b:0a:98:60:fa:6e:6b:d5:63:99:aa: da:de:5e:2e:fb:c6:28:a4:30:b7:47:6a:4a:17:f6: 0e:35:7b:ce:2b:05:45:60:7d:9a:f1:73:33:c0:0a: 0d:9f:de:43:25:70:c4:09:41:2b:f4:57:d5:d6:92: 36:75:6c:1e:3c:1f:d5:e2:79:3d:e5:4d:7b:ad:65: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:2E:04:3B:73:C5:39:F1:11:14:30:8D:77:0F:BB:98:82:95:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:87:b0:f0:b7:a7:e1:57:05:74:cc:01:2a:b1:6f:3a:3c:03: f7:33:d6:59:64:42:bd:92:e4:c5:48:ec:13:ea:fe:5e:ef:8f: 48:c4:da:c6:54:4a:1e:e0:69:12:6c:8e:fb:7b:8b:60:ff:b9: ca:40:7f:4a:cf:08:60:2f:fb:3f:1f:b4:26:8d:30:35:f1:13: 50:51:65:51:6b:c6:1c:74:08:d4:f0:2b:92:e4:d4:fd:8d:43: f0:12:10:d7:bc:ad:6f:06:c3:53:d5:71:40:6d:51:cf:82:d1: b1:d0:3a:be:96:e4:d4:13:1e:6e:ce:da:e7:73:4d:bc:0f:4b: fe:d8:d2:00:eb:8d:55:c9:94:80:99:76:10:e2:80:0d:e4:d2: 7d:06:bc:95:d9:3e:a5:07:d6:a5:91:c4:5b:ca:1e:83:44:e1: 22:36:18:c3:a6:a9:64:2b:87:a4:89:2e:38:59:b9:de:bf:6f: 24:51:d4:7a:bf:d0:45:50:6f:c3:72:1d:82:45:3e:2b:bd:0f: 66:20:da:7d:38:7b:d4:e6:28:25:39:1d:e9:d1:06:80:f0:cb: a4:54:87:97:43:3c:95:af:31:a1:70:34:ed:a3:78:ab:97:2b: 72:8a:7a:23:ff:aa:cd:7a:7c:69:a0:5e:48:aa:e4:ef:6e:ba: 13:ab:ba:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uPgOivcy9lHwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MGM4OTkyMjktZGY1OS00ZGMyLTkyZGUtZTBkYzM5YWQ0YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsMsGSgim2/EEe0PIl4lk9TAXPWTvIVXViEE ox3R3FTBcOslfiNTRZjZQBisnH4+Y0SCwhIlAZU6XigKg2Ysu39k7mX7U1WRqU9B xXuziaL5OfUzeceYy/fAeQIZ9JlwbDrp3g1pwgE4GQioaz0/9w3xgeeK4l79M8Hi aGNzaMT56yKw9MNCmOJEEErJO47nY1EBJD+Wsy02aAzKoZfwdNZT2EovUM9bws0t YHM5W1x9OfCdUE5sOwqYYPpua9Vjmara3l4u+8YopDC3R2pKF/YONXvOKwVFYH2a 8XMzwAoNn95DJXDECUEr9FfV1pI2dWwePB/V4nk95U17rWU8jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMThLgQ7c8U58REUMI13D7uYgpXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvY2I3NGYwYWYtNzY1OS0z MGIxLTk0MTEtNDdlNzI1ZDI3MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOHsPC3p+FXBXTMASqxbzo8A/cz1llkQr2S5MVI7BPq/l7vj0jE2sZU Sh7gaRJsjvt7i2D/ucpAf0rPCGAv+z8ftCaNMDXxE1BRZVFrxhx0CNTwK5Lk1P2N Q/ASENe8rW8Gw1PVcUBtUc+C0bHQOr6W5NQTHm7O2udzTbwPS/7Y0gDrjVXJlICZ dhDigA3k0n0GvJXZPqUH1qWRxFvKHoNE4SI2GMOmqWQrh6SJLjhZud6/byRR1Hq/ 0EVQb8NyHYJFPiu9D2Yg2n04e9TmKCU5HenRBoDwy6RUh5dDPJWvMaFwNO2jeKuX K3KKeiP/qs16fGmgXkiq5O9uuhOruv0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:09 2025 by rpki-client