$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa File: dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa (raw, json) Hash identifier: 6Ea/K00LRBXNPp2/5RTBcDVVMi6j2KAQ0Wf5aFMvSZE= Subject key identifier: 2B:8A:CB:0E:B5:9A:02:2A:79:94:96:24:86:6E:37:91:FF:CA:14:57 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285848A830A6052D6FFED357012830 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 1239 IP address blocks: 198.67.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a6:05:2d:6f:fe:d3:57:01:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=e33f662f-d69c-4d07-b407-57030016a435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:55:50:3d:0a:a5:0f:62:ee:f6:3b:a3:91: 5e:c2:30:a8:bc:8f:36:43:0d:21:ae:12:67:c8:db: 5a:49:f6:f6:fa:f8:ec:4d:8b:55:3d:70:84:5d:5b: be:94:ad:45:7a:e9:56:ad:4f:5f:70:55:0b:8d:43: d0:ca:5d:d5:e2:3d:79:6d:85:fc:5b:bb:35:6e:a1: e9:44:23:52:a6:83:40:8b:ec:e3:bc:fa:b7:a7:62: 31:4a:d7:c0:56:30:91:85:db:6a:d7:6c:56:a3:75: 33:9a:61:87:10:fc:38:65:d6:f3:55:ca:ca:6c:ed: f7:1a:58:9a:62:3d:88:86:a5:b1:f3:c6:24:f4:51: f2:0a:bc:43:f4:30:64:1d:6c:0b:fb:f9:7b:17:5c: 47:b7:4b:72:42:38:ad:28:2b:26:4d:38:aa:aa:d4: 9f:d8:00:09:66:4b:b2:d5:d8:56:df:60:68:6c:49: 50:80:b0:74:70:f5:2f:b2:eb:2c:34:ab:cf:89:8c: 47:c7:1e:a6:d8:df:eb:e9:d4:1c:9e:c4:d1:59:2a: 7e:c5:65:be:9b:45:e6:f8:16:3b:d2:80:4d:1c:dc: 81:4f:88:44:12:43:5d:f1:0c:5d:89:7c:a5:96:01: 4c:25:24:69:12:07:ea:e5:20:c3:12:9d:60:9b:48: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:CB:0E:B5:9A:02:2A:79:94:96:24:86:6E:37:91:FF:CA:14:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:53:68:3b:e4:fa:36:e7:5b:86:41:46:1e:48:8b:d9:c8:99: 8e:85:ee:42:28:4f:25:61:65:e7:a5:70:fb:77:cf:33:b4:1b: be:b9:5c:dc:6b:2f:0c:39:9d:f1:9a:9f:e4:f9:02:bb:88:df: d7:74:6d:b5:f8:2d:a9:bd:25:91:8d:60:6b:ff:84:fe:60:a7: cf:84:c6:a2:a7:6d:c5:14:cf:b7:ac:51:ca:56:56:30:76:3a: 50:99:a5:af:d3:b8:61:ed:af:96:67:f0:28:48:f7:ce:ff:84: c8:2c:8c:3c:5e:7e:2d:04:0f:f9:36:3c:2d:45:15:89:ba:ab: a4:15:4a:01:54:7b:65:c2:b7:98:de:92:dd:fb:c1:0a:88:70: c3:6b:56:40:ec:79:17:d7:6d:2d:f7:b7:bb:a6:47:12:55:57: af:7a:79:37:36:a8:c2:70:e3:0c:ed:5b:70:5f:e8:54:ab:25: b0:89:0d:05:ab:b5:d0:bf:e9:d4:bc:7f:9f:fe:7d:c0:2d:08: b7:aa:8e:7b:78:c1:98:e6:00:51:29:b4:28:b0:ec:3e:98:45: 7c:3a:2d:f4:c5:c0:7e:92:65:e4:f4:14:6a:27:4e:ed:73:51: 11:ce:31:42:b5:ac:0b:c3:47:58:fd:b5:a5:a4:94:76:b4:34: bd:a5:32:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKYFLW/+01cBKDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTMzZjY2MmYtZDY5Yy00ZDA3LWI0MDctNTcwMzAwMTZhNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzNVUD0KpQ9i7vY7o5FewjCovI82Qw0hrhJn yNtaSfb2+vjsTYtVPXCEXVu+lK1FeulWrU9fcFULjUPQyl3V4j15bYX8W7s1bqHp RCNSpoNAi+zjvPq3p2IxStfAVjCRhdtq12xWo3UzmmGHEPw4ZdbzVcrKbO33Glia Yj2IhqWx88Yk9FHyCrxD9DBkHWwL+/l7F1xHt0tyQjitKCsmTTiqqtSf2AAJZkuy 1dhW32BobElQgLB0cPUvsussNKvPiYxHxx6m2N/r6dQcnsTRWSp+xWW+m0Xm+BY7 0oBNHNyBT4hEEkNd8QxdiXyllgFMJSRpEgfq5SDDEp1gm0gjlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuKyw61mgIqeZSWJIZuN5H/yhRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZGQ0MGRiNTUtZWVlMy0z ZGZhLWI3OTYtN2Y1OWI1YmRkMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRTaDvk+jbnW4ZBRh5Ii9nImY6F7kIoTyVhZeelcPt3zzO0G765XNxr Lww5nfGan+T5AruI39d0bbX4Lam9JZGNYGv/hP5gp8+ExqKnbcUUz7esUcpWVjB2 OlCZpa/TuGHtr5Zn8ChI987/hMgsjDxefi0ED/k2PC1FFYm6q6QVSgFUe2XCt5je kt37wQqIcMNrVkDseRfXbS33t7umRxJVV696eTc2qMJw4wztW3Bf6FSrJbCJDQWr tdC/6dS8f5/+fcAtCLeqjnt4wZjmAFEptCiw7D6YRXw6LfTFwH6SZeT0FGonTu1z URHOMUK1rAvDR1j9taWklHa0NL2lMuI= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:38 2025 by rpki-client