$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa File: a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (raw, json) Hash identifier: pX/hvs5tKQ00nHiNQnGipubQFPmpgnb6HzjABGCfo+k= Subject key identifier: 05:01:BC:FC:F2:69:F4:C9:3F:85:25:E1:3C:56:CC:B1:A4:3D:52:83 Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F432858497279B9DA9A80B007D84F8400 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 992 IP address blocks: 198.169.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b9:da:9a:80:b0:07:d8:4f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=8ca3a280-6496-4c8b-9693-e96de9c99605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:6a:78:9b:53:8c:23:d9:9d:7f:58:1c:41: db:e5:03:65:46:41:41:af:7b:d6:0b:7c:1a:cb:e9: 7f:dd:e3:fa:12:b4:df:4b:c2:af:c5:cf:3e:b3:04: 63:c3:7f:c8:60:bd:c9:0d:cb:f8:3a:c9:14:4c:ab: 7b:e5:b8:03:19:5b:92:f3:5a:97:ed:99:cc:ab:7d: b6:c0:c3:50:c3:c9:43:65:7c:74:b6:35:81:fd:1a: 3b:10:51:0e:a1:8e:01:e6:6b:6c:9c:49:a4:4a:c1: 2a:cd:cc:6f:3b:69:e5:af:38:62:e1:89:ca:73:4a: 6e:e4:29:0d:21:92:6b:e4:6a:3a:2c:be:63:b9:96: f0:ab:7a:52:8a:df:16:87:5e:28:6b:ff:46:56:7d: 2c:79:0c:a2:9a:31:3f:10:09:4f:ee:de:5d:1e:2e: 67:ff:f6:33:b0:69:94:20:f3:1f:1b:bd:0a:b5:f0: d7:ec:7b:b2:27:1a:84:3c:0f:cc:9d:b9:65:f0:1f: 97:9a:eb:c8:9f:45:4b:70:5b:7f:aa:fa:11:72:ca: 6b:b0:bc:4c:4b:8f:d1:54:e0:d1:22:79:7f:bd:49: 3d:31:5a:4d:1b:7f:43:96:51:a9:f1:26:2f:a1:7a: 5c:6c:a8:d5:cb:15:eb:1e:45:0d:2c:a0:67:a5:7f: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:BC:FC:F2:69:F4:C9:3F:85:25:E1:3C:56:CC:B1:A4:3D:52:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 198.169.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b6:9c:2d:67:85:8d:dd:74:f3:07:f0:b6:2d:c0:18:1c:79: 30:29:63:a7:90:a4:0e:79:24:a8:aa:9e:ea:30:d5:81:7f:62: ed:74:d9:cf:26:63:b6:68:4d:f0:fb:47:41:c6:fc:d8:ca:74: 1c:44:57:6c:a1:66:ce:4d:50:b6:7a:6e:e8:bc:a2:39:8d:ec: 19:87:2e:cb:44:35:d0:55:ec:66:20:31:d7:e5:98:e3:8f:69: 54:26:56:8d:01:32:c1:cc:ff:65:8b:c0:e0:8a:a7:e5:ba:d4: 0a:83:fd:5c:1f:3a:80:e6:8a:d8:66:9d:b9:b7:a1:c9:17:7f: 45:6f:3a:72:7e:39:b4:04:f3:47:de:9c:ce:34:07:ec:6a:5f: 2b:b0:3d:8b:71:dd:2f:49:6e:8d:f9:91:31:c1:cf:ed:21:ef: 38:00:14:3c:fe:d6:32:b9:f0:b3:07:6e:ff:d2:cb:99:5a:5d: 25:99:e9:66:94:42:7b:fb:18:71:f9:67:74:79:8c:0b:d4:75: d5:d5:c2:4b:21:b7:56:dd:69:2c:69:93:60:81:1f:78:68:04: da:75:4b:6e:18:e8:58:93:b4:9d:ae:5c:67:cc:8b:e6:95:bf: af:30:66:b5:18:60:3f:8d:49:6d:42:7c:d6:f3:ae:2c:d9:72: e5:d0:b3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebnamoCwB9hPhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk OGNhM2EyODAtNjQ5Ni00YzhiLTk2OTMtZTk2ZGU5Yzk5NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2NqeJtTjCPZnX9YHEHb5QNlRkFBr3vWC3wa y+l/3eP6ErTfS8Kvxc8+swRjw3/IYL3JDcv4OskUTKt75bgDGVuS81qX7ZnMq322 wMNQw8lDZXx0tjWB/Ro7EFEOoY4B5mtsnEmkSsEqzcxvO2nlrzhi4YnKc0pu5CkN IZJr5Go6LL5juZbwq3pSit8Wh14oa/9GVn0seQyimjE/EAlP7t5dHi5n//YzsGmU IPMfG70KtfDX7HuyJxqEPA/Mnbll8B+XmuvIn0VLcFt/qvoRcsprsLxMS4/RVODR Inl/vUk9MVpNG39DllGp8SYvoXpcbKjVyxXrHkUNLKBnpX9lPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUBvPzyafTJP4Ul4TxWzLGkPVKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvYTI3ZmM2MjEtNWMwMi0z MjZjLTgxYWUtYzllOWUyYzY2OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe2nC1nhY3ddPMH8LYtwBgceTApY6eQpA55JKiqnuow1YF/Yu102c8m Y7ZoTfD7R0HG/NjKdBxEV2yhZs5NULZ6bui8ojmN7BmHLstENdBV7GYgMdflmOOP aVQmVo0BMsHM/2WLwOCKp+W61AqD/VwfOoDmithmnbm3ockXf0VvOnJ+ObQE80fe nM40B+xqXyuwPYtx3S9Jbo35kTHBz+0h7zgAFDz+1jK58LMHbv/Sy5laXSWZ6WaU Qnv7GHH5Z3R5jAvUddXVwksht1bdaSxpk2CBH3hoBNp1S24Y6FiTtJ2uXGfMi+aV v68wZrUYYD+NSW1CfNbzrizZcuXQs1I= -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:43 2025 by rpki-client