$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ecf5a16d-40f9-35f8-b246-85f847170ba9.roa File: ecf5a16d-40f9-35f8-b246-85f847170ba9.roa (raw, json) Hash identifier: kTCeWTXu/2AUyTf6oIWPWKgGkvEpPJcIxBepYq9Bt9w= Subject key identifier: B4:A3:28:D3:E9:7E:44:FE:14:E6:87:40:36:C5:F0:54:27:F3:34:A8 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285848AF2B87F9584AE72CF5C71C00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ecf5a16d-40f9-35f8-b246-85f847170ba9.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 55933 IP address blocks: 198.44.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:87:f9:58:4a:e7:2c:f5:c7:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=e2d7095e-9098-49d6-abb0-86f8405c04fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:aa:a3:31:49:c3:52:8f:85:ad:8c:9a:67: 04:a4:d7:7c:85:82:91:56:a0:0f:e1:6e:25:bf:75: 02:c2:d6:02:13:5d:22:0a:52:01:bc:9e:21:09:09: ba:21:bc:a9:df:fa:60:e5:ad:30:58:f1:cc:76:e0: 2d:2d:6c:3e:9a:ac:9d:e6:0a:fe:bf:1b:5a:c6:59: f9:e2:59:71:34:cf:cb:11:d0:3d:6e:d3:37:dc:14: 8a:28:ab:6b:96:85:94:3a:8b:9b:75:c6:bc:57:5b: 7a:90:c2:73:64:55:11:a6:a6:88:38:90:c5:a8:66: 52:ee:07:8a:2d:f5:36:e4:08:a7:e2:3b:bf:fb:05: 1c:8a:0d:8b:02:4f:f1:16:2e:ed:f7:ad:f8:7e:41: 5f:33:05:00:2c:b6:a4:38:5f:8d:bf:ae:d8:28:49: ee:cd:c1:ab:f7:19:84:72:4f:cf:0e:1a:a6:36:be: 3c:0f:8a:bc:ad:43:94:fa:a6:3e:5c:55:4e:fd:7b: 9e:73:08:ae:eb:7b:f1:7e:8d:99:35:25:ae:f3:f0: d8:0d:4e:5b:af:23:27:16:a6:70:e0:64:60:8e:72: df:08:9f:1c:61:fb:ae:78:84:94:d9:0c:1b:79:14: dc:17:b9:16:b0:2a:02:6c:9f:97:0a:ec:6e:59:c3: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:28:D3:E9:7E:44:FE:14:E6:87:40:36:C5:F0:54:27:F3:34:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ecf5a16d-40f9-35f8-b246-85f847170ba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0e:a9:72:62:67:3e:5d:07:bc:5e:2d:eb:3b:70:b9:81:f0: 6b:16:18:4d:15:81:7c:cd:80:ff:9b:8a:87:c7:32:23:ce:ed: 72:e8:aa:cd:40:67:75:65:19:d1:96:3f:d2:d0:f3:bb:24:59: 18:2d:a1:d4:69:95:23:4f:c3:43:02:a7:9d:5b:10:e0:33:c3: cc:03:cd:75:14:d5:b3:8d:e9:1e:ec:99:f4:d2:9e:0c:a2:1a: 1f:14:b0:54:14:0c:05:84:aa:73:df:10:78:5c:37:47:d9:bd: 8b:3a:65:9b:72:d6:6a:11:66:fa:dd:0b:d6:e2:de:09:db:4c: fd:42:28:48:ec:ae:b6:67:22:86:0b:4e:2b:f5:b0:6c:50:b8: 25:7a:d6:af:e4:d8:f8:7d:0c:c3:4f:30:6a:64:44:88:9a:32: e4:a9:3b:65:48:35:c4:0a:96:df:0a:0b:a4:b2:d3:6b:ec:db: 80:e9:04:d5:1b:9d:11:87:5a:dd:d4:6e:3d:d8:d7:f6:d3:2b: 81:7b:07:01:cb:5b:c9:d1:d4:a7:ae:4f:8b:84:3c:4d:81:5f: c9:25:62:ac:10:0e:33:66:89:84:a9:ba:b9:13:ae:7f:13:a9: dc:e6:6c:24:df:e7:ba:9f:29:a0:a3:32:f9:11:69:49:cb:26: 5d:5a:43:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4f5WErnLPXHHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTJkNzA5NWUtOTA5OC00OWQ2LWFiYjAtODZmODQwNWMwNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0OqozFJw1KPha2MmmcEpNd8hYKRVqAP4W4l v3UCwtYCE10iClIBvJ4hCQm6Ibyp3/pg5a0wWPHMduAtLWw+mqyd5gr+vxtaxln5 4llxNM/LEdA9btM33BSKKKtrloWUOoubdca8V1t6kMJzZFURpqaIOJDFqGZS7geK LfU25Ain4ju/+wUcig2LAk/xFi7t9634fkFfMwUALLakOF+Nv67YKEnuzcGr9xmE ck/PDhqmNr48D4q8rUOU+qY+XFVO/Xuecwiu63vxfo2ZNSWu8/DYDU5bryMnFqZw 4GRgjnLfCJ8cYfuueISU2QwbeRTcF7kWsCoCbJ+XCuxuWcNB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSjKNPpfkT+FOaHQDbF8FQn8zSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZWNmNWExNmQtNDBmOS0z NWY4LWIyNDYtODVmODQ3MTcwYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMOqXJiZz5dB7xeLes7cLmB8GsWGE0VgXzNgP+biofHMiPO7XLoqs1A Z3VlGdGWP9LQ87skWRgtodRplSNPw0MCp51bEOAzw8wDzXUU1bON6R7smfTSngyi Gh8UsFQUDAWEqnPfEHhcN0fZvYs6ZZty1moRZvrdC9bi3gnbTP1CKEjsrrZnIoYL Tiv1sGxQuCV61q/k2Ph9DMNPMGpkRIiaMuSpO2VINcQKlt8KC6Sy02vs24DpBNUb nRGHWt3Ubj3Y1/bTK4F7BwHLW8nR1KeuT4uEPE2BX8klYqwQDjNmiYSpurkTrn8T qdzmbCTf57qfKaCjMvkRaUnLJl1aQ5g= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:41 2025 by rpki-client