$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa File: 8158f8a6-7717-3c4d-8253-18c3677c262c.roa (raw, json) Hash identifier: wehjI7NDtxgEaC/if+t16/rPadMHapfYDIkQYbugmPU= Subject key identifier: 5E:FF:C1:90:23:4B:BB:94:2C:90:06:B3:73:BE:FA:00:AE:14:0B:5C Certificate issuer: /CN=48e7861e-5414-403c-8268-a7d7b18f405d Certificate serial: 010D0C9F43285848BE862F38F7BB4B6C80EC8F00 Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 20325 IP address blocks: 198.27.29.0/24 maxlen: 24 198.27.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2f:38:f7:bb:4b:6c:80:ec:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=035d06fb-7071-40af-a5f3-4d51eff0380e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:8e:cc:e5:d6:16:23:42:c5:f1:3a:14:49: fe:9d:de:7d:9a:66:ba:db:e6:8e:3a:52:4b:79:f3: 6a:73:a2:c4:35:83:8e:72:77:cb:79:19:fc:d6:0d: 87:7c:74:c5:66:e8:94:cf:ed:dd:60:78:b5:b4:f9: 55:62:83:cd:51:fd:4b:48:67:0d:5a:07:7a:19:56: 30:89:7b:eb:c1:53:03:18:a8:b3:72:04:1e:8f:7f: 40:8d:9e:06:68:f2:7d:c2:c9:b8:94:a7:6b:39:2f: b4:40:dc:12:7b:17:64:16:fc:b4:13:8d:76:31:15: b8:17:e4:c1:7d:26:5e:21:ea:d0:25:21:a0:71:19: a0:9c:8c:6d:5f:e7:ba:48:2b:d1:57:c0:07:5b:33: 3f:af:62:bc:9d:a8:f0:55:02:60:65:f7:79:0e:5e: 2f:59:76:81:38:d8:1f:ff:f8:d0:cf:7f:84:ac:cb: f9:b4:ed:c7:9c:b1:fa:85:5a:36:75:cb:7f:8a:49: b0:a6:09:6f:6c:37:3c:2f:c0:28:6a:13:9d:5d:bf: ce:96:f3:68:48:7e:a3:9e:d0:1b:a7:73:6b:e1:a8: 29:8c:b8:95:35:9c:6d:67:18:dd:6b:f2:ac:13:1b: d8:36:cf:7d:eb:39:b6:54:e0:d6:96:ee:53:62:4e: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FF:C1:90:23:4B:BB:94:2C:90:06:B3:73:BE:FA:00:AE:14:0B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl X509v3 Authority Key Identifier: keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer sbgp-ipAddrBlock: critical IPv4: 198.27.29.0-198.27.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:34:8a:b4:2a:e8:ad:18:c6:69:e2:c4:bc:2d:8f:6e:aa:b5: 39:1a:09:62:83:ad:ba:32:e8:40:87:30:34:b5:ea:e8:3e:fe: bb:56:e5:84:34:a6:24:a3:2b:b6:68:61:2d:c5:34:31:8c:02: 48:41:70:01:eb:e2:19:29:29:5b:3d:f2:29:0b:92:c4:b0:f2: f1:90:9f:18:3c:ca:cf:0a:16:bc:ca:4b:0d:14:79:61:36:6b: d5:e6:7b:c9:90:e8:19:9e:89:d5:6b:94:95:12:ab:af:97:8e: 15:01:db:ef:37:95:39:78:95:8b:c2:b9:7a:72:32:a1:7f:38: 89:c6:82:1b:6a:fe:eb:a3:d3:32:2f:67:bd:ff:85:9e:a5:fd: de:26:59:00:28:10:dd:95:65:a7:10:d2:24:1c:5a:a9:3b:71: a6:6d:24:6c:9d:a6:13:e6:19:d1:4f:d3:f9:57:a4:6f:5c:68: 41:3d:a8:a5:3b:65:e8:d4:a1:c8:2f:d8:c3:4c:98:27:af:d7: 29:95:44:02:a4:78:e0:37:be:50:28:cc:fe:c3:ca:ba:36:91: db:8b:ec:ac:82:be:0c:b9:82:13:9f:a8:bd:73:5c:66:a4:7b: 9c:4d:64:17:83:4b:77:68:08:f8:42:42:0f:e1:a8:a6:e7:40: 37:f9:b6:97 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEi+hi8497tLbIDsjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlNzg2MWUtNTQxNC00MDNjLTgyNjgtYTdkN2IxOGY0 MDVkMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MDM1ZDA2ZmItNzA3MS00MGFmLWE1ZjMtNGQ1MWVmZjAzODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNuOzOXWFiNCxfE6FEn+nd59mma62+aOOlJL efNqc6LENYOOcnfLeRn81g2HfHTFZuiUz+3dYHi1tPlVYoPNUf1LSGcNWgd6GVYw iXvrwVMDGKizcgQej39AjZ4GaPJ9wsm4lKdrOS+0QNwSexdkFvy0E412MRW4F+TB fSZeIerQJSGgcRmgnIxtX+e6SCvRV8AHWzM/r2K8najwVQJgZfd5Dl4vWXaBONgf //jQz3+ErMv5tO3HnLH6hVo2dct/ikmwpglvbDc8L8AoahOdXb/OlvNoSH6jntAb p3Nr4agpjLiVNZxtZxjda/KsExvYNs996zm2VODWlu5TYk7wKwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFF7/wZAjS7uULJAGs3O++gCuFAtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OGU3 ODYxZS01NDE0LTQwM2MtODI2OC1hN2Q3YjE4ZjQwNWQvODE1OGY4YTYtNzcxNy0z YzRkLTgyNTMtMThjMzY3N2MyNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDhlNzg2MWUtNTQxNC00MDNjLTgy NjgtYTdkN2IxOGY0MDVkLzQ4ZTc4NjFlLTU0MTQtNDAzYy04MjY4LWE3ZDdiMThm NDA1ZC5jcmwwHwYDVR0jBBgwFoAUT5mdMEe6im8d4AZnurpO1R58QpgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OGU3ODYxZS01NDE0LTQwM2MtODI2OC1hN2Q3 YjE4ZjQwNWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGGx0D BAXGGwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQzSKtCrorRjGaeLEvC2Pbqq1ORoJYoOtujLoQIcwNLXq 6D7+u1blhDSmJKMrtmhhLcU0MYwCSEFwAeviGSkpWz3yKQuSxLDy8ZCfGDzKzwoW vMpLDRR5YTZr1eZ7yZDoGZ6J1WuUlRKrr5eOFQHb7zeVOXiVi8K5enIyoX84icaC G2r+66PTMi9nvf+FnqX93iZZACgQ3ZVlpxDSJBxaqTtxpm0kbJ2mE+YZ0U/T+Vek b1xoQT2opTtl6NShyC/Yw0yYJ6/XKZVEAqR44De+UCjM/sPKujaR24vsrIK+DLmC E5+ovXNcZqR7nE1kF4NLd2gI+EJCD+GopudAN/m2lw== -----END CERTIFICATE-----Generated at Fri Apr 11 21:36:13 2025 by rpki-client