$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa File: 643d361b-c7bb-38de-aa52-f1c332bae5b9.roa (raw, json) Hash identifier: CMVFb+kyz8wDVNLQJL4mFa71zRnDy06P0VgqkVZAqJo= Subject key identifier: CB:DD:03:27:64:29:2D:73:76:A7:FF:51:C2:4C:96:08:35:0A:56:30 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F432858488AE0A734423373C5D653E2C0 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 109 IP address blocks: 198.135.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:a7:34:42:33:73:c5:d6:53:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=e30857f9-234f-4a6f-a1db-05c3d6538fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:a2:52:19:22:db:f8:82:94:2d:b5:df:70: a0:ae:0e:f9:8e:4f:f7:ef:ad:bd:3c:ef:b6:47:42: d4:c9:20:6c:7c:60:64:bc:b1:af:eb:1e:e4:8e:38: 1c:5d:e8:c2:1c:fc:79:ff:cf:11:46:64:6e:8b:25: eb:1f:5b:af:70:db:6f:83:c7:99:46:14:e8:93:30: 99:5f:bb:de:06:e2:ce:79:30:64:69:bf:47:0a:b5: a7:b2:c3:f7:ec:c7:2d:ce:c4:bf:b4:10:f8:e0:b5: 04:30:b1:b6:48:b0:93:75:8f:db:1e:62:79:d4:15: b4:11:81:a6:c1:0e:84:d2:5b:31:d2:a4:48:95:c2: 04:31:b5:80:68:75:91:40:34:8f:c6:b9:0c:ed:a5: dd:d3:19:9b:50:dc:0a:48:3f:9d:75:3a:bf:50:14: e5:bf:ab:08:ac:a8:0c:e7:8a:52:d2:f7:f3:e6:9c: 2d:22:0d:b0:f5:53:31:0b:60:fe:33:d0:63:57:c9: 07:c0:f1:ed:08:a9:01:49:9e:8c:91:00:ed:c3:7a: fd:fa:11:25:7e:dd:67:0e:72:a6:49:7d:ef:a1:19: a0:09:68:71:75:dc:55:b7:9b:b6:c3:c1:4d:77:cb: 58:ee:70:dc:6c:c9:90:6b:c5:20:64:a7:70:30:7b: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DD:03:27:64:29:2D:73:76:A7:FF:51:C2:4C:96:08:35:0A:56:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 198.135.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3f:f3:c6:c8:e3:d8:15:f9:8d:0a:41:5f:75:04:95:fd:22: 78:c0:4f:4a:24:4f:9e:8f:02:4f:10:14:93:a3:7d:f6:e4:bf: 21:17:6c:23:36:8c:71:0e:71:7e:09:9f:ef:c3:d8:ba:f9:eb: f4:10:b6:82:78:89:83:b4:df:ae:2e:b8:dd:e0:c3:f4:f4:90: 4b:b4:95:36:d6:a4:c1:3c:68:78:08:10:a4:01:f9:4b:17:0b: 63:f0:e0:40:c9:6b:c6:8a:6c:5f:2b:78:d7:15:fc:ea:34:37: a9:12:bc:eb:da:7c:5d:db:45:8e:0d:72:52:96:4e:e5:09:70: 03:86:cd:0c:f7:7b:0c:99:fd:b8:95:84:78:31:d5:e5:d4:0f: 56:d2:a7:6b:9a:27:b3:d6:53:bd:a3:26:d1:02:2e:36:da:11: 71:21:b9:9b:f9:64:9d:80:d2:38:de:45:a2:65:74:4a:a2:5b: 61:54:ba:5b:3e:e8:f8:3f:1f:b3:50:f0:24:84:6e:8c:2e:04: 76:43:73:f2:91:18:62:b5:02:d2:75:33:86:e5:61:9e:f3:c3: af:4a:44:44:af:54:7e:c5:f3:e5:1f:29:ff:e7:36:a7:f2:69: 58:72:e2:73:e7:68:9b:03:d4:8d:f3:4f:fd:2f:90:49:01:28: cb:73:39:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4Kc0QjNzxdZT4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk ZTMwODU3ZjktMjM0Zi00YTZmLWExZGItMDVjM2Q2NTM4ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkuiUhki2/iClC2133Cgrg75jk/37629PO+2 R0LUySBsfGBkvLGv6x7kjjgcXejCHPx5/88RRmRuiyXrH1uvcNtvg8eZRhTokzCZ X7veBuLOeTBkab9HCrWnssP37MctzsS/tBD44LUEMLG2SLCTdY/bHmJ51BW0EYGm wQ6E0lsx0qRIlcIEMbWAaHWRQDSPxrkM7aXd0xmbUNwKSD+ddTq/UBTlv6sIrKgM 54pS0vfz5pwtIg2w9VMxC2D+M9BjV8kHwPHtCKkBSZ6MkQDtw3r9+hElft1nDnKm SX3voRmgCWhxddxVt5u2w8FNd8tY7nDcbMmQa8UgZKdwMHto/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvdAydkKS1zdqf/UcJMlgg1ClYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvNjQzZDM2MWItYzdiYi0z OGRlLWFhNTItZjFjMzMyYmFlNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU/88bI49gV+Y0KQV91BJX9InjAT0okT56PAk8QFJOjffbkvyEXbCM2 jHEOcX4Jn+/D2Lr56/QQtoJ4iYO0364uuN3gw/T0kEu0lTbWpME8aHgIEKQB+UsX C2Pw4EDJa8aKbF8reNcV/Oo0N6kSvOvafF3bRY4NclKWTuUJcAOGzQz3ewyZ/biV hHgx1eXUD1bSp2uaJ7PWU72jJtECLjbaEXEhuZv5ZJ2A0jjeRaJldEqiW2FUuls+ 6Pg/H7NQ8CSEbowuBHZDc/KRGGK1AtJ1M4blYZ7zw69KRESvVH7F8+UfKf/nNqfy aVhy4nPnaJsD1I3zT/0vkEkBKMtzOS0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:18 2025 by rpki-client