$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa File: 74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa (raw, json) Hash identifier: 6yfBKqDNN/5Bb8caDSum1P2kfNqgtJXaSlr8ninevuc= Subject key identifier: 7F:1B:42:9D:E2:5F:2D:1F:36:B5:17:79:F2:83:38:90:E8:B8:C4:37 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F43285848B1F62B6D4C3D62D2F014BB40 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 198949 IP address blocks: 198.135.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2b:6d:4c:3d:62:d2:f0:14:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=d4cb7745-18b5-4da9-bbbf-5641c5f65ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:d8:55:a6:01:00:6f:ad:5e:c9:31:1c:bb: 20:4a:76:82:89:7b:1a:b5:06:16:49:2e:6e:8b:95: f8:49:a1:26:25:04:ec:e0:45:5e:ee:a0:0a:53:03: 19:41:89:2d:fe:25:56:2b:55:d5:11:fd:6d:da:ef: be:5a:8e:5a:51:5a:9c:ad:d1:30:3e:2b:9c:f6:a5: be:5e:3f:e1:60:db:3c:3c:c7:b3:93:6b:df:45:09: 08:88:2e:a4:dd:67:48:20:9f:66:42:00:0d:44:f1: 6f:43:be:2e:32:ae:a7:e9:0c:91:4d:e8:f9:29:9c: 57:7a:76:0e:a2:18:01:af:24:44:26:7a:1d:04:17: 39:9e:7f:82:6b:41:eb:ad:9b:6d:73:96:bb:2e:fa: 64:3e:0d:c7:ff:80:ca:f1:91:1d:52:3c:54:97:af: 4a:9f:2e:f1:2b:e7:75:40:47:94:1f:9a:19:4c:d8: aa:98:91:83:7f:4c:22:9b:2a:7a:cd:29:36:5d:bc: 82:99:d0:d1:c9:2e:f2:bd:25:16:17:0c:28:e5:9a: 1e:14:14:b7:42:fa:c8:59:c2:52:0f:d8:a6:52:cb: a9:92:85:5b:46:02:60:48:b6:37:3a:45:36:4a:83: e4:c0:31:1b:3a:ee:5a:3d:27:4f:37:a6:f2:1a:b9: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1B:42:9D:E2:5F:2D:1F:36:B5:17:79:F2:83:38:90:E8:B8:C4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 198.135.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ef:8f:9b:70:3e:d9:0a:f8:2e:e0:86:89:e4:dd:82:70:7a: 91:e9:ea:1f:c5:cb:f4:8f:7a:07:13:e8:fa:66:3a:e4:ec:5e: 40:92:df:89:a2:a5:38:ca:4f:cb:4f:f4:95:93:10:24:22:75: 39:bf:b7:23:10:24:60:1a:28:4e:9f:58:13:11:46:af:94:3a: aa:93:ef:09:a2:df:2a:7e:56:d9:3a:3d:83:1e:fd:33:85:3f: af:f7:36:63:b3:82:17:24:3d:1a:1a:e6:89:a3:65:ea:37:bd: 11:fe:b5:d8:b7:23:dc:16:0e:a1:94:0f:ef:2d:00:02:50:e0: 8e:5e:66:1b:3e:a3:26:89:ba:cd:43:7b:8b:7a:8f:db:08:63: a4:a6:43:2a:13:fd:ea:f0:c2:48:e1:7d:4d:2c:b4:da:cd:01: fd:80:8c:b2:cf:e4:19:44:10:87:fd:46:bd:d7:6f:6f:5d:27: 1d:03:22:83:56:ea:e5:66:60:07:5f:e3:70:f0:2e:71:c7:73: 58:a3:fb:13:13:b3:cd:4d:9b:71:dc:0b:f9:73:f4:73:ae:31: bc:ce:8f:01:1d:d0:4e:5e:93:02:5c:50:4d:6a:2c:4e:8a:1f: 6d:e6:91:df:28:2f:93:01:29:35:c0:8a:91:ce:95:ca:f1:d3: 5f:ff:88:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ittTD1i0vAUu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZDRjYjc3NDUtMThiNS00ZGE5LWJiYmYtNTY0MWM1ZjY1YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAvYVaYBAG+tXskxHLsgSnaCiXsatQYWSS5u i5X4SaEmJQTs4EVe7qAKUwMZQYkt/iVWK1XVEf1t2u++Wo5aUVqcrdEwPiuc9qW+ Xj/hYNs8PMezk2vfRQkIiC6k3WdIIJ9mQgANRPFvQ74uMq6n6QyRTej5KZxXenYO ohgBryREJnodBBc5nn+Ca0HrrZttc5a7LvpkPg3H/4DK8ZEdUjxUl69Kny7xK+d1 QEeUH5oZTNiqmJGDf0wimyp6zSk2XbyCmdDRyS7yvSUWFwwo5ZoeFBS3QvrIWcJS D9imUsupkoVbRgJgSLY3OkU2SoPkwDEbOu5aPSdPN6byGrnXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8bQp3iXy0fNrUXefKDOJDouMQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvNzRkM2ZiMWQtY2RiMC0z ODRmLThjMTQtNGRkNDA1Y2Q5OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArvj5twPtkK+C7ghonk3YJwepHp6h/Fy/SPegcT6PpmOuTsXkCS34mi pTjKT8tP9JWTECQidTm/tyMQJGAaKE6fWBMRRq+UOqqT7wmi3yp+Vtk6PYMe/TOF P6/3NmOzghckPRoa5omjZeo3vRH+tdi3I9wWDqGUD+8tAAJQ4I5eZhs+oyaJus1D e4t6j9sIY6SmQyoT/erwwkjhfU0stNrNAf2AjLLP5BlEEIf9Rr3Xb29dJx0DIoNW 6uVmYAdf43DwLnHHc1ij+xMTs81Nm3HcC/lz9HOuMbzOjwEd0E5ekwJcUE1qLE6K H23mkd8oL5MBKTXAipHOlcrx01//iCo= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:50 2025 by rpki-client