$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/c31dea93-b429-35cd-b55d-6a72eb1f112b.roa File: c31dea93-b429-35cd-b55d-6a72eb1f112b.roa (raw, json) Hash identifier: iebH6Z43DHqD9JFDr8VLyvJ/V7r008DqHL26H59lL7Y= Subject key identifier: 27:24:AE:D2:25:35:91:0A:07:79:DE:E4:D3:A2:2E:8A:C5:02:E7:DD Certificate issuer: /CN=f5d93400-0a6f-4938-9925-856c6ace39df Certificate serial: 010D0C9F43285848BBBB84A6748F0F5B3EADFC60 Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/c31dea93-b429-35cd-b55d-6a72eb1f112b.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 40676 IP address blocks: 198.133.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:84:a6:74:8f:0f:5b:3e:ad:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=f5cc02bd-7dc7-493f-92b1-7861bf515357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:96:49:1a:e1:72:06:af:f2:c4:ef:c3:c8:ad: ff:8c:0b:42:33:96:60:1f:b6:bb:5c:83:74:da:ea: be:e5:c8:a8:b9:33:2d:df:81:28:92:43:d9:47:ba: f4:ec:94:a0:f5:2a:79:38:00:8c:69:46:85:b2:4d: b3:e7:a8:74:0a:41:e4:c7:0b:7a:0c:4b:4a:eb:86: a4:06:33:94:db:56:00:bd:a8:e1:94:4f:ba:33:7e: 88:89:de:fb:19:88:75:dc:af:cf:cc:4d:fd:20:47: ba:ad:4f:27:b0:29:31:dd:fb:d6:42:82:cb:7f:d4: 3e:6e:0f:97:06:99:c9:d9:27:d0:e2:9b:56:1b:ac: d8:f7:28:53:ff:22:9c:14:be:46:c3:be:5b:75:69: 91:a8:2b:1e:7e:97:1c:69:95:03:bd:e8:38:bf:ca: cd:7d:e9:75:7a:cf:68:81:ca:26:25:60:bc:55:10: b2:54:1b:79:af:dc:ca:02:04:78:93:36:bc:8c:ff: 77:1a:71:00:e4:b8:a2:81:4c:1d:67:bd:0a:85:94: eb:01:d2:d7:76:ff:aa:3a:73:55:80:b8:6d:d9:dc: b6:6d:a2:a6:6e:6c:34:1f:a8:0a:e9:f3:7c:ff:7a: 9d:c9:d1:fe:7f:98:f7:62:d3:93:9e:a7:c8:62:64: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:24:AE:D2:25:35:91:0A:07:79:DE:E4:D3:A2:2E:8A:C5:02:E7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/c31dea93-b429-35cd-b55d-6a72eb1f112b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl X509v3 Authority Key Identifier: keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer sbgp-ipAddrBlock: critical IPv4: 198.133.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:88:a2:e9:31:39:a8:e9:9e:51:b4:03:c6:ad:51:23:f2:f2: aa:1c:17:fd:1b:0f:83:91:35:f2:ce:a6:d5:7d:9c:2c:c7:38: 4e:40:0a:0d:03:cd:03:9d:e7:b9:4e:66:d1:a0:77:86:e4:ef: 3b:cf:71:62:2b:0a:a3:50:66:a1:26:18:84:0d:70:1c:77:48: 53:bd:ac:7c:83:ac:4d:45:04:76:58:53:ce:28:ab:52:08:f5: 58:fd:18:0d:1f:4f:e1:52:24:48:08:6c:f7:75:fb:83:fb:a8: 90:92:9f:e0:67:1c:e1:f5:a3:f4:80:16:27:56:e9:fc:6c:cc: 29:41:af:f0:8c:ef:53:81:6a:fe:92:3f:0a:23:ad:42:ca:9b: 23:75:f4:a3:e9:f7:40:d8:51:7c:2e:de:28:16:f3:4a:08:9a: 57:20:40:e2:8d:86:55:45:1f:dc:76:84:0c:cb:56:d0:ba:6c: 37:93:94:b0:cd:46:cb:6f:44:c4:ca:89:d3:2f:52:43:76:cd: a2:d9:d7:3f:8d:1b:98:63:81:84:36:41:c8:49:cd:9d:44:5c: 14:77:6a:1c:6b:89:6e:a9:97:15:fb:8f:73:de:46:60:82:cb: fa:39:89:f9:61:1d:93:24:8e:80:b3:a2:fc:0d:d2:39:39:1c: 21:bc:7f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4SmdI8PWz6t/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVkOTM0MDAtMGE2Zi00OTM4LTk5MjUtODU2YzZhY2Uz OWRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZjVjYzAyYmQtN2RjNy00OTNmLTkyYjEtNzg2MWJmNTE1MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZZJGuFyBq/yxO/DyK3/jAtCM5ZgH7a7XIN0 2uq+5ciouTMt34EokkPZR7r07JSg9Sp5OACMaUaFsk2z56h0CkHkxwt6DEtK64ak BjOU21YAvajhlE+6M36Iid77GYh13K/PzE39IEe6rU8nsCkx3fvWQoLLf9Q+bg+X BpnJ2SfQ4ptWG6zY9yhT/yKcFL5Gw75bdWmRqCsefpccaZUDveg4v8rNfel1es9o gcomJWC8VRCyVBt5r9zKAgR4kza8jP93GnEA5LiigUwdZ70KhZTrAdLXdv+qOnNV gLht2dy2baKmbmw0H6gK6fN8/3qdydH+f5j3YtOTnqfIYmSKHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCckrtIlNZEKB3ne5NOiLorFAufdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5 MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZjNmFjZTM5ZGYvYzMxZGVhOTMtYjQyOS0z NWNkLWI1NWQtNmE3MmViMWYxMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjVkOTM0MDAtMGE2Zi00OTM4LTk5 MjUtODU2YzZhY2UzOWRmL2Y1ZDkzNDAwLTBhNmYtNDkzOC05OTI1LTg1NmM2YWNl MzlkZi5jcmwwHwYDVR0jBBgwFoAUrA+Cm0QWCz2wP5W2ggDuFayzH2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZj NmFjZTM5ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGIoukxOajpnlG0A8atUSPy8qocF/0bD4ORNfLOptV9nCzHOE5ACg0D zQOd57lOZtGgd4bk7zvPcWIrCqNQZqEmGIQNcBx3SFO9rHyDrE1FBHZYU84oq1II 9Vj9GA0fT+FSJEgIbPd1+4P7qJCSn+BnHOH1o/SAFidW6fxszClBr/CM71OBav6S PwojrULKmyN19KPp90DYUXwu3igW80oImlcgQOKNhlVFH9x2hAzLVtC6bDeTlLDN RstvRMTKidMvUkN2zaLZ1z+NG5hjgYQ2QchJzZ1EXBR3ahxriW6plxX7j3PeRmCC y/o5iflhHZMkjoCzovwN0jk5HCG8f3g= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:27 2025 by rpki-client