$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa File: af5b6246-c953-3c3b-93c3-790f63471378.roa (raw, json) Hash identifier: QYWYlIZwOcNyy4UosXdmPGrPTv7OQEH4QeluDF5iCc8= Subject key identifier: 04:7D:C6:E7:67:90:B6:7B:64:61:61:70:AF:BB:C5:89:B4:24:17:E1 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F43285848BE8619EB68E39507050BDDC0 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 14555 IP address blocks: 198.23.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:19:eb:68:e3:95:07:05:0b:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=5a4607e3-b93d-45f8-be5b-5742df10e2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:9a:39:93:0a:5b:08:25:66:d8:0b:6b:dc: 91:7f:57:f1:b5:3e:b5:04:4e:1b:22:2c:1d:54:ce: 0f:4c:26:0d:54:cc:eb:9b:39:53:a1:b9:20:3e:5d: 54:17:fb:52:ce:61:98:d6:06:97:9d:b8:07:66:ac: 43:4e:1a:1d:b7:c3:e8:a0:07:7d:9b:a7:2a:ad:9d: 51:69:73:56:ff:d4:ff:fd:48:45:ab:e4:66:82:fd: 18:f3:35:58:1c:90:a1:54:b6:21:91:7c:3b:9c:3a: 7b:b7:fa:68:a8:ae:16:59:c9:3b:49:40:31:51:52: 82:9e:cb:59:f2:4b:e1:dc:57:03:3c:a1:88:c8:b7: 62:15:e8:2d:4f:1d:a2:c8:4c:99:69:96:f2:07:2c: 1d:a6:5a:96:3f:6d:10:52:e3:a8:6b:23:64:6d:70: 64:d3:53:95:a8:76:0e:5c:75:7f:04:60:11:01:1c: ca:5e:d3:b9:de:05:2b:f2:f3:d3:a4:ac:b8:0f:ca: 17:c5:14:b5:45:f7:20:31:20:7e:1b:90:28:2d:c3: 77:92:e7:98:f9:9b:6d:70:7b:e3:a7:70:2d:5f:0f: 76:ff:e7:e9:5b:6b:0c:c9:b6:83:7f:8b:0a:67:04: 0b:76:62:12:0b:7b:49:7b:99:24:c5:86:6b:18:cf: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7D:C6:E7:67:90:B6:7B:64:61:61:70:AF:BB:C5:89:B4:24:17:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:86:35:eb:57:42:26:2f:98:b0:c2:78:ea:db:86:e2:47:e6: 52:8e:d4:0c:1c:ba:91:46:f3:6c:8c:3c:45:e4:f5:d2:e1:6f: 89:4e:97:1e:e0:f3:90:6a:a5:21:e3:f5:4c:2b:2e:ef:44:e3: eb:bb:30:cf:22:cb:e9:ec:71:0b:4b:dd:b6:a7:80:4f:f0:21: 8a:df:51:ef:a7:39:96:92:3b:e9:f4:70:43:18:2f:13:b1:11: 82:98:b7:8e:0b:08:7f:81:73:b6:90:f0:e5:85:20:8a:a4:8b: 40:2a:6d:d4:91:3e:5f:8b:8f:3f:37:b0:39:15:c4:84:00:ac: da:59:70:e8:3e:57:9d:7e:41:21:f6:f7:c4:b8:68:2e:ac:0b: 43:9a:e7:4d:6b:48:f6:85:a4:c8:cd:78:f0:24:d3:b7:0d:c3: 41:43:ab:96:1b:04:d5:41:fb:42:00:04:92:21:d2:a8:51:6f: 8b:cc:b2:c1:72:78:a8:94:f3:62:c1:9d:8b:63:5a:a6:f1:a8: 91:51:dd:c8:03:95:90:36:92:0f:e1:5d:06:56:8e:5a:65:24: 64:5b:46:49:b0:57:82:de:69:e4:32:55:61:7f:07:41:13:45: 89:c1:c3:a4:ec:12:65:5a:64:92:bc:6b:f3:32:89:d6:e0:17: d5:47:6a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hhnraOOVBwUL3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NWE0NjA3ZTMtYjkzZC00NWY4LWJlNWItNTc0MmRmMTBlMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCyaOZMKWwglZtgLa9yRf1fxtT61BE4bIiwd VM4PTCYNVMzrmzlTobkgPl1UF/tSzmGY1gaXnbgHZqxDThodt8PooAd9m6cqrZ1R aXNW/9T//UhFq+Rmgv0Y8zVYHJChVLYhkXw7nDp7t/poqK4WWck7SUAxUVKCnstZ 8kvh3FcDPKGIyLdiFegtTx2iyEyZaZbyBywdplqWP20QUuOoayNkbXBk01OVqHYO XHV/BGARARzKXtO53gUr8vPTpKy4D8oXxRS1RfcgMSB+G5AoLcN3kueY+ZttcHvj p3AtXw92/+fpW2sMybaDf4sKZwQLdmISC3tJe5kkxYZrGM+7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR9xudnkLZ7ZGFhcK+7xYm0JBfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvYWY1YjYyNDYtYzk1My0z YzNiLTkzYzMtNzkwZjYzNDcxMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExhcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGGNetXQiYvmLDCeOrbhuJH5lKO1AwcupFG82yMPEXk9dLhb4lOlx7g 85BqpSHj9UwrLu9E4+u7MM8iy+nscQtL3bangE/wIYrfUe+nOZaSO+n0cEMYLxOx EYKYt44LCH+Bc7aQ8OWFIIqki0AqbdSRPl+Ljz83sDkVxIQArNpZcOg+V51+QSH2 98S4aC6sC0Oa501rSPaFpMjNePAk07cNw0FDq5YbBNVB+0IABJIh0qhRb4vMssFy eKiU82LBnYtjWqbxqJFR3cgDlZA2kg/hXQZWjlplJGRbRkmwV4LeaeQyVWF/B0ET RYnBw6TsEmVaZJK8a/MyidbgF9VHavY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:55 2025 by rpki-client