$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: bDbzY97xjSTiIaTMPeQqj3aWslNwDVV4o1cMmWMNKF4= Subject key identifier: 9C:E7:73:CA:3F:FC:9E:0B:7A:3D:2E:8D:C3:27:DB:8C:A0:17:E0:41 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F43285848897B1E8525981380EEE4EE00 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Tue 14 Jan 2025 02:00:39 +0000 ROA not before: Tue 14 Jan 2025 02:00:39 +0000 ROA not after: Mon 14 Apr 2025 01:00:39 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:7b:1e:85:25:98:13:80:ee:e4:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jan 14 02:00:39 2025 GMT Not After : Apr 14 01:00:39 2025 GMT Subject: CN=20cd5ddb-eb27-4ae5-a18c-652cc3987557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:98:90:d6:a3:36:5c:c3:1b:27:1b:8b:60: a9:01:9e:4e:ae:85:61:24:e2:43:1c:93:b6:88:f3: 75:d4:f4:17:7f:d1:49:01:c2:f4:98:08:23:dc:3d: 99:f7:e2:a3:9f:a2:88:24:f3:93:2e:87:61:fe:87: a5:73:2d:33:cc:f2:24:bb:29:e0:98:bc:12:90:b5: 4d:e0:d1:3c:aa:9c:a5:b6:08:a8:20:0e:ae:6c:2b: 5d:01:92:1c:ae:3f:b6:a8:e0:e1:bc:1e:82:64:6b: 12:8b:92:f9:e7:e2:85:fc:21:6e:80:f3:7f:9f:5b: 85:2c:f7:60:10:b6:e5:72:00:a5:ea:11:46:80:c8: 24:43:f4:ce:76:74:fe:24:dc:f7:55:98:4d:82:7d: 44:a5:f4:e8:57:a1:1e:7b:e4:bf:83:13:9e:1c:ee: 87:ab:f1:da:73:32:ee:66:83:69:c8:bc:d2:13:0e: 16:3e:a5:b3:b9:35:a2:cd:74:83:79:65:90:01:c2: 52:c3:19:d7:3a:53:31:ed:7c:84:20:e2:a2:60:ad: be:bd:82:89:24:c4:d7:21:07:14:80:88:d0:5f:1d: 10:8a:d0:88:2c:23:cb:b2:9c:60:ef:f9:4d:05:f5: 33:70:2e:43:b2:67:ea:8b:68:c6:5b:14:88:f6:8c: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:73:CA:3F:FC:9E:0B:7A:3D:2E:8D:C3:27:DB:8C:A0:17:E0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:fc:0d:5b:4b:ea:e8:4d:6c:ee:10:5c:f5:5d:05:b2:02:2c: 01:ab:80:f3:0f:53:b4:30:eb:92:92:82:d8:78:1e:60:04:4d: 8e:0e:c5:c7:03:fb:d9:51:32:ed:5d:ac:67:ba:1e:07:f9:25: 33:8f:c6:b4:2d:29:0d:3f:50:15:31:57:74:3d:a8:dd:69:e4: ee:45:41:29:07:f8:9e:90:1f:11:5f:46:34:61:c3:2e:dd:72: ec:3c:bd:2b:d6:2b:6d:4b:99:c4:6c:d3:e1:14:e2:08:60:20: b8:2d:f4:10:73:d6:26:fb:3e:18:78:c3:50:ea:80:8c:08:c9: b0:d9:ee:10:62:50:08:ed:20:b3:bb:23:5a:2c:84:6d:22:22: 96:d3:57:69:1e:8a:86:21:ed:fa:e3:8c:07:3e:c1:66:42:ca: e3:af:65:8c:df:cd:07:50:bb:6f:17:5a:eb:68:6b:79:94:ac: 64:eb:a9:c8:11:70:f6:47:ff:1f:25:a7:f4:83:b5:24:3a:2f: 79:20:43:c0:89:aa:13:f4:07:cc:d6:b7:12:ac:75:eb:b4:59: 81:a7:43:3d:d6:5c:94:02:91:c0:25:bc:a9:b2:86:94:5a:2c: 23:98:c8:f5:ba:07:85:73:eb:e6:86:6b:8b:9d:a7:ed:4c:6e: 1f:73:4f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJex6FJZgTgO7k7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDExNDAyMDAzOVoXDTI1MDQxNDAxMDAzOVowLzEtMCsGA1UEAxMk MjBjZDVkZGItZWIyNy00YWU1LWExOGMtNjUyY2MzOTg3NTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsmYkNajNlzDGycbi2CpAZ5OroVhJOJDHJO2 iPN11PQXf9FJAcL0mAgj3D2Z9+Kjn6KIJPOTLodh/oelcy0zzPIkuyngmLwSkLVN 4NE8qpyltgioIA6ubCtdAZIcrj+2qODhvB6CZGsSi5L55+KF/CFugPN/n1uFLPdg ELblcgCl6hFGgMgkQ/TOdnT+JNz3VZhNgn1EpfToV6Eee+S/gxOeHO6Hq/HaczLu ZoNpyLzSEw4WPqWzuTWizXSDeWWQAcJSwxnXOlMx7XyEIOKiYK2+vYKJJMTXIQcU gIjQXx0QitCILCPLspxg7/lNBfUzcC5Dsmfqi2jGWxSI9oz6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJznc8o//J4Lej0ujcMn24ygF+BBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj8DVtL6uhNbO4QXPVdBbICLAGrgPMPU7Qw65KSgth4HmAETY4OxccD +9lRMu1drGe6Hgf5JTOPxrQtKQ0/UBUxV3Q9qN1p5O5FQSkH+J6QHxFfRjRhwy7d cuw8vSvWK21LmcRs0+EU4ghgILgt9BBz1ib7Phh4w1DqgIwIybDZ7hBiUAjtILO7 I1oshG0iIpbTV2keioYh7frjjAc+wWZCyuOvZYzfzQdQu28XWutoa3mUrGTrqcgR cPZH/x8lp/SDtSQ6L3kgQ8CJqhP0B8zWtxKsdeu0WYGnQz3WXJQCkcAlvKmyhpRa LCOYyPW6B4Vz6+aGa4udp+1Mbh9zT0g= -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:22 2025 by rpki-client