$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa File: bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa (raw, json) Hash identifier: aRDHlLXkanrkRl1LxjrxAX7RujSYvRKPXpJT3Hya3M8= Subject key identifier: DD:57:E6:E8:A0:AF:00:24:D4:5F:7B:28:3A:62:E1:86:05:94:24:67 Certificate issuer: /CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Certificate serial: 010D0C9F432858487E50644DF6E63D8981C95840 Authority key identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa Signing time: Fri 10 Jan 2025 02:00:40 +0000 ROA not before: Fri 10 Jan 2025 02:00:40 +0000 ROA not after: Thu 10 Apr 2025 01:00:40 +0000 asID: 54957 IP address blocks: 198.162.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:50:64:4d:f6:e6:3d:89:81:c9:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Validity Not Before: Jan 10 02:00:40 2025 GMT Not After : Apr 10 01:00:40 2025 GMT Subject: CN=1f783ef6-03fa-4f23-8ab7-f38edfa56058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:ff:d1:42:f1:b9:b1:38:f5:52:11:8b:de: bd:7d:74:ac:91:f2:66:e2:57:7a:25:0f:53:ec:64: 94:6b:2a:df:71:57:9c:15:70:ae:a4:b3:f5:29:8b: e9:1f:e5:aa:17:dc:1b:71:24:0e:a5:b5:87:23:7e: b3:e3:d6:b1:c7:90:bd:3b:f3:ec:e4:4c:ec:e0:cf: 8b:88:59:c3:97:4d:f6:c0:7a:4c:d1:ea:c6:62:a3: 6f:31:98:c2:03:34:a8:3f:0d:ac:de:72:4e:08:33: 41:1f:e2:1f:8f:a5:9d:6f:42:eb:5f:18:32:78:d8: d6:bd:0c:f9:4b:3a:8f:c6:8e:77:e6:f6:49:cb:c1: 31:4f:ad:96:3f:14:78:1e:5d:69:b1:34:23:9c:d9: c0:22:e1:3d:8d:bc:22:f5:52:39:f0:f4:2e:3a:22: 3b:5b:9a:32:b4:f1:ea:42:43:7c:b6:70:1c:c7:8b: 06:9d:e0:f1:c3:4b:5f:68:fc:27:f4:98:0a:35:a0: 60:98:59:93:ad:1e:f3:45:96:63:47:fd:25:08:9f: 21:71:b7:a2:4c:1e:97:42:e5:c6:fc:e3:26:d6:ad: a6:8d:88:4b:71:c6:47:25:61:ba:9b:b6:c0:d4:04: f3:88:83:c7:b5:9c:f9:b1:9c:9f:7c:ab:a2:04:03: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:57:E6:E8:A0:AF:00:24:D4:5F:7B:28:3A:62:E1:86:05:94:24:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl X509v3 Authority Key Identifier: keyid:E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer sbgp-ipAddrBlock: critical IPv4: 198.162.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:67:fd:74:50:4f:9e:2b:dd:1e:58:04:f3:6c:ba:0f:26:5d: 10:43:df:13:12:f5:d1:38:44:7a:ec:91:46:f9:ce:e2:83:f1: a0:96:0d:03:84:22:78:53:7d:96:94:a5:40:dc:f0:e9:74:16: 1c:b5:ee:2a:89:24:fd:28:4f:60:0d:22:ed:a1:29:71:9a:e5: 0e:92:0f:bb:80:d9:44:83:d3:fe:50:93:04:c0:01:94:bc:62: ec:d3:90:73:a1:44:df:ee:88:ed:50:ee:92:4a:68:5d:07:5b: 2e:e2:01:07:fc:83:1c:35:53:43:c0:dc:4d:a1:4c:06:e4:8b: 9f:21:92:fb:b6:38:37:c8:fc:9e:3b:bc:c4:95:b6:3e:8f:41: d1:ce:42:8e:d7:cf:33:01:d0:77:17:29:97:63:61:69:b7:fb: 5f:ef:a3:01:77:dc:ec:fc:5d:70:d8:59:4d:83:f7:08:37:6e: e4:b3:df:39:3e:98:cd:d6:8e:6a:37:86:39:f5:d4:95:52:ab: f9:d7:2e:bc:40:62:ce:42:c8:79:0e:8b:23:f9:72:0f:9f:71: 83:8a:c4:02:ab:f6:3b:44:45:21:d6:9c:40:f3:ba:fc:a2:7c: a3:26:e2:8e:b6:85:6e:03:88:06:d0:23:18:35:32:ab:59:78: e3:e7:18:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGRN9uY9iYHJWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTRkZGQtYTRkMy00MmY4LWE4MTAtMjY4ZTc5YTAz MTg0MB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk MWY3ODNlZjYtMDNmYS00ZjIzLThhYjctZjM4ZWRmYTU2MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT3/0ULxubE49VIRi969fXSskfJm4ld6JQ9T 7GSUayrfcVecFXCupLP1KYvpH+WqF9wbcSQOpbWHI36z49axx5C9O/Ps5Ezs4M+L iFnDl032wHpM0erGYqNvMZjCAzSoPw2s3nJOCDNBH+Ifj6Wdb0LrXxgyeNjWvQz5 SzqPxo535vZJy8ExT62WPxR4Hl1psTQjnNnAIuE9jbwi9VI58PQuOiI7W5oytPHq QkN8tnAcx4sGneDxw0tfaPwn9JgKNaBgmFmTrR7zRZZjR/0lCJ8hcbeiTB6XQuXG /OMm1q2mjYhLccZHJWG6m7bA1ATziIPHtZz5sZyffKuiBANmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1X5uigrwAk1F97KDpi4YYFlCRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYzlh NGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhlNzlhMDMxODQvYmI2YmNmNDctNjU1NC0z ZDM0LWI5YzUtOWFhYjJkMGE4NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWM5YTRkZGQtYTRkMy00MmY4LWE4 MTAtMjY4ZTc5YTAzMTg0L2FjOWE0ZGRkLWE0ZDMtNDJmOC1hODEwLTI2OGU3OWEw MzE4NC5jcmwwHwYDVR0jBBgwFoAU5QgC9/OZ3Tdagctm6iX04Fn7eocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYzlhNGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhl NzlhMDMxODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZn/XRQT54r3R5YBPNsug8mXRBD3xMS9dE4RHrskUb5zuKD8aCWDQOE InhTfZaUpUDc8Ol0Fhy17iqJJP0oT2ANIu2hKXGa5Q6SD7uA2USD0/5QkwTAAZS8 YuzTkHOhRN/uiO1Q7pJKaF0HWy7iAQf8gxw1U0PA3E2hTAbki58hkvu2ODfI/J47 vMSVtj6PQdHOQo7XzzMB0HcXKZdjYWm3+1/vowF33Oz8XXDYWU2D9wg3buSz3zk+ mM3Wjmo3hjn11JVSq/nXLrxAYs5CyHkOiyP5cg+fcYOKxAKr9jtERSHWnEDzuvyi fKMm4o62hW4DiAbQIxg1MqtZeOPnGBk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:11:06 2025 by rpki-client