$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa File: ade61511-8398-3e2e-b0df-4582caf49fa7.roa (raw, json) Hash identifier: PuXYTWp/zWUEbSkC8vER0M8J5UlmA7ngGh+dl4hmdPc= Subject key identifier: 9F:99:B0:4E:87:93:34:2A:C3:37:A0:2E:83:E5:F1:85:C3:8A:58:25 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285848A996168139150D3EB2F61280 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395567 IP address blocks: 198.73.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:16:81:39:15:0d:3e:b2:f6:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=b47d2712-9897-457b-a952-9b4be768efcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:f0:40:44:91:73:65:5a:a6:34:0f:2b:4b: e1:3b:e2:ff:ef:d9:d0:f7:02:2a:20:ae:d5:89:04: ac:0e:a6:a1:42:c7:47:62:48:f1:12:cf:0b:40:2a: 69:65:ad:ae:a2:44:b9:d8:de:74:7c:f8:c0:af:b3: 03:7c:6d:ee:81:5d:c0:5d:07:33:24:9a:60:65:bd: f8:8a:85:dc:ef:70:1e:17:c8:f6:65:1a:c4:d0:53: 14:2f:ff:43:bb:e7:06:9d:c5:34:8a:71:a3:bc:ac: af:d3:34:6e:03:ac:d2:59:b1:bd:89:b2:98:1a:d3: c0:e2:62:75:d5:28:32:82:e4:ae:5a:26:a8:56:49: 3b:03:d3:b0:8a:3b:e7:61:6d:7c:75:45:ac:23:24: 06:f8:2d:7a:8c:5e:05:35:ec:22:44:9d:80:ac:e0: 40:d6:00:6e:ae:20:5e:c4:fd:3d:69:fb:24:85:d4: 9c:48:93:eb:05:d8:c7:b9:16:93:c6:cb:9d:4a:af: c2:2f:91:a7:74:16:94:38:06:0d:d3:5b:49:1a:26: c1:70:fa:28:6a:4c:1c:5d:12:b3:d9:96:ff:9c:a0: 3d:d0:63:65:22:a7:0e:b5:d1:86:6d:eb:f2:54:d3: 2f:c8:55:07:0a:f2:e4:47:f1:ca:46:ec:38:ce:23: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:99:B0:4E:87:93:34:2A:C3:37:A0:2E:83:E5:F1:85:C3:8A:58:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 198.73.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7a:d6:b0:3b:10:63:36:66:18:50:4e:a1:3f:74:e8:b6:b2: f2:88:4b:8c:9e:4e:6f:d7:df:cd:57:f7:fd:3e:b7:ea:c9:53: 6a:20:0b:12:7c:b8:6e:3a:e6:81:de:8f:3a:4f:f7:29:87:23: dd:67:76:1a:b8:8c:c4:b0:75:48:a0:46:2c:af:d2:92:4d:5e: 53:20:36:b6:2b:33:02:97:3c:36:0a:1a:c3:4e:f3:18:0c:98: 6c:78:ce:b3:c5:e6:88:8f:cc:d1:f8:b1:f1:b5:1a:17:b0:fe: e9:1d:10:16:ca:36:30:82:62:e5:53:3b:25:b4:38:ea:6a:2d: b7:2e:b5:3c:ea:93:84:a4:10:61:91:8b:43:59:9d:07:29:78: 00:09:f2:00:32:6a:59:80:b4:de:62:fe:cc:46:57:d5:1c:7e: af:8c:b2:d0:9d:36:98:16:e9:b9:ca:17:64:43:d2:f7:c1:48: dd:5e:18:84:9b:be:cb:ee:1d:a1:99:45:51:3e:67:6d:ad:51: 04:5c:53:0a:75:ef:6e:f7:3d:41:66:ea:f7:17:de:b7:36:7f: da:df:22:54:30:52:8e:eb:ad:09:de:1a:db:87:7c:38:5c:74: dc:a5:4a:1b:98:df:8c:76:eb:a8:ca:65:fe:bc:bf:30:6b:2f: e1:c8:88:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhaBORUNPrL2EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjQ3ZDI3MTItOTg5Ny00NTdiLWE5NTItOWI0YmU3NjhlZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5DwQESRc2VapjQPK0vhO+L/79nQ9wIqIK7V iQSsDqahQsdHYkjxEs8LQCppZa2uokS52N50fPjAr7MDfG3ugV3AXQczJJpgZb34 ioXc73AeF8j2ZRrE0FMUL/9Du+cGncU0inGjvKyv0zRuA6zSWbG9ibKYGtPA4mJ1 1SgyguSuWiaoVkk7A9OwijvnYW18dUWsIyQG+C16jF4FNewiRJ2ArOBA1gBuriBe xP09afskhdScSJPrBdjHuRaTxsudSq/CL5GndBaUOAYN01tJGibBcPooakwcXRKz 2Zb/nKA90GNlIqcOtdGGbevyVNMvyFUHCvLkR/HKRuw4ziMTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+ZsE6HkzQqwzegLoPl8YXDilglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYWRlNjE1MTEtODM5OC0z ZTJlLWIwZGYtNDU4MmNhZjQ5ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ61rA7EGM2ZhhQTqE/dOi2svKIS4yeTm/X381X9/0+t+rJU2ogCxJ8 uG465oHejzpP9ymHI91ndhq4jMSwdUigRiyv0pJNXlMgNrYrMwKXPDYKGsNO8xgM mGx4zrPF5oiPzNH4sfG1Ghew/ukdEBbKNjCCYuVTOyW0OOpqLbcutTzqk4SkEGGR i0NZnQcpeAAJ8gAyalmAtN5i/sxGV9Ucfq+MstCdNpgW6bnKF2RD0vfBSN1eGISb vsvuHaGZRVE+Z22tUQRcUwp17273PUFm6vcX3rc2f9rfIlQwUo7rrQneGtuHfDhc dNylShuY34x266jKZf68vzBrL+HIiDE= -----END CERTIFICATE-----Generated at Sat Apr 12 15:09:35 2025 by rpki-client