$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3d4131f8-056d-3d85-aa50-dc87a891a73c.roa File: 3d4131f8-056d-3d85-aa50-dc87a891a73c.roa (raw, json) Hash identifier: JN6Rrv+YST8PtAovWbCee7piMLQ1W6+MwshTVMEzUKk= Subject key identifier: 88:04:D6:EB:B9:CB:50:A6:97:79:2A:85:02:BA:29:CA:38:DC:3F:69 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E882C251ABDB272409100 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3d4131f8-056d-3d85-aa50-dc87a891a73c.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 32711 IP address blocks: 198.85.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:88:2c:25:1a:bd:b2:72:40:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=9e79fec3-346e-41ed-b369-a6555fc13e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:45:b7:fa:91:4c:8e:ea:a4:cf:6d:28:c4:08: e0:37:6a:f5:3c:e1:06:b9:ff:d8:80:73:63:82:9e: c0:ca:4e:45:7b:56:49:ad:7b:33:fa:cb:f3:d2:bd: c8:c0:a5:e7:ee:66:ad:bc:a4:b6:b2:77:16:e0:64: e6:70:60:1c:fa:d6:64:32:7b:73:d4:ca:0e:04:78: e7:1d:03:58:c1:a9:e6:dc:0a:be:93:4c:9b:a8:a1: b6:67:f6:96:33:c4:5d:7c:d7:91:01:54:21:1a:d0: 11:8e:84:0c:a3:7d:9e:41:73:b4:45:4f:ec:49:25: 6f:ef:5f:8e:dd:56:18:b7:ab:c7:f8:20:46:18:8d: 5d:b5:a7:1a:5f:78:e3:c0:ef:e6:c2:d3:4f:d2:b6: 51:22:06:54:b3:69:f8:2a:2f:54:06:c6:2e:52:29: 0f:9b:ee:45:70:25:a1:04:0a:71:66:a9:1c:b9:8b: 35:3f:a2:dc:67:69:63:34:b3:49:64:22:0d:37:77: 30:9c:3f:55:4b:27:69:12:cd:6c:8e:0b:25:10:12: e8:e5:98:43:97:b4:c5:d2:02:75:bb:ee:72:ff:b1: f3:e8:c3:37:d4:94:eb:f0:ca:00:65:a7:db:19:36: 7c:86:c0:22:ce:de:a1:2c:40:37:29:59:ee:f0:ed: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:D6:EB:B9:CB:50:A6:97:79:2A:85:02:BA:29:CA:38:DC:3F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3d4131f8-056d-3d85-aa50-dc87a891a73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:ba:e0:45:58:7d:9d:b0:82:89:35:9a:1c:0d:b2:9d:0f: 0c:2a:59:16:2c:2d:8a:e5:18:90:3c:80:7a:4f:54:05:63:dc: a9:25:f2:19:c5:d6:48:aa:01:ef:c0:a5:cf:9f:4e:52:0b:8b: 44:02:24:6b:b0:f5:cc:8c:e6:54:a1:42:c5:d0:f5:58:e8:3c: 49:03:d2:fa:95:45:38:41:9e:d9:55:a2:ab:19:c9:1d:4a:4e: d6:fa:da:d1:37:ec:04:44:49:a5:ec:68:dc:4d:d6:4b:2e:3c: d9:50:1a:d7:94:28:df:3d:d5:1e:c9:4a:31:ac:4f:b4:ce:ac: e8:bf:48:3b:c3:39:65:a3:3a:da:8d:7a:09:83:2d:68:40:99: dc:03:e4:05:8e:99:ca:db:69:40:91:2a:40:37:88:b1:14:3a: 29:be:e8:33:53:a4:0f:27:d8:d0:c4:a1:f7:f1:92:b5:9f:25: 73:75:c5:f1:f0:bd:81:98:d6:ab:9b:49:e7:0a:62:c3:da:94: e0:00:63:94:85:e3:6d:ac:66:82:f0:8e:26:54:4c:7d:a9:e6: e7:ee:1b:b6:d2:90:f0:bd:bf:3d:bc:15:58:16:de:33:97:27: ad:ee:1e:eb:98:53:e9:13:4b:33:74:ab:51:8b:25:78:5f:7d: ea:02:6b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnogsJRq9snJAkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk OWU3OWZlYzMtMzQ2ZS00MWVkLWIzNjktYTY1NTVmYzEzZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0W3+pFMjuqkz20oxAjgN2r1POEGuf/YgHNj gp7Ayk5Fe1ZJrXsz+svz0r3IwKXn7matvKS2sncW4GTmcGAc+tZkMntz1MoOBHjn HQNYwanm3Aq+k0ybqKG2Z/aWM8RdfNeRAVQhGtARjoQMo32eQXO0RU/sSSVv71+O 3VYYt6vH+CBGGI1dtacaX3jjwO/mwtNP0rZRIgZUs2n4Ki9UBsYuUikPm+5FcCWh BApxZqkcuYs1P6LcZ2ljNLNJZCINN3cwnD9VSydpEs1sjgslEBLo5ZhDl7TF0gJ1 u+5y/7Hz6MM31JTr8MoAZafbGTZ8hsAizt6hLEA3KVnu8O1JWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgE1uu5y1Cml3kqhQK6Kco43D9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2Q0MTMxZjgtMDU2ZC0z ZDg1LWFhNTAtZGM4N2E4OTFhNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZDuuBFWH2dsIKJNZocDbKdDwwqWRYsLYrlGJA8gHpPVAVj3Kkl8hnF 1kiqAe/Apc+fTlILi0QCJGuw9cyM5lShQsXQ9VjoPEkD0vqVRThBntlVoqsZyR1K Ttb62tE37ARESaXsaNxN1ksuPNlQGteUKN891R7JSjGsT7TOrOi/SDvDOWWjOtqN egmDLWhAmdwD5AWOmcrbaUCRKkA3iLEUOim+6DNTpA8n2NDEoffxkrWfJXN1xfHw vYGY1qubSecKYsPalOAAY5SF422sZoLwjiZUTH2p5ufuG7bSkPC9vz28FVgW3jOX J63uHuuYU+kTSzN0q1GLJXhffeoCa4w= -----END CERTIFICATE-----Generated at Sun Apr 6 09:37:41 2025 by rpki-client