$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa File: 7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa (raw, json) Hash identifier: nQsdnEJ91XM25IkZoWAXyO5/EWLbqxiqVe11Y4pp55Y= Subject key identifier: 5E:E4:85:F8:74:68:B0:05:90:90:CD:5E:F6:8C:35:20:30:80:20:00 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E7FB0FFE5B79C646B7740 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 198.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:7f:b0:ff:e5:b7:9c:64:6b:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=737f5b19-fa40-47cd-aa68-518862cdc348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:37:fa:10:4b:fe:9e:5a:43:93:31:4a:66: f5:6f:2f:a5:fb:58:25:62:9b:ca:36:49:7b:6a:26: f2:1b:e4:02:a8:bb:20:79:42:65:44:d9:50:08:b5: bc:c9:05:84:5d:f6:58:33:02:0a:0e:06:54:f3:7f: 7d:01:a6:a9:64:49:1e:ad:bd:b7:a0:d3:b4:00:01: 56:f8:7f:dc:65:83:22:b7:1e:e9:b0:ea:3a:1d:74: 4f:9c:17:67:2c:ec:5a:e4:5a:a6:68:05:31:6e:c2: b7:d9:07:44:2a:49:d7:95:d6:25:71:15:0c:92:bf: 1f:9e:c8:43:46:35:04:f4:65:cb:da:0b:ba:32:81: 7e:78:20:5b:92:2c:72:38:23:4e:38:86:5c:6c:75: 19:8b:c8:59:d8:94:13:6f:0a:eb:6f:c7:54:42:e8: 70:f6:1f:b3:77:b4:9e:c8:e3:78:1b:13:9c:bd:ef: a2:13:62:6e:cc:f5:55:f7:77:b1:2f:11:89:8a:d6: e8:51:f2:23:99:72:5e:f4:af:a5:a9:07:4b:8b:5d: 71:46:81:6a:55:37:a9:9d:a3:80:4a:70:e6:c3:85: 46:af:6b:9a:81:aa:9c:01:78:ef:ce:c0:8a:6e:b1: 36:dc:7e:1d:e4:58:58:ea:2e:4c:7d:44:69:ee:99: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E4:85:F8:74:68:B0:05:90:90:CD:5E:F6:8C:35:20:30:80:20:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f7:1b:14:e6:b9:c4:22:e6:44:a2:92:23:0f:17:6c:32:30: 69:b0:6b:aa:25:f8:ec:00:1e:c3:18:99:b2:c4:cf:77:c5:e0: d7:12:0a:27:db:95:55:50:cd:52:c6:8d:b0:41:5a:13:cb:b3: 48:5f:7e:89:31:44:c0:61:23:26:98:bd:a6:ff:43:d2:42:b2: fb:06:34:f2:31:ff:c7:b3:a5:81:e3:d8:32:ba:35:e6:78:31: 0f:09:1f:2e:a9:5c:fd:3c:4d:8c:c5:30:5b:39:2f:a8:ef:6e: ba:7f:2a:54:db:30:ab:14:ad:5c:e9:f0:4d:8c:ae:1b:b5:8b: 60:72:4a:34:2f:da:bd:3d:92:19:79:b2:99:3f:0e:84:52:52: 5d:8d:1d:fd:ba:85:9b:97:53:ca:64:6b:f0:aa:94:71:25:4c: 2f:1f:d0:c7:ce:c9:af:92:d8:80:2b:17:c7:09:0a:82:14:82: b0:e5:07:d5:36:53:a5:6d:b5:9b:46:8a:37:d2:ea:d7:c6:e5: 25:49:5d:1a:29:b8:aa:71:b0:ec:a8:3a:8b:c2:5c:e1:81:a2: 65:18:22:2c:d3:e3:86:32:9d:7f:7a:78:6c:c2:0f:21:ee:9d: c5:67:28:e6:c1:c7:88:87:ca:36:8a:59:a7:16:6e:44:46:1d: c1:e0:94:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElBnn+w/+W3nGRrd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk NzM3ZjViMTktZmE0MC00N2NkLWFhNjgtNTE4ODYyY2RjMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsM3+hBL/p5aQ5MxSmb1by+l+1glYpvKNkl7 aibyG+QCqLsgeUJlRNlQCLW8yQWEXfZYMwIKDgZU8399AaapZEkerb23oNO0AAFW +H/cZYMitx7psOo6HXRPnBdnLOxa5FqmaAUxbsK32QdEKknXldYlcRUMkr8fnshD RjUE9GXL2gu6MoF+eCBbkixyOCNOOIZcbHUZi8hZ2JQTbwrrb8dUQuhw9h+zd7Se yON4GxOcve+iE2JuzPVV93exLxGJitboUfIjmXJe9K+lqQdLi11xRoFqVTepnaOA SnDmw4VGr2uagaqcAXjvzsCKbrE23H4d5FhY6i5MfURp7pmyLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF7khfh0aLAFkJDNXvaMNSAwgCAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2NlYTZlZWUtOWQyOS0z ZjZhLWE4Y2QtNTk0YzdmMDU0OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxlYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIvcbFOa5xCLmRKKSIw8XbDIwabBrqiX47AAewxiZssTPd8Xg1xIKJ9uV VVDNUsaNsEFaE8uzSF9+iTFEwGEjJpi9pv9D0kKy+wY08jH/x7OlgePYMro15ngx DwkfLqlc/TxNjMUwWzkvqO9uun8qVNswqxStXOnwTYyuG7WLYHJKNC/avT2SGXmy mT8OhFJSXY0d/bqFm5dTymRr8KqUcSVMLx/Qx87Jr5LYgCsXxwkKghSCsOUH1TZT pW21m0aKN9Lq18blJUldGim4qnGw7Kg6i8Jc4YGiZRgiLNPjhjKdf3p4bMIPIe6d xWco5sHHiIfKNopZpxZuREYdweCUtQ== -----END CERTIFICATE-----Generated at Sun Apr 6 09:42:55 2025 by rpki-client