$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7ddb6c92-d878-31c8-a161-29a7e100ffa2.roa File: 7ddb6c92-d878-31c8-a161-29a7e100ffa2.roa (raw, json) Hash identifier: W5kHaekHvQkhDqSQo4nz1Nm8QZPh5tKI0dTvrhVrse8= Subject key identifier: 66:21:E0:33:FF:80:8C:17:01:B1:2E:52:3D:FD:4D:F7:A6:07:A8:7B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E884ECCE8FCBF49830510 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7ddb6c92-d878-31c8-a161-29a7e100ffa2.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 198.85.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:88:4e:cc:e8:fc:bf:49:83:05:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=d743721d-079a-4cb2-be9b-795435aacc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:09:af:ff:89:00:99:6b:63:b3:a3:d5:d1: f9:69:ce:04:32:a5:8f:71:1c:02:eb:4e:1c:8a:64: 40:37:3c:51:c2:bf:77:12:23:f2:22:8a:d9:9c:df: de:86:00:59:f6:a6:fe:f2:ca:13:7b:ba:37:9c:7b: 2e:80:b0:da:27:a2:7d:33:3a:58:fb:8e:45:78:7e: bc:4b:a4:c7:69:e2:58:ef:09:53:ad:bf:fd:d2:93: 03:d7:31:5c:d9:b9:5d:c6:5d:5b:0d:86:8c:f6:e3: ef:13:14:39:fb:20:02:b4:01:aa:20:e3:e0:e8:e9: ba:de:78:b7:65:b5:7f:4c:f1:37:70:17:c7:f1:52: 2f:27:18:81:56:aa:47:48:5f:b0:ea:f8:dd:52:72: 3b:2d:e6:bc:02:49:3c:54:c1:30:c0:1e:a1:69:39: 93:b6:d7:1a:d2:a0:11:aa:af:54:9e:9b:05:aa:4f: 14:16:40:4f:bd:fb:cb:cc:7f:0c:c1:82:e6:11:be: 84:9e:a0:1e:33:76:a1:20:44:41:d5:01:74:3c:0e: 25:10:bb:29:cb:53:f0:3e:3a:f5:fe:07:84:4e:3e: 03:00:f0:42:be:9f:51:51:45:a0:22:ac:f0:45:72: f8:3c:e8:59:f7:30:c1:1a:a4:35:e2:3e:c2:f0:77: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:E0:33:FF:80:8C:17:01:B1:2E:52:3D:FD:4D:F7:A6:07:A8:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7ddb6c92-d878-31c8-a161-29a7e100ffa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a2:ea:3b:ea:0f:8a:7d:4b:a2:9d:e9:b8:09:64:fb:da:14: 28:b8:66:b2:b6:2e:42:56:da:5a:80:a3:f2:3c:3d:07:3c:02: e8:82:ee:2e:6c:07:60:a6:29:3a:0a:ad:e2:0c:44:fe:84:bb: d8:f2:30:79:31:66:b7:a5:df:e1:dc:1e:6e:9c:87:10:a3:75: ee:18:17:45:9c:36:99:4b:0a:4b:32:b5:75:9b:08:bd:bc:e8: 61:4e:aa:5f:36:5d:77:9a:4d:1b:7b:35:c7:38:7f:8e:41:a9: a5:5d:36:c3:ab:87:ff:4a:ba:c8:10:93:21:45:4a:ab:4d:d0: 5d:e3:43:19:eb:14:88:64:f1:a7:0e:73:35:b2:1d:37:1a:73: ea:a9:9a:f5:7a:ea:08:1f:cb:43:d4:49:4b:3d:c2:a1:02:a3: 72:ca:1f:35:81:f9:23:69:12:1a:39:88:e2:d7:04:b0:51:31: 31:82:47:ec:fd:3e:f1:6b:ce:e7:73:67:d0:17:a4:15:dd:fb: c7:0f:08:e6:50:2f:5c:d1:4b:4b:a7:cd:9b:48:c2:4c:49:e3: 80:61:19:ad:d6:97:fd:e3:15:6f:bc:e4:cf:46:c2:1e:f3:c5: 05:2c:f9:6c:00:f7:ae:26:00:16:e0:f9:03:83:3e:0e:6f:ba: 1a:94:42:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnohOzOj8v0mDBRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZDc0MzcyMWQtMDc5YS00Y2IyLWJlOWItNzk1NDM1YWFjYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5YJr/+JAJlrY7Oj1dH5ac4EMqWPcRwC604c imRANzxRwr93EiPyIorZnN/ehgBZ9qb+8soTe7o3nHsugLDaJ6J9MzpY+45FeH68 S6THaeJY7wlTrb/90pMD1zFc2bldxl1bDYaM9uPvExQ5+yACtAGqIOPg6Om63ni3 ZbV/TPE3cBfH8VIvJxiBVqpHSF+w6vjdUnI7Lea8Akk8VMEwwB6haTmTttca0qAR qq9UnpsFqk8UFkBPvfvLzH8MwYLmEb6EnqAeM3ahIERB1QF0PA4lELspy1PwPjr1 /geETj4DAPBCvp9RUUWgIqzwRXL4POhZ9zDBGqQ14j7C8Hc9NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYh4DP/gIwXAbEuUj39TfemB6h7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2RkYjZjOTItZDg3OC0z MWM4LWExNjEtMjlhN2UxMDBmZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExlUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqi6jvqD4p9S6Kd6bgJZPvaFCi4ZrK2LkJW2lqAo/I8PQc8AuiC7i5s B2CmKToKreIMRP6Eu9jyMHkxZrel3+HcHm6chxCjde4YF0WcNplLCksytXWbCL28 6GFOql82XXeaTRt7Ncc4f45BqaVdNsOrh/9KusgQkyFFSqtN0F3jQxnrFIhk8acO czWyHTcac+qpmvV66ggfy0PUSUs9wqECo3LKHzWB+SNpEho5iOLXBLBRMTGCR+z9 PvFrzudzZ9AXpBXd+8cPCOZQL1zRS0unzZtIwkxJ44BhGa3Wl/3jFW+85M9Gwh7z xQUs+WwA964mABbg+QODPg5vuhqUQu0= -----END CERTIFICATE-----Generated at Sun Apr 6 09:42:36 2025 by rpki-client