$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/840a2803-8706-33e8-b4e7-4892cd680cce.roa File: 840a2803-8706-33e8-b4e7-4892cd680cce.roa (raw, json) Hash identifier: mabT3ZDAukyMTVHf5B7oj291I3Y+av9xHNBcsMN57SE= Subject key identifier: 46:DC:6C:7F:73:E9:DC:47:41:94:EB:5D:F9:62:CC:4A:C1:82:39:90 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E887E85A46B79CEB46140 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/840a2803-8706-33e8-b4e7-4892cd680cce.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 198.86.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:88:7e:85:a4:6b:79:ce:b4:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=38381a72-d3bc-4b89-b7fa-a9d452ecdfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:03:37:8d:60:e0:af:00:47:3f:af:f4:16: 09:35:23:d5:b2:b3:e0:67:be:ef:d4:ef:be:3e:b1: 8a:3b:b2:f2:58:e1:43:00:6a:19:6c:9f:4f:09:3c: b1:7a:ea:5f:52:64:10:fa:82:ec:39:70:be:4c:0b: 68:4a:6d:fa:56:bb:5a:a5:ea:8f:56:61:80:ba:91: ab:a3:0a:f4:81:f1:48:6a:ab:b4:5e:1e:b0:c2:c0: aa:49:fa:10:fc:fe:dc:b0:f3:54:04:da:2d:54:9b: bd:30:e6:d1:d4:45:fc:76:26:a1:07:75:09:e4:a4: ea:5a:5e:c1:b1:6a:c9:e9:10:02:21:0b:75:19:52: e0:8d:0d:f4:f8:e3:82:c0:73:72:c8:85:0e:94:46: e0:1d:4d:df:3a:a5:c1:a6:df:7c:bf:51:a7:53:18: 15:4a:c6:e7:c1:3c:86:7e:6d:de:fc:c8:28:f3:94: 61:63:ad:46:17:60:c3:20:4b:53:f3:37:1d:3e:1c: f6:af:b4:66:9a:fc:e3:56:30:fa:0a:d1:52:c0:79: 13:33:20:99:0a:74:f7:2e:9a:41:18:ce:af:22:d0: cd:43:fc:29:bb:62:49:1a:74:8c:48:f9:8a:a7:08: af:b0:7c:c6:8b:d4:36:7f:3a:a0:1f:22:c3:14:89: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DC:6C:7F:73:E9:DC:47:41:94:EB:5D:F9:62:CC:4A:C1:82:39:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/840a2803-8706-33e8-b4e7-4892cd680cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7d:c4:1f:db:83:f9:8e:39:b1:9e:a2:86:30:c7:83:70:79: 0c:da:a8:c9:cf:5c:88:ee:23:b3:c9:d5:17:74:07:8c:82:bd: b5:1c:86:f5:33:3f:0a:5d:90:4f:f1:0d:47:81:16:07:6c:33: 47:e8:22:1a:b1:04:08:09:60:14:74:70:eb:82:f8:97:01:ba: e2:1e:cf:28:bd:a4:a5:ce:a7:82:d7:8a:37:1a:69:b8:ed:ca: a6:35:7b:15:8b:68:f5:58:a7:66:5a:6e:7d:43:5d:b8:b0:de: 7d:02:02:9d:38:27:94:a1:4e:db:18:da:35:40:2a:b7:96:7a: 2d:3d:e5:31:1d:bf:3b:41:e3:c8:71:b0:d5:5f:70:89:32:6a: a5:d6:7c:8f:d9:52:97:97:4c:94:5f:d7:1c:5b:ce:91:db:0e: a9:45:ee:b6:47:0c:c7:14:78:e6:de:e7:39:a5:d1:9b:6f:80: 37:e5:61:21:75:55:80:ff:01:f5:ff:de:f3:27:16:a5:09:01: c6:91:a8:d5:37:a8:06:c6:c3:ce:89:6f:b7:f8:54:d7:42:d4: 2f:e2:b3:2b:8a:c6:c3:fc:da:4b:b4:8e:88:6e:82:2f:c3:7d: fc:84:39:db:c1:99:34:11:d3:0b:2c:21:e9:dc:f3:79:da:25: ab:25:ed:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoh+haRrec60YUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk MzgzODFhNzItZDNiYy00Yjg5LWI3ZmEtYTlkNDUyZWNkZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWoDN41g4K8ARz+v9BYJNSPVsrPgZ77v1O++ PrGKO7LyWOFDAGoZbJ9PCTyxeupfUmQQ+oLsOXC+TAtoSm36VrtapeqPVmGAupGr owr0gfFIaqu0Xh6wwsCqSfoQ/P7csPNUBNotVJu9MObR1EX8diahB3UJ5KTqWl7B sWrJ6RACIQt1GVLgjQ30+OOCwHNyyIUOlEbgHU3fOqXBpt98v1GnUxgVSsbnwTyG fm3e/Mgo85RhY61GF2DDIEtT8zcdPhz2r7RmmvzjVjD6CtFSwHkTMyCZCnT3LppB GM6vItDNQ/wpu2JJGnSMSPmKpwivsHzGi9Q2fzqgHyLDFIlPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbcbH9z6dxHQZTrXflizErBgjmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODQwYTI4MDMtODcwNi0z M2U4LWI0ZTctNDg5MmNkNjgwY2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh9xB/bg/mOObGeooYwx4NweQzaqMnPXIjuI7PJ1Rd0B4yCvbUchvUz PwpdkE/xDUeBFgdsM0foIhqxBAgJYBR0cOuC+JcBuuIezyi9pKXOp4LXijcaabjt yqY1exWLaPVYp2Zabn1DXbiw3n0CAp04J5ShTtsY2jVAKreWei095TEdvztB48hx sNVfcIkyaqXWfI/ZUpeXTJRf1xxbzpHbDqlF7rZHDMcUeObe5zml0ZtvgDflYSF1 VYD/AfX/3vMnFqUJAcaRqNU3qAbGw86Jb7f4VNdC1C/isyuKxsP82ku0johugi/D ffyEOdvBmTQR0wssIenc83naJasl7b4= -----END CERTIFICATE-----Generated at Sun Apr 6 12:08:32 2025 by rpki-client