$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ddd53ed4-1aac-3afa-8146-456771c12811.roa File: ddd53ed4-1aac-3afa-8146-456771c12811.roa (raw, json) Hash identifier: xPd1mzI/xct0B3RGOyYwEOtH7v0v3kYsmraQrBz7XdA= Subject key identifier: 27:F8:86:32:73:27:D6:81:C6:EA:E1:F6:A7:AC:97:F6:7D:C2:64:CD Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E891CD1AF4E06D930CE40 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ddd53ed4-1aac-3afa-8146-456771c12811.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 198.86.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:89:1c:d1:af:4e:06:d9:30:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=96fba858-7901-489a-8deb-13e876977bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:f8:b2:db:48:78:c5:20:e7:09:5c:be:84: 42:d5:a1:39:20:98:fe:0c:89:f4:06:ca:79:1a:8e: f7:6b:1d:30:d5:94:08:58:ce:39:04:7b:2c:91:9d: c8:09:2a:c8:b0:e7:4b:f9:f1:c1:db:2e:32:90:c2: 26:71:dc:d3:a3:6e:a6:51:f9:4c:39:f8:1b:b5:d7: 55:d7:d1:0f:6c:f2:1e:ca:ae:74:61:8f:4f:50:04: 80:62:12:ff:b3:2b:57:0a:44:69:2f:eb:64:2d:15: 10:57:76:a4:2d:33:d8:de:94:0a:77:3b:fd:23:b2: d3:7f:82:05:e3:67:43:c1:d8:2c:79:3d:50:df:06: 72:8f:a5:bb:7a:3c:c7:4f:52:c6:80:50:69:02:69: 3b:fa:ca:c6:7c:38:8e:1a:04:95:e0:b1:89:34:65: 77:8a:92:ef:e0:ee:7e:66:f9:03:b3:e5:20:46:95: 91:b0:1b:59:46:cb:60:99:ad:43:71:db:3f:dd:41: 7a:48:dd:20:0f:3f:65:6b:44:9e:21:c6:0a:28:15: 34:52:84:d3:83:36:50:b7:27:3f:31:72:9d:28:71: 64:58:f3:77:95:21:72:4c:88:69:eb:81:cd:ac:45: 17:a5:25:32:62:73:1a:2b:b8:4e:05:75:11:73:ec: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F8:86:32:73:27:D6:81:C6:EA:E1:F6:A7:AC:97:F6:7D:C2:64:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ddd53ed4-1aac-3afa-8146-456771c12811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fa:fb:64:7e:e8:8b:63:76:5c:2b:7e:38:49:e9:f8:b3:a7: 4c:95:28:70:8a:af:c2:d4:cd:d6:ab:48:b2:56:17:ce:61:ec: 15:34:35:1b:96:1a:9e:29:54:52:2a:c2:12:dd:9d:f8:fc:69: b7:97:51:38:80:c1:be:e6:17:af:17:a0:a9:1a:6e:71:c8:b3: de:62:5d:9b:40:2a:18:e7:17:e6:c9:bf:a2:4d:54:ba:fb:6a: 3e:d9:96:d1:4b:57:ac:d3:ff:d5:79:12:31:19:08:e2:7d:7f: 07:06:c6:c8:08:88:6c:6e:f2:1d:0e:4d:bc:cf:95:c2:7b:7c: 8b:29:a5:13:8e:c1:5e:7a:d7:f2:af:79:3d:a0:1c:9a:95:aa: 3c:9b:3f:00:09:35:0d:8d:1b:c9:05:da:bb:b9:ba:34:07:db: c6:0d:57:a3:8f:c0:59:df:c9:8d:cf:58:f7:e1:c3:ba:d7:4e: 9e:6f:6c:75:54:29:02:2c:98:9c:30:db:94:bc:94:4c:55:31: 08:0b:65:82:88:81:8b:2c:81:80:38:bc:fc:46:d3:58:22:ce: ad:ba:49:65:0c:83:db:80:b9:d8:0c:95:5c:53:d6:00:16:0e: 4f:cf:f3:73:e7:0e:12:d3:0a:5a:b8:4c:6d:5d:5d:77:73:1a: 5c:fd:76:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnokc0a9OBtkwzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk OTZmYmE4NTgtNzkwMS00ODlhLThkZWItMTNlODc2OTc3YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yv4sttIeMUg5wlcvoRC1aE5IJj+DIn0Bsp5 Go73ax0w1ZQIWM45BHsskZ3ICSrIsOdL+fHB2y4ykMImcdzTo26mUflMOfgbtddV 19EPbPIeyq50YY9PUASAYhL/sytXCkRpL+tkLRUQV3akLTPY3pQKdzv9I7LTf4IF 42dDwdgseT1Q3wZyj6W7ejzHT1LGgFBpAmk7+srGfDiOGgSV4LGJNGV3ipLv4O5+ ZvkDs+UgRpWRsBtZRstgma1Dcds/3UF6SN0gDz9la0SeIcYKKBU0UoTTgzZQtyc/ MXKdKHFkWPN3lSFyTIhp64HNrEUXpSUyYnMaK7hOBXURc+yoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf4hjJzJ9aBxurh9qesl/Z9wmTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGRkNTNlZDQtMWFhYy0z YWZhLTgxNDYtNDU2NzcxYzEyODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxlb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn6+2R+6ItjdlwrfjhJ6fizp0yVKHCKr8LUzdarSLJWF85h7BU0NRuW Gp4pVFIqwhLdnfj8abeXUTiAwb7mF68XoKkabnHIs95iXZtAKhjnF+bJv6JNVLr7 aj7ZltFLV6zT/9V5EjEZCOJ9fwcGxsgIiGxu8h0OTbzPlcJ7fIsppROOwV561/Kv eT2gHJqVqjybPwAJNQ2NG8kF2ru5ujQH28YNV6OPwFnfyY3PWPfhw7rXTp5vbHVU KQIsmJww25S8lExVMQgLZYKIgYssgYA4vPxG01gizq26SWUMg9uAudgMlVxT1gAW Dk/P83PnDhLTClq4TG1dXXdzGlz9dj0= -----END CERTIFICATE-----Generated at Sun Apr 6 13:57:02 2025 by rpki-client