$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa File: 895aa4ce-8313-395e-98a9-65bd11abfd6c.roa (raw, json) Hash identifier: 8kEs/c12kreOnqoeZmeKOQHlHua2ooX1uGiLPbU9Gbo= Subject key identifier: 1E:98:E4:1A:46:E6:CD:28:CE:F6:07:54:F2:25:36:2F:54:44:0F:11 Certificate issuer: /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d Certificate serial: 010D0C9F43285848B78B81922CF3316280F79EC0 Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 0 IP address blocks: 198.179.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:81:92:2c:f3:31:62:80:f7:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=d9157807-9fe8-47cc-abb7-53e7d11b972c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:07:35:f6:94:7d:c3:89:6c:14:83:cb:0c: e5:b2:5d:25:3e:21:65:bc:a2:5a:39:38:f8:b7:bb: ce:17:4e:8b:0b:57:78:ce:61:ac:7a:ad:a1:52:59: 02:f5:3b:36:d5:19:e4:88:2e:35:fd:3c:d2:4b:99: e7:a0:e6:11:d5:91:aa:d4:6c:4c:fc:6f:0b:32:51: c2:2d:f6:40:6a:30:c8:5d:a2:eb:99:22:2b:25:a8: cc:86:78:ef:e6:5e:c2:eb:e3:11:f6:22:f5:ad:97: a7:b1:ba:0f:d2:56:8e:9f:d5:b9:3b:1f:f0:8e:cf: 4b:74:82:8c:99:00:df:68:1b:da:80:ce:69:bc:8c: 5b:61:17:da:e4:0b:fc:32:1c:1a:79:1b:ce:e5:68: 94:58:ae:2d:6e:28:33:af:f9:6a:90:f8:3d:0a:17: 7a:1a:4f:16:ac:11:40:99:3f:ae:5b:8b:aa:bd:b4: d3:58:22:ad:b5:1e:4f:e4:de:cd:03:45:02:f6:11: ad:2b:68:d6:36:b0:5a:4e:73:53:ef:a1:8a:8c:8d: 9b:0c:42:87:f4:37:4e:d7:95:b8:32:ea:62:0a:9e: 0b:74:0f:3d:5c:01:68:1d:81:ef:bd:79:27:fe:3f: f7:14:95:13:cf:01:45:9b:8d:ee:ef:59:5e:bc:62: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:E4:1A:46:E6:CD:28:CE:F6:07:54:F2:25:36:2F:54:44:0F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl X509v3 Authority Key Identifier: keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer sbgp-ipAddrBlock: critical IPv4: 198.179.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:7a:83:ad:7f:9f:e3:47:bf:95:d4:a7:69:d9:a3:e3:9f:83: 05:9a:81:fb:87:87:0b:32:f3:50:37:1a:86:3f:9a:dd:7b:d2: 46:75:1e:66:ab:e5:cd:18:c6:90:bc:5f:6f:9e:9d:7b:9d:3c: ef:86:ef:3c:a4:ae:06:41:0f:52:33:ed:6d:86:9c:fc:d4:ca: 68:77:d4:45:10:9a:ce:dc:9e:20:6b:17:d0:22:4d:3f:1e:99: 63:f6:bd:65:64:c6:ac:b6:11:c1:21:38:cf:df:d7:7f:61:49: 69:9e:4d:27:4a:9f:a6:8b:64:e2:db:c4:1e:f1:2d:2c:b7:52: 93:ed:49:79:25:34:74:80:6c:ea:93:08:db:c7:6c:8a:c0:4a: a4:77:3e:5f:65:9a:9b:00:b4:2c:eb:e2:5c:f7:38:45:f9:51: 7f:6f:56:2f:83:90:c8:d2:cd:e6:0b:8a:04:60:ff:e4:a3:96: cb:be:23:68:2e:a2:f6:e0:8f:09:7f:b5:20:0a:f0:7b:8a:48: ea:44:cb:5b:31:2b:aa:c6:8c:9a:7d:66:1c:d3:cb:35:88:d0: ed:b8:54:f9:b8:c0:ab:7f:2e:db:cf:cd:e1:ef:86:2d:8e:cd: fb:c8:62:26:30:b6:45:c7:b8:5f:72:c6:2e:d9:19:66:8d:f9: d4:f9:29:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4GSLPMxYoD3nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0 YTJkMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk ZDkxNTc4MDctOWZlOC00N2NjLWFiYjctNTNlN2QxMWI5NzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOcHNfaUfcOJbBSDywzlsl0lPiFlvKJaOTj4 t7vOF06LC1d4zmGseq2hUlkC9Ts21RnkiC41/TzSS5nnoOYR1ZGq1GxM/G8LMlHC LfZAajDIXaLrmSIrJajMhnjv5l7C6+MR9iL1rZensboP0laOn9W5Ox/wjs9LdIKM mQDfaBvagM5pvIxbYRfa5Av8MhwaeRvO5WiUWK4tbigzr/lqkPg9Chd6Gk8WrBFA mT+uW4uqvbTTWCKttR5P5N7NA0UC9hGtK2jWNrBaTnNT76GKjI2bDEKH9DdO15W4 MupiCp4LdA89XAFoHYHvvXkn/j/3FJUTzwFFm43u71levGKZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Y5BpG5s0ozvYHVPIlNi9URA8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvODk1YWE0Y2UtODMxMy0z OTVlLTk4YTktNjViZDExYWJmZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2 ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMR6g61/n+NHv5XUp2nZo+OfgwWagfuHhwsy81A3GoY/mt170kZ1Hmar 5c0YxpC8X2+enXudPO+G7zykrgZBD1Iz7W2GnPzUymh31EUQms7cniBrF9AiTT8e mWP2vWVkxqy2EcEhOM/f139hSWmeTSdKn6aLZOLbxB7xLSy3UpPtSXklNHSAbOqT CNvHbIrASqR3Pl9lmpsAtCzr4lz3OEX5UX9vVi+DkMjSzeYLigRg/+Sjlsu+I2gu ovbgjwl/tSAK8HuKSOpEy1sxK6rGjJp9ZhzTyzWI0O24VPm4wKt/LtvPzeHvhi2O zfvIYiYwtkXHuF9yxi7ZGWaN+dT5KRI= -----END CERTIFICATE-----Generated at Sat Apr 5 13:03:02 2025 by rpki-client