$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7/e87b5057-38f7-3b63-a7af-0d4a77394bd9.roa File: e87b5057-38f7-3b63-a7af-0d4a77394bd9.roa (raw, json) Hash identifier: Jzl8WNYrCK9gVRvB8cDTA5juGC4BifzeBdBer8xb1uM= Subject key identifier: AD:7C:9E:6B:34:06:99:8E:11:85:06:75:3D:B0:A3:F0:5D:7E:6D:50 Certificate issuer: /CN=1007c2d2-31bc-4306-83dc-734444c538d7 Certificate serial: 010D0C9F43285848AF2B88D56A71235E6D007250 Authority key identifier: 7D:78:B4:0E:3A:C5:0D:0A:A6:40:EC:A2:A9:EA:85:33:F2:DC:5B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7/e87b5057-38f7-3b63-a7af-0d4a77394bd9.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 26109 IP address blocks: 198.11.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7/1007c2d2-31bc-4306-83dc-734444c538d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7/1007c2d2-31bc-4306-83dc-734444c538d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:88:d5:6a:71:23:5e:6d:00:72:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007c2d2-31bc-4306-83dc-734444c538d7 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=c966a31c-4245-4594-9828-447b1eff5b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:11:23:2c:7d:6c:57:87:69:05:d6:e1:15:b7: bd:26:42:53:d3:95:89:28:ab:ff:f1:f7:60:2b:89: 82:e0:c2:7c:7a:c1:de:62:2e:80:d2:9b:1a:fa:24: 65:68:17:23:bf:bf:ce:4b:3d:22:7e:9f:cd:55:7d: 6b:8a:5e:42:ad:e4:4b:06:03:5e:8b:f7:4e:bc:0c: 49:6d:18:a6:bc:2b:23:64:06:d7:ec:c4:30:91:c6: 62:af:3f:e4:ea:71:ef:0b:2d:bd:c5:b2:b9:fe:05: 2f:d2:3c:6c:21:cd:9d:1f:05:20:01:39:1c:ee:62: a3:e8:ad:4b:8c:fe:03:3a:ee:8b:e4:3d:47:4d:a3: ee:54:ff:04:c0:da:1a:b6:a3:97:d4:16:9b:eb:98: 3b:01:af:d9:9c:d5:d3:42:ac:de:a4:f0:de:34:d2: e9:10:a7:96:cd:87:7a:ef:47:3b:6e:cd:05:6a:3a: 7d:20:4f:e7:21:ec:82:6a:ea:d3:93:e2:fa:d8:5e: b0:3b:fb:5c:79:d0:53:ae:cf:ab:8c:db:d3:52:2a: f5:ea:c1:3b:0e:50:01:30:95:96:25:ec:44:f3:00: 91:07:eb:45:48:48:92:b0:10:35:69:8b:18:d2:dd: 03:eb:a9:b3:1d:50:55:74:f4:ed:88:b6:cd:d1:b8: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7C:9E:6B:34:06:99:8E:11:85:06:75:3D:B0:A3:F0:5D:7E:6D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7/e87b5057-38f7-3b63-a7af-0d4a77394bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7/1007c2d2-31bc-4306-83dc-734444c538d7.crl X509v3 Authority Key Identifier: keyid:7D:78:B4:0E:3A:C5:0D:0A:A6:40:EC:A2:A9:EA:85:33:F2:DC:5B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1007c2d2-31bc-4306-83dc-734444c538d7.cer sbgp-ipAddrBlock: critical IPv4: 198.11.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fb:f9:43:af:2b:0c:74:23:af:9a:e0:bd:69:2c:5c:40:b3: 98:4a:ba:ab:b9:bc:83:0c:75:32:45:b5:20:d7:ca:a3:ec:7e: 0a:ff:21:5a:99:fd:37:a0:bd:cc:f3:fe:4a:48:43:a0:f5:c5: fa:6b:a1:97:d5:0b:07:b2:9d:c6:dd:4d:aa:d2:94:db:66:06: 20:9b:4c:09:1b:33:5b:4e:17:2e:2f:ce:a3:70:98:ce:3d:f7: 16:9d:80:ed:03:87:90:c8:c2:79:f9:e0:5e:43:a2:3e:c3:b4: b9:e5:b1:65:66:5f:fb:06:3d:d0:6e:31:60:aa:11:1d:09:cf: d0:5a:8e:4b:da:66:13:e5:64:cc:64:5b:b1:9b:03:a2:bc:7f: af:5d:07:ee:c0:b2:b1:55:5c:7b:e2:95:0c:ff:53:c0:f3:dc: 8d:e4:fb:aa:22:d7:72:07:05:ab:1b:e2:db:2c:1b:d4:d7:00: 51:b3:57:9c:7d:02:6a:d2:13:34:6d:1b:1a:f1:39:35:55:34: 4a:56:ae:73:ef:2c:ee:53:0b:05:35:89:90:d1:39:06:bd:20: 6b:83:76:12:3c:e5:46:b3:8b:cc:40:90:50:e0:4b:49:35:5e: 8a:82:12:4f:36:d9:a0:4e:97:8b:c5:2e:c4:0c:3b:3a:9f:5c: f3:c3:2f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4jVanEjXm0AclAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAwN2MyZDItMzFiYy00MzA2LTgzZGMtNzM0NDQ0YzUz OGQ3MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk Yzk2NmEzMWMtNDI0NS00NTk0LTk4MjgtNDQ3YjFlZmY1YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghEjLH1sV4dpBdbhFbe9JkJT05WJKKv/8fdg K4mC4MJ8esHeYi6A0psa+iRlaBcjv7/OSz0ifp/NVX1ril5CreRLBgNei/dOvAxJ bRimvCsjZAbX7MQwkcZirz/k6nHvCy29xbK5/gUv0jxsIc2dHwUgATkc7mKj6K1L jP4DOu6L5D1HTaPuVP8EwNoatqOX1Bab65g7Aa/ZnNXTQqzepPDeNNLpEKeWzYd6 70c7bs0Fajp9IE/nIeyCaurTk+L62F6wO/tcedBTrs+rjNvTUir16sE7DlABMJWW JexE8wCRB+tFSEiSsBA1aYsY0t0D66mzHVBVdPTtiLbN0bhKywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK18nms0BpmOEYUGdT2wo/Bdfm1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDA3 YzJkMi0zMWJjLTQzMDYtODNkYy03MzQ0NDRjNTM4ZDcvZTg3YjUwNTctMzhmNy0z YjYzLWE3YWYtMGQ0YTc3Mzk0YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTAwN2MyZDItMzFiYy00MzA2LTgz ZGMtNzM0NDQ0YzUzOGQ3LzEwMDdjMmQyLTMxYmMtNDMwNi04M2RjLTczNDQ0NGM1 MzhkNy5jcmwwHwYDVR0jBBgwFoAUfXi0DjrFDQqmQOyiqeqFM/LcW3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDA3YzJkMi0zMWJjLTQzMDYtODNkYy03MzQ0 NDRjNTM4ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxgtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID7+UOvKwx0I6+a4L1pLFxAs5hKuqu5vIMMdTJFtSDXyqPsfgr/IVqZ /Tegvczz/kpIQ6D1xfproZfVCweyncbdTarSlNtmBiCbTAkbM1tOFy4vzqNwmM49 9xadgO0Dh5DIwnn54F5Doj7DtLnlsWVmX/sGPdBuMWCqER0Jz9BajkvaZhPlZMxk W7GbA6K8f69dB+7AsrFVXHvilQz/U8Dz3I3k+6oi13IHBasb4tssG9TXAFGzV5x9 AmrSEzRtGxrxOTVVNEpWrnPvLO5TCwU1iZDROQa9IGuDdhI85Uazi8xAkFDgS0k1 XoqCEk822aBOl4vFLsQMOzqfXPPDL9s= -----END CERTIFICATE-----Generated at Sun Feb 16 20:21:56 2025 by rpki-client