$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa File: a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa (raw, json) Hash identifier: as12TkgsefN6OVpkSzm7v7dMtR+I+uuQt/PhtPGYEDs= Subject key identifier: 22:C5:A8:A3:56:27:49:88:F3:79:22:CC:F2:BA:04:66:4B:82:C4:27 Certificate issuer: /CN=6431aabe-7ca9-4420-b394-80fd03294bc7 Certificate serial: 010D0C9F432858490F7BFD8D9BE72ADFB2478780 Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 393906 IP address blocks: 198.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fd:8d:9b:e7:2a:df:b2:47:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=9bd22af0-e648-4956-87cb-7219e8f33c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:1b:34:c5:53:24:be:1f:60:d1:1a:d9:e8: 48:96:88:d1:ef:3e:af:6b:a4:31:35:ec:bf:4d:c0: 82:09:22:18:77:52:ae:f4:4b:00:90:fe:0f:4a:eb: 30:84:e6:b9:e4:3b:48:7b:4d:00:f5:ec:20:59:55: 56:82:fe:1f:93:39:4a:b1:a6:86:5f:70:55:00:2b: d6:12:19:35:04:97:31:f7:65:d4:45:cf:40:99:45: 2d:b6:6d:90:a0:2b:96:8b:8f:17:05:d2:e0:6f:4d: 9d:59:42:33:ab:8c:57:49:2a:e6:87:93:4d:34:14: 82:25:0d:ed:1a:7a:c5:94:ff:94:96:d7:0b:2f:cf: 0b:4c:38:69:2c:5f:9f:4c:51:1f:a9:a2:e2:d3:99: e8:37:af:27:ed:50:89:4c:71:3f:26:a4:88:d0:31: e9:7e:af:7d:8b:a2:4c:c8:13:52:0f:7c:10:2a:bd: e4:4e:19:71:65:99:9d:12:3b:c6:20:3a:f2:9c:9e: 63:09:58:6d:36:b4:93:25:b3:86:85:08:10:7c:9a: f7:2c:32:5e:9e:c2:0e:cc:e6:01:3d:3f:4d:92:f9: 26:b5:82:49:9b:05:35:98:ea:68:ce:bd:c3:98:62: 31:85:ad:69:e9:f1:0e:b5:e9:d5:5c:5b:7a:ec:71: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:A8:A3:56:27:49:88:F3:79:22:CC:F2:BA:04:66:4B:82:C4:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/a1a1fa15-c4a0-3a82-bd8e-8ff96032c6b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl X509v3 Authority Key Identifier: keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer sbgp-ipAddrBlock: critical IPv4: 198.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:86:a0:28:7d:fd:2e:a8:93:a2:c0:d4:8c:7d:db:18:c8:0f: b4:c6:ea:4c:e5:f8:0a:13:b7:f0:3f:52:e1:67:f1:f4:69:59: 3e:70:85:6c:09:d3:cc:5a:ce:2f:ff:a7:7f:22:0f:ac:ba:38: 09:f7:2d:a1:2f:53:eb:00:3f:fa:26:c2:f0:58:f3:aa:aa:b7: b2:3d:d9:24:91:d0:19:9f:2d:04:2a:7c:5f:48:ba:51:5f:90: f3:20:4e:6e:eb:72:e2:f6:46:47:dc:d6:24:b5:00:10:ac:02: 42:3d:58:df:85:18:89:47:fc:68:fb:3e:be:df:bb:e4:cf:68: 06:e4:db:f0:54:4a:13:0d:38:eb:01:af:7b:b7:22:db:0c:91: 93:b3:71:d5:b9:82:e6:f0:bf:82:80:c2:1b:5e:9c:25:e0:a0: ee:13:9e:f0:83:8c:6e:76:e6:7d:c2:9c:65:4b:ec:3d:90:b1: ad:f7:9e:0e:0f:d3:4a:da:7b:15:f3:ed:0f:f7:9f:c3:14:42: fb:21:ba:c0:f0:1a:df:43:70:eb:0f:d0:e6:52:c5:3f:6b:d3: e4:6d:34:6b:c3:d5:53:9b:6d:6f:2c:09:3e:cf:d3:80:e4:40: 1f:8f:03:74:05:60:48:05:ed:ad:06:8b:14:3c:37:39:c1:54: dc:77:e2:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/2Nm+cq37JHh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMWFhYmUtN2NhOS00NDIwLWIzOTQtODBmZDAzMjk0 YmM3MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk OWJkMjJhZjAtZTY0OC00OTU2LTg3Y2ItNzIxOWU4ZjMzYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlekbNMVTJL4fYNEa2ehIlojR7z6va6QxNey/ TcCCCSIYd1Ku9EsAkP4PSuswhOa55DtIe00A9ewgWVVWgv4fkzlKsaaGX3BVACvW Ehk1BJcx92XURc9AmUUttm2QoCuWi48XBdLgb02dWUIzq4xXSSrmh5NNNBSCJQ3t GnrFlP+UltcLL88LTDhpLF+fTFEfqaLi05noN68n7VCJTHE/JqSI0DHpfq99i6JM yBNSD3wQKr3kThlxZZmdEjvGIDrynJ5jCVhtNrSTJbOGhQgQfJr3LDJensIOzOYB PT9NkvkmtYJJmwU1mOpozr3DmGIxha1p6fEOtenVXFt67HHzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLFqKNWJ0mI83kizPK6BGZLgsQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NDMx YWFiZS03Y2E5LTQ0MjAtYjM5NC04MGZkMDMyOTRiYzcvYTFhMWZhMTUtYzRhMC0z YTgyLWJkOGUtOGZmOTYwMzJjNmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjQzMWFhYmUtN2NhOS00NDIwLWIz OTQtODBmZDAzMjk0YmM3LzY0MzFhYWJlLTdjYTktNDQyMC1iMzk0LTgwZmQwMzI5 NGJjNy5jcmwwHwYDVR0jBBgwFoAUHES9M6jTCsuEtnySeyNNIfIrU3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NDMxYWFiZS03Y2E5LTQ0MjAtYjM5NC04MGZk MDMyOTRiYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+GoCh9/S6ok6LA1Ix92xjID7TG6kzl+AoTt/A/UuFn8fRpWT5whWwJ 08xazi//p38iD6y6OAn3LaEvU+sAP/omwvBY86qqt7I92SSR0BmfLQQqfF9IulFf kPMgTm7rcuL2Rkfc1iS1ABCsAkI9WN+FGIlH/Gj7Pr7fu+TPaAbk2/BUShMNOOsB r3u3ItsMkZOzcdW5gubwv4KAwhtenCXgoO4TnvCDjG525n3CnGVL7D2Qsa33ng4P 00raexXz7Q/3n8MUQvshusDwGt9DcOsP0OZSxT9r0+RtNGvD1VObbW8sCT7P04Dk QB+PA3QFYEgF7a0GixQ8NznBVNx34p8= -----END CERTIFICATE-----Generated at Sat Apr 12 13:37:35 2025 by rpki-client