$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa File: 254985db-4130-3371-adaf-7de790bd4207.roa (raw, json) Hash identifier: pEMucEauqQ+jK1S/mAUOSsy4Ba+X9UnnzFBvowNt468= Subject key identifier: 97:3C:C7:6D:A0:B9:BA:76:7E:33:27:54:65:F0:57:74:4C:EB:F1:3E Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F43285849203C15F1CD97B73076902C40 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 210 IP address blocks: 198.60.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:15:f1:cd:97:b7:30:76:90:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=9069dd8a-352d-44a2-9415-1fbc13e320b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:8f:8f:2a:24:30:f0:d3:53:b8:73:1b:ff: f2:bb:b1:00:34:84:83:79:7b:91:f5:b8:90:d7:c4: da:6b:aa:ea:a7:51:90:b6:d1:75:90:2c:61:ab:cc: 49:dd:11:a6:18:4b:59:ef:27:8a:23:00:9d:fe:3e: e2:b9:f9:ee:fe:0e:74:d1:2a:16:a9:bb:98:d3:82: d5:44:b5:cc:13:91:ad:ea:de:01:c4:9d:34:ea:5a: 0f:0f:df:09:bf:32:0e:83:35:aa:15:b2:96:ee:92: 29:d4:4f:81:c6:52:a3:d0:73:34:dd:17:b1:0d:02: cb:b8:6d:76:30:4a:a2:2d:0e:0a:55:07:14:d2:93: 53:4a:fd:7b:b1:45:85:7c:c7:41:fe:6a:2f:f4:80: 0d:62:98:90:f9:f5:95:ed:65:06:02:e0:73:db:a3: 16:2d:bc:75:30:44:18:b4:3f:85:c8:22:c8:4c:ee: 0e:9b:4d:db:7c:4c:dd:e7:52:51:48:dc:82:26:c5: 31:3a:e4:4e:d2:04:e4:a9:cf:cd:2e:6b:43:9b:a0: 63:51:f9:4d:c8:da:6d:20:58:cf:3a:a8:24:c6:17: 8a:bd:68:34:09:fe:1e:68:d7:ba:13:2d:06:ca:d0: 78:79:53:5c:73:b6:4b:2a:48:4c:1a:f5:f9:53:96: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:C7:6D:A0:B9:BA:76:7E:33:27:54:65:F0:57:74:4C:EB:F1:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 198.60.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:7f:6d:ef:23:19:b5:d2:e6:64:8f:71:7f:65:0a:ab:24:db: 43:a6:e3:f7:52:ef:e2:eb:3a:1c:e1:be:1e:c8:aa:11:4f:cc: 36:7a:db:84:1b:53:cd:cd:2a:d1:75:1b:57:58:8f:77:c4:8f: 85:e3:59:62:ef:dc:b9:41:ff:38:c9:3c:49:71:33:81:46:5f: be:c2:57:72:74:c5:97:2c:f3:22:b2:de:a2:3b:8b:96:56:8e: 8d:a3:e3:13:06:a8:74:d7:d8:ab:e0:90:31:51:f2:e1:78:3b: c5:60:2d:bf:f1:b8:85:85:89:bb:67:04:6c:ce:72:9f:ee:c7: d4:f7:2f:e4:eb:ff:e4:e5:6a:0c:75:54:1b:28:b9:89:2d:cb: 2d:39:ea:17:b9:80:87:63:15:66:77:34:d8:f2:56:8c:a0:dd: c6:12:38:cb:34:4a:fc:a1:e5:f9:2b:84:e0:0a:a5:16:3e:0f: 54:05:86:04:e4:3f:10:30:74:51:1a:c5:75:6f:50:29:20:f7: 48:fa:e3:ad:87:39:34:a4:ba:89:35:40:d9:d8:b1:c4:ec:7c: cc:cc:4d:9f:4c:f5:e2:92:e8:a5:40:b0:09:85:d5:ff:6f:58: b9:78:1c:33:4f:6e:05:3f:f0:3c:72:3b:3c:58:8a:4b:21:50: bf:c9:12:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBXxzZe3MHaQLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OTA2OWRkOGEtMzUyZC00NGEyLTk0MTUtMWZiYzEzZTMyMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbiPjyokMPDTU7hzG//yu7EANISDeXuR9biQ 18Taa6rqp1GQttF1kCxhq8xJ3RGmGEtZ7yeKIwCd/j7iufnu/g500SoWqbuY04LV RLXME5Gt6t4BxJ006loPD98JvzIOgzWqFbKW7pIp1E+BxlKj0HM03RexDQLLuG12 MEqiLQ4KVQcU0pNTSv17sUWFfMdB/mov9IANYpiQ+fWV7WUGAuBz26MWLbx1MEQY tD+FyCLITO4Om03bfEzd51JRSNyCJsUxOuRO0gTkqc/NLmtDm6BjUflNyNptIFjP OqgkxheKvWg0Cf4eaNe6Ey0GytB4eVNcc7ZLKkhMGvX5U5YpkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc8x22gubp2fjMnVGXwV3RM6/E+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvMjU0OTg1ZGItNDEzMC0z MzcxLWFkYWYtN2RlNzkwYmQ0MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1/be8jGbXS5mSPcX9lCqsk20Om4/dS7+LrOhzhvh7IqhFPzDZ624Qb U83NKtF1G1dYj3fEj4XjWWLv3LlB/zjJPElxM4FGX77CV3J0xZcs8yKy3qI7i5ZW jo2j4xMGqHTX2KvgkDFR8uF4O8VgLb/xuIWFibtnBGzOcp/ux9T3L+Tr/+Tlagx1 VBsouYktyy056he5gIdjFWZ3NNjyVoyg3cYSOMs0Svyh5fkrhOAKpRY+D1QFhgTk PxAwdFEaxXVvUCkg90j6462HOTSkuok1QNnYscTsfMzMTZ9M9eKS6KVAsAmF1f9v WLl4HDNPbgU/8DxyOzxYikshUL/JEsQ= -----END CERTIFICATE-----Generated at Sun Apr 13 02:55:51 2025 by rpki-client