$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa File: 2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa (raw, json) Hash identifier: vCK9k7Ds7BrkJzYapaoCroqUuQl5QeM8KTEu2fpDPWQ= Subject key identifier: 31:23:1D:62:BA:DD:CE:EA:A5:BA:B7:30:B1:1C:7D:67:97:BA:69:C7 Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Certificate serial: 010D0C9F432858491246AAEA04F83DA32C475B88 Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 14537 IP address blocks: 198.37.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:aa:ea:04:f8:3d:a3:2c:47:5b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e78265c0-3911-4d09-b224-3445c2bdc1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:77:f8:45:ee:4a:c9:e2:33:16:e2:32:7c: 75:37:94:e9:16:d5:cb:cd:46:07:a5:cb:1c:c6:03: e1:31:f1:0e:52:d5:de:c6:31:88:bd:f7:74:af:50: 9d:82:92:16:c2:80:ad:9d:54:be:70:d9:0d:7b:7e: e8:b2:79:4e:76:77:56:e9:67:27:92:cc:66:bf:6d: 8a:b1:53:eb:98:3c:ea:9b:20:4b:ce:2c:85:16:4f: 36:ea:a7:ae:bc:a1:c1:e3:32:00:b7:44:65:e2:b8: 49:e8:98:86:38:a1:e5:02:e3:c2:5a:d3:ce:54:d4: f7:e4:7e:e6:42:9a:6f:f5:e2:bc:d7:84:0e:94:4c: ca:ce:17:dc:96:8b:97:57:cb:f4:ba:09:8c:15:d3: 43:27:3f:5e:fb:be:7c:d7:b4:e8:3d:94:10:da:f7: 23:d5:1c:f6:26:7e:fa:36:fc:95:e4:55:85:f7:34: 3e:c5:b7:a6:95:db:98:32:4a:fb:8f:6e:9b:e7:8d: af:5a:85:94:1d:c0:e3:52:1b:33:35:5f:0e:3f:e1: 94:c5:67:1a:78:76:a3:33:ca:6d:a8:df:4b:ef:be: eb:a5:82:d7:47:a8:eb:5e:f9:17:c5:23:2f:c8:02: 68:52:eb:de:ad:75:f5:72:79:19:64:fd:cc:01:7d: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:23:1D:62:BA:DD:CE:EA:A5:BA:B7:30:B1:1C:7D:67:97:BA:69:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/2220f811-c8a6-31bd-9d7a-bc33c98a8b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl X509v3 Authority Key Identifier: keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer sbgp-ipAddrBlock: critical IPv4: 198.37.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:58:ee:ca:18:fc:e8:dc:25:e5:e2:d2:dc:c4:8c:0c:71:a7: a5:eb:cc:63:56:29:7c:b0:16:64:81:17:5b:14:b0:b8:1a:f9: 61:3b:1d:fe:55:25:0d:c1:7c:91:2d:99:d0:83:03:8a:73:d5: 5e:ab:a0:03:93:51:39:62:ca:9a:9c:9e:62:ca:01:c6:44:1f: 6b:77:b7:49:61:96:ef:1a:ba:85:0b:1f:c1:31:43:24:83:23: 7d:19:1f:c8:de:46:1a:1a:6f:88:5f:b2:2e:ed:be:fb:28:03: dc:c4:33:b7:5e:5b:5d:9f:64:59:77:ba:02:b4:bb:f6:20:30: c7:27:8f:8f:4d:09:87:60:1f:5c:4d:a3:0a:0b:6a:27:fb:e3: c5:66:f6:8f:fa:20:ac:7b:9c:9e:f1:d5:d0:a7:da:f7:71:7e: a2:dd:11:15:70:84:5d:58:0a:d0:89:4d:8f:23:e0:aa:50:1b: ab:8b:a2:c5:93:54:0c:b5:85:b9:7f:39:63:8e:7f:b0:c9:e6: 75:94:a0:8b:2e:aa:73:da:c3:96:f9:9f:d4:09:8d:3e:ff:7c: f9:26:df:f2:82:56:8b:f7:05:39:8c:1f:fc:d3:7f:9c:e5:c9: b7:1b:40:35:44:27:05:53:ab:61:b2:0f:2e:53:02:54:bb:33: d0:ec:38:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqrqBPg9oyxHW4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3 MGRjMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTc4MjY1YzAtMzkxMS00ZDA5LWIyMjQtMzQ0NWMyYmRjMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuN3+EXuSsniMxbiMnx1N5TpFtXLzUYHpcsc xgPhMfEOUtXexjGIvfd0r1CdgpIWwoCtnVS+cNkNe37osnlOdndW6Wcnksxmv22K sVPrmDzqmyBLziyFFk826qeuvKHB4zIAt0Rl4rhJ6JiGOKHlAuPCWtPOVNT35H7m Qppv9eK814QOlEzKzhfclouXV8v0ugmMFdNDJz9e+75817ToPZQQ2vcj1Rz2Jn76 NvyV5FWF9zQ+xbemlduYMkr7j26b542vWoWUHcDjUhszNV8OP+GUxWcaeHajM8pt qN9L777rpYLXR6jrXvkXxSMvyAJoUuverXX1cnkZZP3MAX0z6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEjHWK63c7qpbq3MLEcfWeXumnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvMjIyMGY4MTEtYzhhNi0z MWJkLTlkN2EtYmMzM2M5OGE4YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1 NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Y7soY/OjcJeXi0tzEjAxxp6XrzGNWKXywFmSBF1sUsLga+WE7Hf5V JQ3BfJEtmdCDA4pz1V6roAOTUTliypqcnmLKAcZEH2t3t0lhlu8auoULH8ExQySD I30ZH8jeRhoab4hfsi7tvvsoA9zEM7deW12fZFl3ugK0u/YgMMcnj49NCYdgH1xN owoLaif748Vm9o/6IKx7nJ7x1dCn2vdxfqLdERVwhF1YCtCJTY8j4KpQG6uLosWT VAy1hbl/OWOOf7DJ5nWUoIsuqnPaw5b5n9QJjT7/fPkm3/KCVov3BTmMH/zTf5zl ybcbQDVEJwVTq2GyDy5TAlS7M9DsODA= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:30 2025 by rpki-client