$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa File: fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa (raw, json) Hash identifier: kH641IIklkPIwBd0P9QqzvEZi+eQAPTFRoqvVwp5Ztc= Subject key identifier: CF:E6:39:D7:C8:50:16:60:0E:3A:21:A1:0E:FA:29:CE:64:9F:84:4D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF05B1F5C8C132DC5A3AC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 8111 IP address blocks: 198.166.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:05:b1:f5:c8:c1:32:dc:5a:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=6b90c584-bcf0-4d30-a5c6-dc55f926d4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:88:97:e8:ce:2b:7b:61:33:a5:47:39:02: 5a:3d:85:33:52:99:08:8a:30:d9:d8:6c:db:4b:a5: b0:bb:42:35:93:96:63:65:9e:8f:72:75:ad:cc:7f: 26:75:9a:be:41:65:04:63:db:50:4a:8d:88:14:b4: f5:b9:07:56:89:c1:56:d4:65:8e:58:fe:6f:70:a6: 67:16:f3:f1:2f:e1:ee:8e:72:fd:11:db:f0:78:e0: 19:75:0e:ab:3e:59:73:52:c1:1a:e8:2c:ff:51:e9: ae:3d:d9:79:97:a6:b5:3e:60:b4:ee:97:f6:f6:b7: ac:66:c2:af:b1:7f:b1:af:da:66:ab:96:a2:dc:97: 9d:38:68:4e:c9:12:b7:0a:b9:20:d6:0c:08:18:6a: d5:99:85:e3:56:0b:61:b6:07:7c:e7:ae:94:9f:0d: ac:4a:fe:6b:cd:8a:6a:eb:28:ca:c9:17:bb:75:50: 2c:2a:eb:9e:0c:89:8b:e3:27:cf:4c:9e:46:5e:96: 97:1a:35:88:e1:9b:75:81:5a:6a:f8:91:bb:dd:83: 9f:a7:05:14:85:63:9f:e5:92:72:f0:b5:b8:a9:53: 54:bc:2a:95:6c:c5:99:4d:c5:4b:8c:11:4f:ca:6e: a7:6b:b6:c4:36:37:77:b8:50:b5:c5:80:6f:e9:e0: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E6:39:D7:C8:50:16:60:0E:3A:21:A1:0E:FA:29:CE:64:9F:84:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.166.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ab:20:50:97:3e:f1:7e:f8:6f:34:f7:f8:71:f6:c5:1e:db: 19:f0:5d:7a:56:5a:cc:bb:61:8e:17:f8:9e:a0:0e:d6:05:98: 78:4d:27:a4:4f:b3:33:0d:2d:6d:ee:7b:11:09:ac:14:ee:23: 05:56:c4:52:5d:0d:56:69:a3:ec:3a:da:bb:a2:90:bd:7d:67: f4:3e:9a:a7:f0:ba:c6:9d:bf:31:87:5b:41:f3:c0:75:99:37: a9:e5:39:29:be:76:fb:73:42:14:c8:b4:19:5a:51:0a:a1:63: 78:55:f4:1d:07:4c:17:1d:5d:70:8c:ba:7b:20:29:66:4b:46: 4c:67:95:12:74:56:b2:1c:fc:dc:81:1a:ea:fa:16:18:27:03: 19:cc:8c:d8:73:6c:26:ea:7b:2f:b1:25:70:e9:ba:9e:51:72: 27:26:77:5e:64:00:00:cb:f9:f2:d2:db:01:26:0b:b0:fc:38: 6f:f6:ef:eb:7d:3c:ee:41:c4:d8:cd:b1:13:08:ac:04:af:54: 79:6c:f6:14:a1:2d:b5:59:b1:e8:2d:28:9b:e6:c6:e0:b4:ab: 64:61:e2:2f:58:32:9d:51:33:07:80:d0:9c:80:62:70:b2:8b: 22:35:da:a5:64:47:43:46:c2:6f:62:ae:92:65:8b:76:07:b0: d6:1c:c7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wWx9cjBMtxaOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NmI5MGM1ODQtYmNmMC00ZDMwLWE1YzYtZGM1NWY5MjZkNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFqIl+jOK3thM6VHOQJaPYUzUpkIijDZ2Gzb S6Wwu0I1k5ZjZZ6PcnWtzH8mdZq+QWUEY9tQSo2IFLT1uQdWicFW1GWOWP5vcKZn FvPxL+HujnL9EdvweOAZdQ6rPllzUsEa6Cz/UemuPdl5l6a1PmC07pf29resZsKv sX+xr9pmq5ai3JedOGhOyRK3Crkg1gwIGGrVmYXjVgthtgd8566Unw2sSv5rzYpq 6yjKyRe7dVAsKuueDImL4yfPTJ5GXpaXGjWI4Zt1gVpq+JG73YOfpwUUhWOf5ZJy 8LW4qVNUvCqVbMWZTcVLjBFPym6na7bENjd3uFC1xYBv6eBcPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/mOdfIUBZgDjohoQ76Kc5kn4RNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZmQxYmNjY2QtZjk3Ni0z ODhkLWFjYzItYTViNDJhMmQzNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqbpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWrIFCXPvF++G809/hx9sUe2xnwXXpWWsy7YY4X+J6gDtYFmHhNJ6RP szMNLW3uexEJrBTuIwVWxFJdDVZpo+w62ruikL19Z/Q+mqfwusadvzGHW0HzwHWZ N6nlOSm+dvtzQhTItBlaUQqhY3hV9B0HTBcdXXCMunsgKWZLRkxnlRJ0VrIc/NyB Gur6FhgnAxnMjNhzbCbqey+xJXDpup5Rcicmd15kAADL+fLS2wEmC7D8OG/27+t9 PO5BxNjNsRMIrASvVHls9hShLbVZsegtKJvmxuC0q2Rh4i9YMp1RMweA0JyAYnCy iyI12qVkR0NGwm9irpJli3YHsNYcx4I= -----END CERTIFICATE-----Generated at Mon Jun 9 10:14:39 2025 by rpki-client