$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: ZrdKXrR22VTT9PhjgWfPRNiFooT7v0esLZ3DVzQpqTI= Subject key identifier: E8:C2:12:5A:7C:B9:6D:18:04:67:8E:DC:BB:34:D5:FE:3F:82:0D:35 Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F43285848BFEBA0427BAE324956B6B180 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a0:42:7b:ae:32:49:56:b6:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=93f01121-e0c8-4eb1-b025-f96f648598a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:96:56:76:41:fb:e0:cd:73:3d:a3:91:cf: 91:44:ec:7a:72:12:51:0f:e1:30:07:1b:a0:03:65: fa:7d:d5:b2:e0:64:98:73:24:59:32:2f:22:f6:08: b0:1f:79:ff:54:85:7e:82:82:40:e7:44:ad:9c:e4: 74:93:65:0a:94:c5:db:f0:c1:f2:b3:73:fe:e1:cc: 10:fb:fa:ef:2f:dd:ef:ab:dd:a3:3b:20:6e:4f:41: 6f:97:44:df:cc:52:4c:33:f6:25:73:ff:fe:c1:cb: da:36:21:a1:16:69:3d:0a:fe:81:30:68:1c:6a:cf: 72:f2:74:f5:93:4a:d7:0c:c9:62:42:5e:ff:f6:a9: ac:9b:01:0a:65:1b:2a:65:af:ed:bb:5d:1a:2b:5e: c0:53:ea:b4:94:32:2b:79:a0:13:ca:ad:d9:37:50: 24:80:71:ad:0a:57:f9:52:78:e9:7e:ae:e3:fe:91: 4a:9d:f9:78:e9:97:67:0b:f7:25:86:d9:54:7f:11: 89:0c:98:7a:f9:cb:3b:2c:52:7e:12:75:7b:b0:ac: 7b:23:f0:ec:c0:c4:77:a0:dd:7d:ba:22:0b:3b:7e: aa:81:d1:80:41:c5:d3:53:e1:bf:c7:83:fe:24:9f: e2:ca:63:e9:39:4b:cb:38:d3:f3:61:9c:9d:17:70: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:12:5A:7C:B9:6D:18:04:67:8E:DC:BB:34:D5:FE:3F:82:0D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:62:4d:00:dc:1d:91:60:55:82:3a:f8:0d:02:04:91:07:1a: 2c:04:fc:e9:6e:1e:b7:04:2e:07:ae:3b:f0:b0:3f:71:b7:bd: 8e:42:d5:32:a4:f5:24:17:f9:39:d3:3c:2b:78:7f:c2:78:15: 3a:2b:83:ea:2c:a0:e4:b6:50:84:8c:de:45:ea:13:16:c2:7f: c2:23:05:3d:c0:21:b9:74:0e:f8:60:19:cb:08:d8:a9:73:75: af:11:71:1d:db:c3:6d:b7:fc:89:42:67:31:f6:27:65:5d:94: c5:1f:b0:11:b0:fd:0a:a5:2e:8e:45:bb:16:41:e8:2d:b9:3a: f1:01:d0:cc:cb:49:9e:97:67:d2:d6:5c:8c:70:e0:41:25:6c: 6b:89:80:a3:39:ec:91:e0:4a:ee:1c:d0:2d:01:10:bc:a6:5d: f1:3a:38:30:44:dd:3f:c0:ac:47:ca:cc:28:08:ea:3b:6e:7b: 16:bc:63:d3:40:aa:46:16:04:c5:17:6c:a5:57:2f:83:21:62: 42:7e:74:5d:e2:cc:33:e5:df:28:6e:32:fa:8e:d3:ad:13:a8: 10:f1:32:74:00:b5:b2:94:b6:a8:29:ef:37:a2:80:ac:33:30: 48:dc:e3:64:94:52:f2:a7:f1:f1:8d:dc:b6:d9:f0:13:c6:d7: 2a:1b:24:47 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEi/66BCe64ySVa2sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OTNmMDExMjEtZTBjOC00ZWIxLWIwMjUtZjk2ZjY0ODU5OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziqWVnZB++DNcz2jkc+RROx6chJRD+EwBxug A2X6fdWy4GSYcyRZMi8i9giwH3n/VIV+goJA50StnOR0k2UKlMXb8MHys3P+4cwQ +/rvL93vq92jOyBuT0Fvl0TfzFJMM/Ylc//+wcvaNiGhFmk9Cv6BMGgcas9y8nT1 k0rXDMliQl7/9qmsmwEKZRsqZa/tu10aK17AU+q0lDIreaATyq3ZN1AkgHGtClf5 Unjpfq7j/pFKnfl46ZdnC/clhtlUfxGJDJh6+cs7LFJ+EnV7sKx7I/DswMR3oN19 uiILO36qgdGAQcXTU+G/x4P+JJ/iymPpOUvLONPzYZydF3DPVwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOjCElp8uW0YBGeO3Ls01f4/gg01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeYk0A3B2RYFWCOvgNAgSRBxosBPzpbh63 BC4HrjvwsD9xt72OQtUypPUkF/k50zwreH/CeBU6K4PqLKDktlCEjN5F6hMWwn/C IwU9wCG5dA74YBnLCNipc3WvEXEd28Ntt/yJQmcx9idlXZTFH7ARsP0KpS6ORbsW QegtuTrxAdDMy0mel2fS1lyMcOBBJWxriYCjOeyR4EruHNAtARC8pl3xOjgwRN0/ wKxHyswoCOo7bnsWvGPTQKpGFgTFF2ylVy+DIWJCfnRd4swz5d8objL6jtOtE6gQ 8TJ0ALWylLaoKe83ooCsMzBI3ONklFLyp/Hxjdy22fATxtcqGyRH -----END CERTIFICATE-----Generated at Thu Apr 17 05:42:03 2025 by rpki-client