$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa File: 5afc74d5-bd90-3262-99c1-264ee819ce2a.roa (raw, json) Hash identifier: /mJZo7mrRjTu+28e/MAcIwvNVtdXoWLmsnnYbyPuUok= Subject key identifier: 3B:9D:ED:56:60:C6:B8:D4:0C:04:4C:12:68:14:18:EF:A2:92:4F:43 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858494B641EAB0400E84478719300 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13332 IP address blocks: 198.89.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1e:ab:04:00:e8:44:78:71:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=28d21c4e-fdd4-47c2-8bb3-bd2d7620d842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:08:6d:df:79:30:a2:a1:48:4e:a4:fd:56: 31:35:1e:5a:4f:2f:8d:c1:da:ab:57:ac:f9:51:52: d6:7b:e4:ae:97:40:c2:73:27:66:15:9c:98:3c:29: 09:e6:e3:a6:76:74:b3:92:78:47:ef:d1:ca:8b:16: b0:48:d6:eb:5d:27:50:36:b5:e9:5d:ec:30:2b:21: fd:ba:cb:4f:1f:99:65:b6:bf:69:8d:1b:bb:da:6b: c2:78:74:da:b0:0d:7e:13:34:1c:f6:d5:ed:c7:b8: 71:f9:79:d1:ee:4e:6f:02:18:7f:d0:06:57:1a:69: 9d:ff:fb:ad:79:99:99:44:4c:44:7d:76:6a:e6:63: 99:a9:74:7a:36:f5:cc:32:d3:1e:4f:6a:09:78:1a: 21:21:32:c1:3a:0b:dd:db:e6:5d:ee:31:d2:a3:ce: 1d:8d:f8:36:80:92:18:30:7c:c9:97:6d:ed:ac:8e: 62:19:3d:50:35:2d:29:0d:5f:2b:e6:44:d2:65:7f: 45:bd:11:1f:5b:ae:4f:3f:31:88:47:96:a8:89:96: 10:68:81:3d:ac:20:b7:38:e2:39:7a:10:bd:5a:c2: 8a:87:04:f1:bf:75:57:7f:5c:a4:16:1e:52:08:ef: 19:11:3a:1b:6e:67:c0:68:0d:2f:53:81:04:0f:b3: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9D:ED:56:60:C6:B8:D4:0C:04:4C:12:68:14:18:EF:A2:92:4F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:44:68:32:20:aa:74:c7:0e:90:14:11:45:9b:74:34:1e:d5: 21:92:36:0f:ad:05:cb:5f:ed:f5:42:ce:1a:03:36:0f:be:55: 19:61:26:9b:93:bf:88:8c:7a:dd:ba:0e:24:63:e0:b7:b1:d1: 2b:1a:a7:72:8b:56:a9:13:5b:09:c7:85:7e:5d:e0:0f:da:b8: 49:3c:c9:4a:cc:16:08:d9:9a:68:d5:ac:c4:2f:ce:46:1f:a2: d9:ec:bd:ae:13:e5:75:ac:1a:c8:ad:35:69:17:54:df:74:31: 1c:5b:37:0e:15:2b:50:c2:be:a3:00:bb:ae:3a:df:9e:bb:b4: 9f:92:e3:3b:4b:db:96:0c:7e:e7:c5:69:37:22:d6:21:3a:89: 23:dd:75:b5:81:95:09:6c:bc:1a:d4:f9:0c:fe:7f:a3:de:49: 40:c6:0e:26:b3:c5:e3:7d:31:95:5e:e8:0d:2e:5a:b7:1f:d2: f5:75:2b:8a:2f:ce:db:4f:89:b8:8f:95:90:e2:ee:de:5e:f2: 3f:01:cd:10:bb:41:dd:40:79:fb:f3:44:d6:2e:2e:b8:8a:e6: c5:c5:8d:8f:ba:48:81:33:8c:96:52:02:05:52:3b:a3:63:75: ff:f4:a6:9c:be:ff:57:97:08:0f:df:4f:97:b5:fd:6d:5c:20: 00:03:29:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB6rBADoRHhxkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MjhkMjFjNGUtZmRkNC00N2MyLThiYjMtYmQyZDc2MjBkODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlloIbd95MKKhSE6k/VYxNR5aTy+NwdqrV6z5 UVLWe+Sul0DCcydmFZyYPCkJ5uOmdnSzknhH79HKixawSNbrXSdQNrXpXewwKyH9 ustPH5lltr9pjRu72mvCeHTasA1+EzQc9tXtx7hx+XnR7k5vAhh/0AZXGmmd//ut eZmZRExEfXZq5mOZqXR6NvXMMtMeT2oJeBohITLBOgvd2+Zd7jHSo84djfg2gJIY MHzJl23trI5iGT1QNS0pDV8r5kTSZX9FvREfW65PPzGIR5aoiZYQaIE9rCC3OOI5 ehC9WsKKhwTxv3VXf1ykFh5SCO8ZETobbmfAaA0vU4EED7MQHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDud7VZgxrjUDARMEmgUGO+ikk9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWFmYzc0ZDUtYmQ5MC0z MjYyLTk5YzEtMjY0ZWU4MTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxll4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVEaDIgqnTHDpAUEUWbdDQe1SGSNg+tBctf7fVCzhoDNg++VRlhJpuT v4iMet26DiRj4Lex0Ssap3KLVqkTWwnHhX5d4A/auEk8yUrMFgjZmmjVrMQvzkYf otnsva4T5XWsGsitNWkXVN90MRxbNw4VK1DCvqMAu6463567tJ+S4ztL25YMfufF aTci1iE6iSPddbWBlQlsvBrU+Qz+f6PeSUDGDiazxeN9MZVe6A0uWrcf0vV1K4ov zttPibiPlZDi7t5e8j8BzRC7Qd1AefvzRNYuLriK5sXFjY+6SIEzjJZSAgVSO6Nj df/0ppy+/1eXCA/fT5e1/W1cIAADKYQ= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:00 2025 by rpki-client