$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa File: 15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa (raw, json) Hash identifier: sq+DBf1b3ukJGRK1wbeZxxGoeM+WAVlVFTNFzDvrQ2A= Subject key identifier: 4D:A4:FF:D0:12:DA:28:5D:25:DB:B3:16:FE:7F:0B:26:D8:7B:A6:22 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64243383888ABA8E6F0D80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 198.244.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:24:33:83:88:8a:ba:8e:6f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=a47f6d0e-1ead-4472-8190-883b9fa0915b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:da:56:07:f1:47:1a:df:c8:f6:c7:f1:b4: 93:21:92:62:df:75:b2:f6:8f:40:09:e9:bb:5c:1b: 7c:e0:9d:c9:7d:47:7c:48:03:c8:9c:6d:9f:ad:b1: bb:0d:29:4e:42:7c:16:ea:d2:75:1d:db:6e:02:8e: 9b:23:fe:6c:ca:aa:5d:e5:1f:c0:9d:f0:29:ad:ea: bd:4f:69:c9:87:ca:72:f4:f7:7c:a0:c8:6a:42:be: f7:4d:dc:a8:e9:6f:27:b0:42:90:44:33:05:9b:c9: dc:74:1f:19:dc:e1:65:b3:2d:9c:6e:fe:4f:8a:e4: 11:99:59:73:ce:3b:d2:7a:83:90:79:90:a4:1d:e6: 2d:ba:b5:68:96:65:7d:67:fa:a8:d5:a3:9b:8d:80: a1:ee:51:14:c9:37:e6:4b:d3:ab:58:de:88:98:30: ad:4f:1e:3f:a8:24:9d:f1:8e:ef:39:bd:0c:fb:c8: 70:2d:cc:54:c9:13:2b:75:d6:dd:cc:e8:30:b1:9e: 37:27:ec:fe:e0:9b:ad:e3:49:a6:03:fc:18:a5:3a: 93:70:c8:db:82:02:4a:03:93:9c:18:53:11:92:96: 3a:83:ac:59:b1:88:c7:54:dc:c5:26:b9:cf:aa:45: eb:ff:43:12:84:27:6e:56:c9:02:ae:6d:70:ae:29: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A4:FF:D0:12:DA:28:5D:25:DB:B3:16:FE:7F:0B:26:D8:7B:A6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/15f733c5-8347-3e3a-a408-a89cc6b1c3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 198.244.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c8:6b:10:e3:ef:7e:69:0f:8b:c0:95:f4:80:a6:26:e1:42: 1e:5b:36:bd:85:fe:b6:d0:47:c4:dc:cc:38:9e:67:f3:d4:80: c4:42:9f:29:af:87:a7:9b:4d:43:54:1b:2e:00:2b:e1:80:e6: c8:29:14:31:36:a2:d0:24:bd:c3:6c:00:e7:44:c8:ef:e8:10: 05:d1:82:64:19:9d:67:a5:5b:ba:71:9e:47:22:3f:64:4b:a5: 64:f6:1a:45:7d:6c:ba:b2:ea:92:65:e2:2b:5b:63:6a:01:52: 34:70:49:59:3e:e4:c8:99:9f:36:8d:89:0a:07:ba:0a:89:af: d5:2f:11:ff:68:86:f8:dd:a2:12:13:9f:66:90:4c:20:a4:58: 9c:52:01:28:ef:68:24:f3:64:d8:2a:c4:b8:34:94:e1:51:e6: ab:c4:28:b1:60:02:8c:c1:b8:fe:28:81:41:06:c1:5d:27:5c: 89:08:e6:5a:43:da:14:45:60:08:12:2b:8f:29:ff:34:f5:52: c6:bc:7f:71:f2:1c:d7:5f:0f:d3:b8:fb:b8:8f:06:57:0d:29: 9b:a3:68:a8:e9:7b:28:43:c8:36:53:ef:c4:cf:39:ce:ee:0b: 2c:e3:02:b0:a3:3a:2e:24:ec:1a:57:c5:77:35:10:33:f4:97: 83:71:cc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCQzg4iKuo5vDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YTQ3ZjZkMGUtMWVhZC00NDcyLTgxOTAtODgzYjlmYTA5MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB7aVgfxRxrfyPbH8bSTIZJi33Wy9o9ACem7 XBt84J3JfUd8SAPInG2frbG7DSlOQnwW6tJ1HdtuAo6bI/5syqpd5R/AnfApreq9 T2nJh8py9Pd8oMhqQr73Tdyo6W8nsEKQRDMFm8ncdB8Z3OFlsy2cbv5PiuQRmVlz zjvSeoOQeZCkHeYturVolmV9Z/qo1aObjYCh7lEUyTfmS9OrWN6ImDCtTx4/qCSd 8Y7vOb0M+8hwLcxUyRMrddbdzOgwsZ43J+z+4Jut40mmA/wYpTqTcMjbggJKA5Oc GFMRkpY6g6xZsYjHVNzFJrnPqkXr/0MShCduVskCrm1wrimMZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2k/9AS2ihdJduzFv5/CybYe6YiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTVmNzMzYzUtODM0Ny0z ZTNhLWE0MDgtYTg5Y2M2YjFjM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfIaxDj735pD4vAlfSApibhQh5bNr2F/rbQR8TczDieZ/PUgMRCnymv h6ebTUNUGy4AK+GA5sgpFDE2otAkvcNsAOdEyO/oEAXRgmQZnWelW7pxnkciP2RL pWT2GkV9bLqy6pJl4itbY2oBUjRwSVk+5MiZnzaNiQoHugqJr9UvEf9ohvjdohIT n2aQTCCkWJxSASjvaCTzZNgqxLg0lOFR5qvEKLFgAozBuP4ogUEGwV0nXIkI5lpD 2hRFYAgSK48p/zT1Usa8f3HyHNdfD9O4+7iPBlcNKZujaKjpeyhDyDZT78TPOc7u CyzjArCjOi4k7BpXxXc1EDP0l4NxzL0= -----END CERTIFICATE-----Generated at Sat Apr 12 12:35:22 2025 by rpki-client