$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa File: ed318ff3-2835-3288-a505-9e112c93201b.roa (raw, json) Hash identifier: eAKS/NvsQbw6IaXHWG5VLcLJ9bsdQPhf/6rEzeppq8c= Subject key identifier: 74:DD:9A:CC:EA:3E:3B:9F:FC:35:81:50:F9:AF:8F:BF:94:D3:90:F7 Certificate issuer: /CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Certificate serial: 010D0C9F432858489340AF842D75D5B23A180F80 Authority key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 396425 IP address blocks: 128.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:af:84:2d:75:d5:b2:3a:18:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=c2ff6bf4-18e8-438f-85fb-c291ba5080a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:43:c1:14:16:ea:83:1c:2c:af:17:75:28: ea:9d:4f:a0:1d:d3:2a:ef:da:c4:b7:b6:4f:37:6f: ca:5d:55:e1:a2:a7:96:dd:36:0b:9f:b4:f5:16:8d: ba:6c:be:ed:4d:9c:ad:d9:5d:10:81:5a:93:ba:bb: 7e:13:eb:d7:fd:2e:be:05:bd:19:cf:5b:a2:06:33: 23:93:43:89:2b:44:3f:16:fb:de:f4:1a:da:f3:95: d4:ed:7f:41:66:76:30:84:c9:9f:89:56:99:d6:de: 03:6b:2c:8c:1f:dd:f0:e6:0a:42:3a:cd:fa:c5:ea: cb:0e:7a:db:4d:eb:86:12:f6:d9:a6:91:12:ac:74: f1:95:f0:ec:34:0c:ed:18:3f:41:7e:e3:75:99:6e: cb:53:30:cc:80:32:5c:be:09:c0:12:a1:30:2a:84: 42:73:2c:6a:1b:ad:eb:54:17:ec:80:b3:98:e7:3f: 55:ea:5c:6f:2f:c7:1d:25:8b:73:ea:73:18:1b:41: 10:14:5c:34:65:9b:5d:2f:f6:46:fb:2f:f8:dc:9a: 85:52:dc:d0:4f:c2:c9:85:5e:78:5f:61:d1:fc:00: f6:e4:46:cd:bb:77:1b:39:b8:1b:e4:b0:3b:8d:57: d9:4a:db:8b:94:28:94:70:df:3d:22:00:b7:26:17: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DD:9A:CC:EA:3E:3B:9F:FC:35:81:50:F9:AF:8F:BF:94:D3:90:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl X509v3 Authority Key Identifier: keyid:97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer sbgp-ipAddrBlock: critical IPv4: 128.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:3b:32:6e:d4:82:e1:36:29:59:90:fc:52:28:be:2a:47: 85:93:7e:46:45:80:f2:a2:50:01:33:18:c4:bd:1c:18:bc:d9: 14:aa:d8:e9:be:4c:d1:25:f5:84:4d:f3:0e:a3:5b:f9:31:f7: 31:71:26:6e:58:ee:33:eb:c0:80:57:0b:e4:0d:0c:c3:27:87: 35:cd:a5:8c:23:be:f8:37:6b:cd:b9:30:a3:77:d8:32:9a:bc: 68:fd:18:cf:83:90:98:56:a9:3f:04:7c:bd:32:00:57:29:cb: 0e:36:08:77:0d:43:a0:05:34:4a:2b:74:ef:0e:43:e7:dd:f3: f0:c4:19:cf:fe:ff:db:a0:42:7f:4a:be:4f:78:09:c0:a7:95: 9a:9f:cd:a5:7e:4b:9b:0e:31:3e:34:b6:b1:22:84:43:1f:ac: c8:c3:e0:51:1c:aa:b0:4d:33:e8:0a:ba:23:41:69:ce:8e:93: 39:89:07:7f:55:d1:02:c1:3e:09:92:73:c5:cb:a4:42:c5:4f: b4:b1:ed:05:93:d9:88:80:1d:69:2d:7e:62:91:86:1a:d2:52: de:ff:ba:5f:16:f7:d5:5a:9c:cd:39:55:8d:34:8a:09:22:3f: fb:c8:ac:96:d0:39:0b:a3:47:9a:38:c8:82:9b:e7:9f:0d:f3: 9a:73:7b:2c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiTQK+ELXXVsjoYD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNjkzNGUtMGJiZi00MzljLWExMTUtNGU2ZjRhOGQ1 M2EyMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk YzJmZjZiZjQtMThlOC00MzhmLTg1ZmItYzI5MWJhNTA4MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2JDwRQW6oMcLK8XdSjqnU+gHdMq79rEt7ZP N2/KXVXhoqeW3TYLn7T1Fo26bL7tTZyt2V0QgVqTurt+E+vX/S6+Bb0Zz1uiBjMj k0OJK0Q/Fvve9Bra85XU7X9BZnYwhMmfiVaZ1t4DayyMH93w5gpCOs36xerLDnrb TeuGEvbZppESrHTxlfDsNAztGD9BfuN1mW7LUzDMgDJcvgnAEqEwKoRCcyxqG63r VBfsgLOY5z9V6lxvL8cdJYtz6nMYG0EQFFw0ZZtdL/ZG+y/43JqFUtzQT8LJhV54 X2HR/AD25EbNu3cbObgb5LA7jVfZStuLlCiUcN89IgC3JhdMKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHTdmszqPjuf/DWBUPmvj7+U05D3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2 OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4ZDUzYTIvZWQzMThmZjMtMjgzNS0z Mjg4LWE1MDUtOWUxMTJjOTMyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWQyNjkzNGUtMGJiZi00MzljLWEx MTUtNGU2ZjRhOGQ1M2EyLzFkMjY5MzRlLTBiYmYtNDM5Yy1hMTE1LTRlNmY0YThk NTNhMi5jcmwwHwYDVR0jBBgwFoAUl3QYBBX9COHAfkms6zr4PoGpoMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZm NGE4ZDUzYTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgMYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjHg7Mm7UguE2KVmQ/FIovipHhZN+RkWA8qJQATMYxL0cGLzZFKrY6b5M 0SX1hE3zDqNb+TH3MXEmbljuM+vAgFcL5A0MwyeHNc2ljCO++Ddrzbkwo3fYMpq8 aP0Yz4OQmFapPwR8vTIAVynLDjYIdw1DoAU0Sit07w5D593z8MQZz/7/26BCf0q+ T3gJwKeVmp/NpX5Lmw4xPjS2sSKEQx+syMPgURyqsE0z6Aq6I0Fpzo6TOYkHf1XR AsE+CZJzxcukQsVPtLHtBZPZiIAdaS1+YpGGGtJS3v+6Xxb31VqczTlVjTSKCSI/ +8isltA5C6NHmjjIgpvnnw3zmnN7LA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:09 2025 by rpki-client