$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa File: b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa (raw, json) Hash identifier: Hl6k0XbLBBM+Luf5FdsMnQFEUfvw8xJsEsToCq81LLQ= Subject key identifier: 2F:3E:90:59:8D:6D:18:8B:B9:BD:15:26:ED:D1:1B:11:98:82:DA:24 Certificate issuer: /CN=4786912c-91d1-4981-a8a8-ab21be09e84b Certificate serial: 010D0C9F43285848A9963232CF57DB80C8507680 Authority key identifier: 01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 400530 IP address blocks: 198.190.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:32:32:cf:57:db:80:c8:50:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4786912c-91d1-4981-a8a8-ab21be09e84b Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4ad499ad-3710-4c9d-8b23-fd8e20c3bbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:18:cb:f2:3e:f0:c0:4c:bb:e1:c4:9a:43: d1:39:26:94:91:49:cb:1a:a2:55:e0:fa:8f:85:03: 12:c3:50:fe:82:a0:67:08:27:cb:4e:01:29:cc:a0: 8d:3d:fa:0f:c0:3e:a4:b9:ef:7e:13:9d:c2:ae:7b: 6e:77:ea:5e:7a:b0:8c:06:48:2c:df:b7:db:bf:31: 9f:d9:91:9c:4a:6a:0e:cf:e1:1a:3b:54:15:a6:0a: 65:60:f4:1b:0b:6d:48:4d:62:c1:73:31:82:11:dc: df:1b:a8:ba:b6:44:c6:21:98:9c:26:1f:ab:b2:2d: d7:49:d4:5f:ad:31:b8:fe:1a:97:d4:10:a8:47:c2: d0:1c:a0:2c:d0:16:01:38:5d:71:d7:4f:01:2b:1e: 61:3e:ab:c9:ba:0b:aa:d5:85:05:68:80:e0:61:b5: 7d:f7:17:ba:5f:8a:01:24:0f:da:41:58:19:37:8d: d7:f2:ba:6c:7d:87:93:13:5d:34:c5:20:10:22:1b: d7:3f:31:e5:cc:92:63:58:14:c3:eb:93:83:c5:06: f7:29:00:33:b4:c8:2b:95:0e:86:1a:02:68:51:12: f4:5e:6a:cc:da:bd:88:48:8f:0f:1f:17:fa:b9:93: b7:ae:2c:5d:7e:15:8a:02:aa:42:74:d8:88:d8:d4: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:90:59:8D:6D:18:8B:B9:BD:15:26:ED:D1:1B:11:98:82:DA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl X509v3 Authority Key Identifier: keyid:01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer sbgp-ipAddrBlock: critical IPv4: 198.190.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f9:d9:71:5e:09:1d:1d:bc:af:6e:b0:ec:1c:df:ae:31:70: a8:9d:0f:9c:60:47:50:72:92:68:f6:e1:fa:a7:ee:44:12:36: 5d:7c:12:55:79:7d:84:54:ff:63:7e:08:66:04:c2:6c:78:06: 3d:74:de:86:03:54:c0:de:57:ed:89:b7:87:c2:b8:de:f8:3b: 35:f4:f8:ac:a5:a3:08:d1:48:b1:77:d3:a0:5b:99:c6:63:2e: 4f:6f:2d:c2:27:7b:0c:9d:40:30:f8:4d:b8:6a:91:7e:08:24: 74:4e:61:c7:14:2a:2f:d8:e4:ff:6b:57:80:77:2c:d5:b4:8f: 3a:7e:bf:fd:5d:56:1a:c2:8d:a1:71:16:dc:2b:46:6e:25:10: 6d:06:d4:26:25:07:b0:60:7e:50:34:51:b1:83:e1:35:69:dc: 89:19:1c:17:89:2b:e7:15:bc:cc:10:86:78:63:c9:5e:a6:9a: 05:9e:5d:1a:db:46:60:0a:7e:ef:b8:49:60:83:d2:35:9a:91: 8f:d8:84:fb:e5:55:95:15:d0:d1:09:73:36:ec:59:91:7a:a7: 16:57:fd:42:fd:7d:54:6c:6d:a1:b7:92:f1:a7:48:da:f3:92: 2f:7c:43:24:9c:13:28:a5:24:98:cc:31:e9:b8:5b:44:74:9d: 1e:94:67:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljIyz1fbgMhQdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4NjkxMmMtOTFkMS00OTgxLWE4YTgtYWIyMWJlMDll ODRiMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGFkNDk5YWQtMzcxMC00YzlkLThiMjMtZmQ4ZTIwYzNiYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilEYy/I+8MBMu+HEmkPROSaUkUnLGqJV4PqP hQMSw1D+gqBnCCfLTgEpzKCNPfoPwD6kue9+E53Crntud+peerCMBkgs37fbvzGf 2ZGcSmoOz+EaO1QVpgplYPQbC21ITWLBczGCEdzfG6i6tkTGIZicJh+rsi3XSdRf rTG4/hqX1BCoR8LQHKAs0BYBOF1x108BKx5hPqvJuguq1YUFaIDgYbV99xe6X4oB JA/aQVgZN43X8rpsfYeTE100xSAQIhvXPzHlzJJjWBTD65ODxQb3KQAztMgrlQ6G GgJoURL0XmrM2r2ISI8PHxf6uZO3rixdfhWKAqpCdNiI2NRRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8+kFmNbRiLub0VJu3RGxGYgtokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Nzg2 OTEyYy05MWQxLTQ5ODEtYThhOC1hYjIxYmUwOWU4NGIvYjk0ZThkMTEtMmNjYy0z MWM5LTlkYjctOTA2MjgxN2U2ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDc4NjkxMmMtOTFkMS00OTgxLWE4 YTgtYWIyMWJlMDllODRiLzQ3ODY5MTJjLTkxZDEtNDk4MS1hOGE4LWFiMjFiZTA5 ZTg0Yi5jcmwwHwYDVR0jBBgwFoAUAYl3YbBfRS8pMm2dnwNYysztZrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80Nzg2OTEyYy05MWQxLTQ5ODEtYThhOC1hYjIx YmUwOWU4NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT52XFeCR0dvK9usOwc364xcKidD5xgR1Bykmj24fqn7kQSNl18ElV5 fYRU/2N+CGYEwmx4Bj103oYDVMDeV+2Jt4fCuN74OzX0+KylowjRSLF306BbmcZj Lk9vLcInewydQDD4TbhqkX4IJHROYccUKi/Y5P9rV4B3LNW0jzp+v/1dVhrCjaFx FtwrRm4lEG0G1CYlB7BgflA0UbGD4TVp3IkZHBeJK+cVvMwQhnhjyV6mmgWeXRrb RmAKfu+4SWCD0jWakY/YhPvlVZUV0NEJczbsWZF6pxZX/UL9fVRsbaG3kvGnSNrz ki98QyScEyilJJjMMem4W0R0nR6UZ0s= -----END CERTIFICATE-----Generated at Fri Apr 4 18:53:45 2025 by rpki-client