$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa File: 28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa (raw, json) Hash identifier: cO8KeeZwU9GW9Tbtcwl1AoTiciiTwOn/Ee751HaHfsk= Subject key identifier: 26:61:68:EA:C4:13:4D:49:C0:3D:D5:4F:B1:8A:55:DE:A7:A1:45:C8 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F432858489BA0A837ABA5DC1BDEE35D00 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 2559 IP address blocks: 198.217.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a8:37:ab:a5:dc:1b:de:e3:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=d3a36347-c9f5-4d99-b29e-22777abbab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:5a:63:69:13:c5:2b:eb:ec:b8:8e:52:6a: 26:27:02:d0:16:f5:c8:fe:94:14:3a:7d:06:bd:fc: 95:6b:99:0a:bb:e6:fc:8d:62:a7:0c:65:88:38:0d: de:69:68:b3:43:91:a6:f4:8b:16:af:8c:13:2d:67: 83:87:f7:b8:2d:82:23:75:9d:4b:eb:fa:20:b4:b9: 66:6e:a0:1b:8e:3a:94:f0:2b:4e:b0:43:57:39:21: 94:19:1e:9f:d1:eb:18:81:77:99:87:cd:78:f1:21: 4b:17:ef:03:f2:23:c7:27:db:80:ca:a4:4a:83:c2: d7:ca:cf:2c:49:a7:32:63:63:8f:be:2e:01:a0:5a: eb:4f:d4:7b:74:4e:d4:18:59:1e:28:06:6d:22:54: 8d:2d:e0:38:28:89:43:49:0c:87:07:8d:78:d0:16: 58:82:fe:9c:e0:10:a8:d5:41:70:28:33:24:e7:2b: 10:fe:16:3d:50:91:fe:62:8b:3d:bf:88:f3:e5:bb: 1e:de:5a:d6:54:7e:94:60:0b:e3:d3:8f:8d:89:ed: da:01:60:67:8b:6c:f2:1c:39:e3:b6:9e:d2:40:84: 0e:81:c4:10:48:a7:9f:40:03:67:b4:20:ee:60:67: 68:e5:4b:80:d2:cb:33:03:66:42:94:64:33:84:84: 0b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:61:68:EA:C4:13:4D:49:C0:3D:D5:4F:B1:8A:55:DE:A7:A1:45:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.217.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2c:6a:26:73:04:60:a8:7e:88:01:ae:9c:c4:d2:1a:72:ee: 8e:f4:32:03:e5:90:3b:ab:1d:87:0f:56:64:b7:49:4d:18:30: 55:25:f8:f7:f5:7d:fa:1f:96:5a:01:4f:ff:48:79:13:90:65: bb:a5:b7:63:1e:25:14:90:ce:09:6f:4e:83:91:6b:7c:50:12: 1f:93:ff:7b:01:fb:49:1c:c9:52:09:d6:33:41:ff:7f:77:2a: 68:d4:84:12:f5:c5:03:a0:36:10:c3:29:fe:53:b3:e8:00:d0: 5d:9b:e1:48:75:73:e7:b9:12:2c:ad:9f:72:5c:a6:70:73:c5: cf:ae:56:32:d9:9e:e3:7f:5f:89:57:b6:e3:49:9a:13:f1:b9: e7:21:74:a8:56:45:f8:e1:2c:b9:17:40:e4:f0:36:79:81:b9: 18:78:13:e6:71:a6:21:ed:05:f5:df:36:8f:c5:61:f9:05:6c: ef:13:49:88:2c:10:f4:e3:9f:2e:a7:fb:f7:fc:2a:2a:88:4d: 11:2f:d6:5d:5b:9c:43:0b:c5:51:35:f4:17:6c:64:e1:99:1f: 12:94:f7:9c:6c:2c:1a:d5:ff:59:8c:24:60:a1:38:3e:18:a4: 34:bf:f0:70:7c:78:ba:d7:5d:90:62:f3:44:e2:06:1b:28:ca: 6f:44:a8:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKg3q6XcG97jXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZDNhMzYzNDctYzlmNS00ZDk5LWIyOWUtMjI3NzdhYmJhYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+RaY2kTxSvr7LiOUmomJwLQFvXI/pQUOn0G vfyVa5kKu+b8jWKnDGWIOA3eaWizQ5Gm9IsWr4wTLWeDh/e4LYIjdZ1L6/ogtLlm bqAbjjqU8CtOsENXOSGUGR6f0esYgXeZh8148SFLF+8D8iPHJ9uAyqRKg8LXys8s SacyY2OPvi4BoFrrT9R7dE7UGFkeKAZtIlSNLeA4KIlDSQyHB4140BZYgv6c4BCo 1UFwKDMk5ysQ/hY9UJH+Yos9v4jz5bse3lrWVH6UYAvj04+Nie3aAWBni2zyHDnj tp7SQIQOgcQQSKefQANntCDuYGdo5UuA0sszA2ZClGQzhIQL2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZhaOrEE01JwD3VT7GKVd6noUXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMjhjMzBhYTUtNGJjZC0z OWVmLWIzNGQtMGUwNDFiMjViNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtnjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcsaiZzBGCofogBrpzE0hpy7o70MgPlkDurHYcPVmS3SU0YMFUl+Pf1 ffoflloBT/9IeROQZbult2MeJRSQzglvToORa3xQEh+T/3sB+0kcyVIJ1jNB/393 KmjUhBL1xQOgNhDDKf5Ts+gA0F2b4Uh1c+e5Eiytn3JcpnBzxc+uVjLZnuN/X4lX tuNJmhPxuechdKhWRfjhLLkXQOTwNnmBuRh4E+ZxpiHtBfXfNo/FYfkFbO8TSYgs EPTjny6n+/f8KiqITREv1l1bnEMLxVE19BdsZOGZHxKU95xsLBrV/1mMJGChOD4Y pDS/8HB8eLrXXZBi80TiBhsoym9EqKw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:53 2025 by rpki-client