$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa File: 2caf07cb-0d21-3238-a345-2f65b0288131.roa (raw, json) Hash identifier: MTxATIXNRYYrqBg0WSwnn3T3a4HA2vwkAQWxC4/jSfo= Subject key identifier: 22:D8:79:AF:92:71:EF:70:0B:90:58:45:49:D6:F5:BD:BE:96:DF:56 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F432858494E2EB4D42B4F7C455D847FE0 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 2559 IP address blocks: 198.241.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b4:d4:2b:4f:7c:45:5d:84:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=81834a08-3b37-4828-bebc-a1a998c7eb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:76:6c:a6:69:d8:46:3e:93:26:e1:42:93:3f: 42:d6:32:fb:f9:57:5a:9d:95:cc:60:83:46:bc:c3: 39:cf:33:3b:f0:0a:7a:51:f6:0e:ff:ae:ef:dc:a4: 2c:15:cf:f0:4b:2c:59:28:ad:67:d9:b3:bc:8f:e4: 60:9d:89:6b:c6:11:d7:c9:a9:15:70:de:39:02:c8: a9:18:e5:e4:08:4c:9b:0e:17:60:08:a6:31:43:c1: 30:a3:8b:0e:83:f7:f6:5b:08:58:b5:98:06:92:a9: 33:4e:59:18:30:e9:b3:45:34:33:ab:6e:fa:7b:3e: 4e:99:68:70:1c:d7:96:36:b0:1d:7b:29:22:7b:84: 90:02:13:52:a8:98:7e:cb:64:62:d1:57:e5:cc:b8: 8f:3b:6d:b4:41:3a:60:62:4f:d5:c1:72:cf:47:f6: b2:d3:9d:ac:78:53:c3:17:20:fb:93:24:98:13:0d: 9b:5b:b3:5c:ea:93:29:e5:1a:aa:2a:c3:d4:1f:0d: 8e:88:eb:7d:13:47:64:66:86:4e:34:52:01:d5:f2: d7:72:d4:44:5a:53:1c:87:83:c8:cf:8e:7d:36:4f: 36:6a:b0:18:4d:64:e3:4e:58:2b:ff:65:10:58:30: e4:0f:65:a4:fa:ec:c9:7f:13:92:9a:8b:a2:85:e9: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:79:AF:92:71:EF:70:0B:90:58:45:49:D6:F5:BD:BE:96:DF:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9a:c7:b4:13:32:25:f8:1e:6c:19:0b:c4:94:38:32:f8:30: 20:10:20:ba:78:55:0f:b4:50:06:e6:f8:de:07:2e:ba:d4:57: f6:c5:77:3e:5f:89:28:72:38:af:e8:fb:60:fe:e3:6c:50:44: 53:58:b5:53:7b:e9:84:82:63:75:ff:59:20:dd:98:bc:0e:67: 07:80:17:e8:72:5f:f6:27:5e:8a:03:a8:32:ed:16:b7:fa:57: b6:8f:5d:45:31:46:d1:f5:b3:e7:67:e3:39:bc:40:f7:78:57: 37:09:af:31:cf:17:f0:24:44:4f:a0:36:44:b4:13:c5:a5:52: 91:bc:d8:06:52:e2:25:73:c6:a4:7b:fb:50:44:8e:96:b1:fc: fb:d2:3a:ec:e0:64:f1:d5:c4:a3:39:33:fb:e5:3b:09:48:87: 5f:09:87:26:a2:5c:12:f9:37:05:c0:23:9c:bd:c3:d1:0f:9e: 09:78:45:d8:a8:e3:a0:16:08:56:a6:6f:6e:cc:1f:c9:bd:d1: be:09:21:00:5e:ae:62:15:e2:44:25:c0:51:59:8e:30:70:ce: ff:81:95:00:84:a1:1e:00:01:3a:7b:ef:46:7f:fa:0d:91:40: 61:45:e6:70:3c:02:67:b7:e8:c6:48:bf:c4:f2:28:0e:9d:0c: 81:3b:d8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrTUK098RV2Ef+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ODE4MzRhMDgtM2IzNy00ODI4LWJlYmMtYTFhOTk4YzdlYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XZspmnYRj6TJuFCkz9C1jL7+VdanZXMYING vMM5zzM78Ap6UfYO/67v3KQsFc/wSyxZKK1n2bO8j+RgnYlrxhHXyakVcN45Asip GOXkCEybDhdgCKYxQ8Ewo4sOg/f2WwhYtZgGkqkzTlkYMOmzRTQzq276ez5OmWhw HNeWNrAdeykie4SQAhNSqJh+y2Ri0VflzLiPO220QTpgYk/VwXLPR/ay052seFPD FyD7kySYEw2bW7Nc6pMp5RqqKsPUHw2OiOt9E0dkZoZONFIB1fLXctREWlMch4PI z459Nk82arAYTWTjTlgr/2UQWDDkD2Wk+uzJfxOSmouihekZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLYea+Sce9wC5BYRUnW9b2+lt9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMmNhZjA3Y2ItMGQyMS0z MjM4LWEzNDUtMmY2NWIwMjg4MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiax7QTMiX4HmwZC8SUODL4MCAQILp4VQ+0UAbm+N4HLrrUV/bFdz5f iShyOK/o+2D+42xQRFNYtVN76YSCY3X/WSDdmLwOZweAF+hyX/YnXooDqDLtFrf6 V7aPXUUxRtH1s+dn4zm8QPd4VzcJrzHPF/AkRE+gNkS0E8WlUpG82AZS4iVzxqR7 +1BEjpax/PvSOuzgZPHVxKM5M/vlOwlIh18JhyaiXBL5NwXAI5y9w9EPngl4Rdio 46AWCFamb27MH8m90b4JIQBermIV4kQlwFFZjjBwzv+BlQCEoR4AATp770Z/+g2R QGFF5nA8Ame36MZIv8TyKA6dDIE72Kk= -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:28 2025 by rpki-client