$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa File: e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa (raw, json) Hash identifier: Uqz4u48vucE/FKk0AxqHMxoRWvd+YzmoHDPq1x6C4xU= Subject key identifier: EB:F5:CF:98:FD:70:B0:83:F6:E4:74:0C:3F:BE:35:2A:69:CC:94:AB Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F43285848FD56D13F5435778CB7BA4940 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 2559 IP address blocks: 198.241.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:d1:3f:54:35:77:8c:b7:ba:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=1581766c-61e7-4c20-86cb-5a3b0c0d4102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:fe:c4:24:e8:92:af:42:4a:eb:6e:bc:08: 81:bc:28:3a:70:b2:04:f7:14:96:35:a6:c4:37:31: df:59:71:b9:31:6b:c0:77:54:76:e5:58:b6:79:14: e4:4b:b1:81:51:10:4a:46:e5:67:bc:3c:2c:28:e6: 67:0d:df:d3:d2:14:ee:f1:80:e2:3d:d6:8f:5a:98: 46:bc:d2:42:0b:de:d5:9a:7b:ee:51:87:08:31:ae: a4:09:09:a6:c7:99:22:97:b5:25:37:eb:85:ba:b8: 2c:33:43:de:3f:f4:41:95:7c:a9:6d:de:36:94:4d: 35:29:66:96:43:81:37:dd:6b:72:51:b5:9a:02:21: 63:f7:93:27:bd:04:4d:ce:44:8b:f1:13:e2:4b:a4: 16:93:79:0f:1b:ea:27:bd:69:1a:b6:86:aa:82:ba: e8:83:56:6f:ac:62:12:20:11:10:ee:1d:47:8e:aa: eb:4f:20:07:2b:4e:16:ef:02:67:c6:8d:92:f6:2e: 83:1f:42:86:5b:ab:a6:21:6e:2c:f6:92:89:36:69: 08:37:12:8d:88:65:6e:a7:57:73:c8:ca:43:e6:c1: 17:ac:9f:4e:d9:67:af:61:a3:d2:e0:41:59:57:ef: 35:2e:ab:38:eb:60:a5:32:66:00:4d:d7:80:b6:02: 90:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F5:CF:98:FD:70:B0:83:F6:E4:74:0C:3F:BE:35:2A:69:CC:94:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e80d6264-ef53-3b45-830a-a4c6cb926f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:97:a6:7c:c6:20:51:d1:db:38:b7:2f:b5:04:6d:a4:3d:73: 92:9c:1c:fd:be:54:c7:e5:a8:51:da:08:83:73:bb:35:7f:e3: d2:df:e2:3d:5f:9f:e4:6d:40:82:14:ab:a2:21:ce:c1:11:c2: dc:8b:04:3c:78:67:d3:06:ee:0c:42:80:87:24:9a:44:04:1e: 1d:b1:2f:5c:fe:c5:8f:5a:08:ac:28:63:51:0a:cb:b2:1a:4f: 43:66:90:a5:3a:45:95:49:2f:65:59:19:5d:e4:c0:59:ec:3c: f7:79:85:df:96:31:44:b1:df:48:5c:16:b7:b8:df:e0:92:ef: 63:30:a0:8d:7e:0e:c6:1b:6d:bb:0a:1b:2c:1e:02:2b:d5:00: df:f1:f9:d3:15:17:c2:fe:41:54:ef:af:48:98:39:b7:e5:90: 50:09:8b:a1:08:a5:29:b3:1e:f5:2f:17:53:2e:6d:bd:47:7d: 56:f8:07:02:1d:95:67:61:50:0b:18:2d:ea:92:89:a4:de:05: 7b:4c:16:7f:33:7b:39:62:54:e7:16:1e:8d:9c:04:a9:c3:45: 88:36:a1:c1:e9:e9:2e:0d:d4:6b:fa:32:74:1d:b1:56:b4:13: c3:80:44:9b:90:ea:b1:26:0c:13:63:f6:df:d2:a8:8f:b9:b9: cf:4f:eb:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VtE/VDV3jLe6SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTU4MTc2NmMtNjFlNy00YzIwLTg2Y2ItNWEzYjBjMGQ0MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifj+xCTokq9CSutuvAiBvCg6cLIE9xSWNabE NzHfWXG5MWvAd1R25Vi2eRTkS7GBURBKRuVnvDwsKOZnDd/T0hTu8YDiPdaPWphG vNJCC97VmnvuUYcIMa6kCQmmx5kil7UlN+uFurgsM0PeP/RBlXypbd42lE01KWaW Q4E33WtyUbWaAiFj95MnvQRNzkSL8RPiS6QWk3kPG+onvWkatoaqgrrog1ZvrGIS IBEQ7h1HjqrrTyAHK04W7wJnxo2S9i6DH0KGW6umIW4s9pKJNmkINxKNiGVup1dz yMpD5sEXrJ9O2WevYaPS4EFZV+81Lqs462ClMmYATdeAtgKQYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv1z5j9cLCD9uR0DD++NSppzJSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZTgwZDYyNjQtZWY1My0z YjQ1LTgzMGEtYTRjNmNiOTI2ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuXpnzGIFHR2zi3L7UEbaQ9c5KcHP2+VMflqFHaCINzuzV/49Lf4j1f n+RtQIIUq6IhzsERwtyLBDx4Z9MG7gxCgIckmkQEHh2xL1z+xY9aCKwoY1EKy7Ia T0NmkKU6RZVJL2VZGV3kwFnsPPd5hd+WMUSx30hcFre43+CS72MwoI1+DsYbbbsK GyweAivVAN/x+dMVF8L+QVTvr0iYObflkFAJi6EIpSmzHvUvF1Mubb1HfVb4BwId lWdhUAsYLeqSiaTeBXtMFn8zezliVOcWHo2cBKnDRYg2ocHp6S4N1Gv6MnQdsVa0 E8OARJuQ6rEmDBNj9t/SqI+5uc9P61A= -----END CERTIFICATE-----Generated at Fri Apr 4 16:19:39 2025 by rpki-client