$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa File: fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa (raw, json) Hash identifier: /hcsQMAMXJIalLP+KKW6eThB7C+knaL7Ul7eEkXb7wY= Subject key identifier: 94:05:77:9D:3B:C2:7F:38:2F:0E:3D:43:1F:C2:EE:F5:29:25:0F:90 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F432858494E2EB4C47B508B8AF29ACF00 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 2559 IP address blocks: 198.241.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b4:c4:7b:50:8b:8a:f2:9a:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=b34dff6d-1405-4450-9056-9fa1ce680cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:df:69:f4:7f:46:ae:92:c7:c1:c5:f2:0a: 06:03:f1:5d:17:2a:f8:41:bc:44:05:36:9a:f9:50: 2b:2c:10:19:83:d8:d4:cb:47:08:26:27:86:58:f3: e8:2c:c5:ba:70:88:8a:ea:c0:c0:e7:d5:06:0c:62: ff:e8:4e:37:e2:4b:1d:62:17:b1:06:df:92:99:82: 2a:8a:c0:ea:b5:08:34:dd:61:c3:fc:61:ee:8f:fa: 1e:1d:0a:13:65:68:fe:63:12:99:8f:b6:cf:73:02: a7:cd:d8:a7:96:2a:31:eb:64:6a:fb:b6:37:24:17: 5b:2e:75:35:26:ae:24:d3:90:d2:02:04:83:9f:10: 84:62:ff:1d:0e:e1:ca:80:69:f8:b1:5a:f2:41:a3: d5:18:84:8b:0a:c8:91:48:be:56:7a:a9:e1:75:67: f3:2a:22:ac:db:84:ec:0d:08:68:10:2b:79:92:56: 6c:75:bd:36:81:3c:fe:15:07:e3:39:6c:cd:33:b3: a3:b9:21:af:0a:17:fc:10:72:cc:9b:4d:0b:23:f4: 8e:90:45:64:74:56:75:11:f8:17:24:77:70:bf:ac: e8:5b:ae:96:aa:02:5d:11:2e:76:6d:17:cc:cc:9a: fd:5c:4e:21:ff:7c:66:8a:11:a0:aa:26:af:26:af: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:05:77:9D:3B:C2:7F:38:2F:0E:3D:43:1F:C2:EE:F5:29:25:0F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/fd789e9d-fe25-3507-bf0c-e4f07dd4a078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:79:e2:3a:27:51:9d:c5:7e:9e:41:c3:70:9c:b9:99:c2:a2: a7:93:3d:af:32:77:d1:61:e8:79:78:ed:1d:86:d2:0f:01:f4: ba:34:33:6d:22:db:a3:f3:9b:08:0f:83:7b:f3:4e:80:ec:b1: f7:f7:a0:23:39:f1:11:11:e1:81:ae:69:f2:46:4b:83:dd:3c: 61:01:f1:60:a6:92:72:2a:e9:c7:0d:cb:b2:4d:84:90:6d:bd: 82:d0:e3:6d:ed:e1:83:38:35:ad:bf:e7:6b:4b:7c:b4:5e:c1: 63:82:14:26:0f:75:03:14:40:35:39:6c:36:fd:7a:9f:d0:46: 6f:98:27:6d:e1:33:58:99:8b:b3:69:c9:0a:a1:cb:ca:18:cd: 82:b2:82:8d:bf:30:56:70:20:d0:12:87:43:d1:c4:d1:af:6b: 5f:93:7b:02:15:b1:f5:e1:00:57:03:fb:b7:b4:2f:89:77:58: 1a:90:b2:93:44:8d:59:7f:b5:2d:2d:26:da:4d:91:a3:c6:03: 55:fa:b2:eb:b6:7d:b2:16:bf:cf:ef:0c:85:a7:a0:26:a1:7b: 5c:66:70:57:ec:6c:dc:a7:e2:59:98:42:48:04:57:8d:c6:24: 00:03:aa:a8:89:8e:37:f5:9d:1a:86:25:45:a8:b9:51:a5:33: 86:24:13:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrTEe1CLivKazwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk YjM0ZGZmNmQtMTQwNS00NDUwLTkwNTYtOWZhMWNlNjgwY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowbfafR/Rq6Sx8HF8goGA/FdFyr4QbxEBTaa +VArLBAZg9jUy0cIJieGWPPoLMW6cIiK6sDA59UGDGL/6E434ksdYhexBt+SmYIq isDqtQg03WHD/GHuj/oeHQoTZWj+YxKZj7bPcwKnzdinliox62Rq+7Y3JBdbLnU1 Jq4k05DSAgSDnxCEYv8dDuHKgGn4sVryQaPVGISLCsiRSL5WeqnhdWfzKiKs24Ts DQhoECt5klZsdb02gTz+FQfjOWzNM7OjuSGvChf8EHLMm00LI/SOkEVkdFZ1EfgX JHdwv6zoW66WqgJdES52bRfMzJr9XE4h/3xmihGgqiavJq/QXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQFd507wn84Lw49Qx/C7vUpJQ+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZmQ3ODllOWQtZmUyNS0z NTA3LWJmMGMtZTRmMDdkZDRhMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp54jonUZ3Ffp5Bw3CcuZnCoqeTPa8yd9Fh6Hl47R2G0g8B9Lo0M20i 26PzmwgPg3vzToDssff3oCM58RER4YGuafJGS4PdPGEB8WCmknIq6ccNy7JNhJBt vYLQ423t4YM4Na2/52tLfLRewWOCFCYPdQMUQDU5bDb9ep/QRm+YJ23hM1iZi7Np yQqhy8oYzYKygo2/MFZwINASh0PRxNGva1+TewIVsfXhAFcD+7e0L4l3WBqQspNE jVl/tS0tJtpNkaPGA1X6suu2fbIWv8/vDIWnoCahe1xmcFfsbNyn4lmYQkgEV43G JAADqqiJjjf1nRqGJUWouVGlM4YkE30= -----END CERTIFICATE-----Generated at Fri Apr 4 16:09:02 2025 by rpki-client