$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa File: cc1a6945-937c-3135-b0c0-bb633dc10995.roa (raw, json) Hash identifier: BGwFtOeGBD1JS+m4kmmfxRCmgF88eeGGYUcX9wu212w= Subject key identifier: 4C:B8:DA:04:3B:2F:87:F7:F7:CC:FF:D9:7F:28:C6:22:9B:C1:F8:8F Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584949FE92C4F228C25C31CD4600 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 55101 IP address blocks: 198.97.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:92:c4:f2:28:c2:5c:31:cd:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=ef125b20-5bf6-4ba9-888e-0a9487141c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:1d:eb:b1:c8:44:d6:d6:dc:21:4e:5a:53: c6:8e:0f:52:0e:28:eb:b9:41:e2:22:ad:43:0a:9f: 27:63:10:0b:dc:9f:c1:9f:f4:16:d9:68:1a:bc:3a: 3f:dd:4b:36:22:4e:16:cd:4e:76:8c:87:24:56:03: 53:9e:bf:07:11:f0:c5:96:41:b6:01:cc:72:41:d8: 44:ce:7b:9c:87:3f:53:9f:26:7c:78:71:c8:2c:ad: fd:54:dc:54:20:9a:3d:e6:d8:a5:08:cb:f4:bc:19: c7:64:37:41:68:38:f2:ff:b8:2f:69:0e:02:49:00: c3:0f:c5:34:8d:c0:93:e4:e2:06:d5:f1:a4:f3:2d: 91:d6:ff:05:60:c0:09:4a:81:5c:73:9d:9c:a9:60: ac:d8:65:49:87:05:e7:14:15:ee:c1:cd:eb:4c:cb: 2b:2b:94:0b:8c:54:d7:f1:17:1e:02:c4:75:6f:f7: b5:29:76:b4:86:c3:11:f6:d7:a5:9b:64:a2:cd:8f: fd:73:c7:a5:d5:07:43:97:ec:ee:ac:e7:14:bf:1b: a9:ef:bb:8a:f8:e7:ec:1a:77:1c:0f:92:14:7c:14: 89:fe:87:3f:92:87:09:b2:fb:ea:bd:2c:cb:eb:79: 17:28:2f:9a:f3:83:e0:3a:2c:e5:a6:1c:2d:9d:5d: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:DA:04:3B:2F:87:F7:F7:CC:FF:D9:7F:28:C6:22:9B:C1:F8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ef:65:fb:e4:66:14:37:44:02:68:16:47:56:37:19:b0:b9: 2c:2b:31:55:6f:24:f6:65:1b:45:07:3c:fe:c9:7e:90:90:88: 2a:dd:6f:7b:22:2d:6b:a5:88:e6:34:5b:8d:01:64:58:2f:96: 47:ae:41:89:01:97:b6:ad:66:eb:73:1e:ba:2b:df:31:07:7e: 48:3f:ce:d6:45:5a:a1:22:84:08:81:57:91:ac:b8:a8:c6:d8: f7:3c:ad:54:4a:15:0a:af:26:00:e2:47:e8:b1:c1:83:86:c0: 17:28:50:82:84:50:33:a9:90:82:cd:45:23:14:4b:19:f2:5c: 9c:54:1f:4d:07:d3:a0:9a:e5:08:6f:af:3e:8b:33:64:0c:fa: b5:ec:95:2d:ef:45:99:99:a9:92:b4:d3:b7:f2:4e:99:84:97: 7b:72:a4:66:c2:dc:f5:95:77:ab:49:78:29:f0:74:dc:0f:5f: bc:b5:fb:0f:3a:95:f7:f7:70:4d:89:14:07:e3:7c:63:6e:17: fd:c8:c7:07:93:c1:ae:e4:8d:2f:92:98:95:1b:de:fb:c8:6f: 04:15:9e:5b:ed:e2:32:9f:c7:4b:82:33:34:72:60:85:f4:b6: 0a:ed:49:0b:a6:a4:ca:27:95:2e:df:07:d8:02:9f:1b:5d:d0: 69:2e:d0:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pLE8ijCXDHNRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZWYxMjViMjAtNWJmNi00YmE5LTg4OGUtMGE5NDg3MTQxYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL8d67HIRNbW3CFOWlPGjg9SDijruUHiIq1D Cp8nYxAL3J/Bn/QW2WgavDo/3Us2Ik4WzU52jIckVgNTnr8HEfDFlkG2AcxyQdhE znuchz9TnyZ8eHHILK39VNxUIJo95tilCMv0vBnHZDdBaDjy/7gvaQ4CSQDDD8U0 jcCT5OIG1fGk8y2R1v8FYMAJSoFcc52cqWCs2GVJhwXnFBXuwc3rTMsrK5QLjFTX 8RceAsR1b/e1KXa0hsMR9telm2SizY/9c8el1QdDl+zurOcUvxup77uK+OfsGncc D5IUfBSJ/oc/kocJsvvqvSzL63kXKC+a84PgOizlphwtnV1igwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy42gQ7L4f398z/2X8oxiKbwfiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvY2MxYTY5NDUtOTM3Yy0z MTM1LWIwYzAtYmI2MzNkYzEwOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfvZfvkZhQ3RAJoFkdWNxmwuSwrMVVvJPZlG0UHPP7JfpCQiCrdb3si LWuliOY0W40BZFgvlkeuQYkBl7atZutzHror3zEHfkg/ztZFWqEihAiBV5GsuKjG 2Pc8rVRKFQqvJgDiR+ixwYOGwBcoUIKEUDOpkILNRSMUSxnyXJxUH00H06Ca5Qhv rz6LM2QM+rXslS3vRZmZqZK007fyTpmEl3typGbC3PWVd6tJeCnwdNwPX7y1+w86 lff3cE2JFAfjfGNuF/3IxweTwa7kjS+SmJUb3vvIbwQVnlvt4jKfx0uCMzRyYIX0 tgrtSQumpMonlS7fB9gCnxtd0Gku0Mc= -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:02 2025 by rpki-client