$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa File: edf7a120-a151-375d-869c-0b92a25fccec.roa (raw, json) Hash identifier: 4iQ1akf5cPIgO0RK0ZgpVqDr0HF/5cV9Wz/VFpa4MQA= Subject key identifier: 92:73:0D:23:42:CD:10:4D:21:9C:60:C8:97:40:FB:24:9E:0D:5D:A4 Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584949FE92D39A1BDF5A95F19600 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 55101 IP address blocks: 198.97.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:92:d3:9a:1b:df:5a:95:f1:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=e5243bd3-2086-444c-b6db-03dcdd434086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:0a:08:43:af:4e:42:b8:41:c3:5c:fc:8a: 97:2b:7c:09:e2:47:02:7d:c9:f2:0d:01:da:54:41: 57:0d:bb:98:54:5f:55:01:a4:48:bf:b4:92:05:15: 60:ef:47:fa:e3:77:75:52:62:c5:c8:f9:e7:c8:3b: 21:59:d1:b0:35:26:30:77:5f:6e:04:3e:d7:4e:db: 29:49:03:ff:06:20:ef:cb:cb:96:85:e6:4c:c4:09: 89:60:dd:94:60:27:a3:a7:ee:ab:eb:21:43:6b:19: 20:12:f8:8e:f0:bc:94:62:08:26:63:e3:e9:c2:89: 48:50:79:e8:6b:44:78:f0:29:cc:64:bf:77:8d:dc: d9:69:15:4c:2c:de:34:1c:61:c4:77:c8:3d:ee:37: 9c:75:4b:4a:13:73:32:a7:65:cb:29:aa:a7:96:69: 3a:45:43:13:02:af:15:fa:c3:d0:d3:db:83:fd:69: 48:3d:d1:08:d7:b6:a8:2c:c1:f9:1f:55:02:dd:83: 7c:e7:82:25:3f:23:4c:75:b5:ad:ea:36:fe:df:e2: 1c:2c:75:45:6e:09:e2:08:ef:4d:c1:59:08:f7:61: 62:62:8a:e6:4c:f2:cc:1a:03:0a:97:02:16:ad:53: 1d:c9:5f:64:62:ec:91:d0:73:d2:2f:b8:b0:80:60: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:0D:23:42:CD:10:4D:21:9C:60:C8:97:40:FB:24:9E:0D:5D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:cb:89:49:98:94:58:91:0b:68:9c:06:f4:f4:cf:ae:7c:63: 3e:33:a3:b0:43:78:bf:51:cd:c8:b6:b9:95:97:50:6c:b9:e7: 07:13:aa:30:2a:bd:36:8c:8f:22:a5:13:29:14:f0:65:ba:0f: 7d:ed:f6:74:70:50:58:b0:01:da:f5:d9:e3:98:cc:e6:88:b2: d7:85:55:f3:6d:00:2a:73:7d:28:79:8b:ad:a7:3e:d3:b8:a6: bf:77:1d:00:57:bd:20:79:a4:da:76:f4:ee:b3:e8:dc:c8:d7: 13:38:a8:44:96:97:a8:b0:dd:9f:cb:c9:6a:b4:fa:88:8a:79: 40:bf:11:92:99:65:a4:4d:f6:7a:e3:b0:ca:5d:6e:72:28:86: 14:37:d1:c4:23:9f:d7:94:f6:37:af:6c:15:ef:65:da:61:14: 41:42:6f:a2:eb:2d:61:e7:e7:98:c4:c3:aa:65:fd:9c:34:23: bf:16:5e:cb:14:32:c7:35:8c:47:28:81:ce:af:93:83:89:73: 1d:c5:7f:ba:f9:9b:c8:9f:db:65:79:ed:64:c6:81:87:bb:33: 65:8e:31:d1:ee:7b:46:22:79:95:58:31:96:e3:fb:aa:74:83: d5:de:88:25:0b:c4:66:35:3d:49:38:4d:ad:21:2e:e3:dd:b7: 25:e5:d3:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pLTmhvfWpXxlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZTUyNDNiZDMtMjA4Ni00NDRjLWI2ZGItMDNkY2RkNDM0MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBMKCEOvTkK4QcNc/IqXK3wJ4kcCfcnyDQHa VEFXDbuYVF9VAaRIv7SSBRVg70f643d1UmLFyPnnyDshWdGwNSYwd19uBD7XTtsp SQP/BiDvy8uWheZMxAmJYN2UYCejp+6r6yFDaxkgEviO8LyUYggmY+PpwolIUHno a0R48CnMZL93jdzZaRVMLN40HGHEd8g97jecdUtKE3Myp2XLKaqnlmk6RUMTAq8V +sPQ09uD/WlIPdEI17aoLMH5H1UC3YN854IlPyNMdbWt6jb+3+IcLHVFbgniCO9N wVkI92FiYormTPLMGgMKlwIWrVMdyV9kYuyR0HPSL7iwgGBuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJzDSNCzRBNIZxgyJdA+ySeDV2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvZWRmN2ExMjAtYTE1MS0z NzVkLTg2OWMtMGI5MmEyNWZjY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnLiUmYlFiRC2icBvT0z658Yz4zo7BDeL9Rzci2uZWXUGy55wcTqjAq vTaMjyKlEykU8GW6D33t9nRwUFiwAdr12eOYzOaIsteFVfNtACpzfSh5i62nPtO4 pr93HQBXvSB5pNp29O6z6NzI1xM4qESWl6iw3Z/LyWq0+oiKeUC/EZKZZaRN9nrj sMpdbnIohhQ30cQjn9eU9jevbBXvZdphFEFCb6LrLWHn55jEw6pl/Zw0I78WXssU Msc1jEcogc6vk4OJcx3Ff7r5m8if22V57WTGgYe7M2WOMdHue0YieZVYMZbj+6p0 g9XeiCULxGY1PUk4Ta0hLuPdtyXl0wo= -----END CERTIFICATE-----Generated at Fri Apr 4 19:26:10 2025 by rpki-client