$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa File: f22cd3f7-789c-3752-839b-38ae727d4e3e.roa (raw, json) Hash identifier: 4kwf9EWEIb1Tb73ipl7HU6TGdYBUMlqamN7C6iIcn/A= Subject key identifier: 21:97:F9:9B:5A:47:A0:1C:2A:CC:80:AC:5C:87:A4:CE:02:02:28:9D Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584949FE932571D61B9174BF9900 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 14618 IP address blocks: 198.97.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:93:25:71:d6:1b:91:74:bf:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=73293793-dd8f-474a-9918-c19203028df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:d7:20:97:82:38:12:ff:e7:1a:1a:d3:97: bd:65:da:44:cc:f8:d7:16:62:69:73:0a:60:db:15: 60:1a:ea:f9:0b:97:6f:47:46:6a:e8:55:dc:ca:9f: 39:91:4f:44:50:aa:30:18:37:b7:52:32:73:dc:cc: 8f:cc:57:54:93:d9:12:97:10:23:9a:5d:da:5d:ab: d4:4e:2f:b1:3e:d9:dd:dc:58:df:b6:ca:d3:ae:b5: 43:46:e0:83:e6:a3:2c:90:9c:e9:18:40:35:93:ce: 92:97:52:a5:c2:a9:64:fe:82:91:fd:90:3b:61:de: 82:4c:3c:54:6b:cb:49:5d:ea:bb:57:78:06:e5:3a: 11:2b:a1:12:1c:90:20:e0:fb:ea:07:35:66:92:6b: 8d:ab:7a:2c:18:89:73:1a:9d:2d:10:2b:f4:78:60: 16:2b:99:bf:26:30:14:26:71:10:ba:0c:9f:e4:91: 91:9f:75:13:64:7b:c6:03:a1:57:c5:84:56:95:a8: 2c:20:65:82:bf:7b:f5:23:4f:90:f7:20:e6:3c:ae: aa:a3:46:cb:4d:09:31:aa:4d:c1:d0:85:ff:2b:05: 95:71:eb:2a:4b:67:0d:09:27:d2:01:b9:1c:bb:70: 06:4d:60:c0:7c:07:fa:2d:c3:44:fb:5f:e2:4a:47: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:F9:9B:5A:47:A0:1C:2A:CC:80:AC:5C:87:A4:CE:02:02:28:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/f22cd3f7-789c-3752-839b-38ae727d4e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:2b:30:39:fb:00:8d:e4:eb:af:74:40:cb:66:c0:10:00:e0: 67:aa:42:e1:19:2b:1c:27:60:70:e2:b2:97:c7:d9:8a:68:bf: 06:97:7d:ea:6b:5f:e0:41:b1:71:56:44:0d:6e:00:35:f6:9a: e7:74:bf:e9:40:6e:eb:53:5f:5e:5c:63:06:0d:2a:dd:8f:fb: e7:70:61:4b:6b:71:26:74:5f:d1:a7:27:6d:90:0c:4c:22:4a: 0a:1c:fd:5f:88:85:cb:79:c0:24:47:69:2d:5b:93:16:9a:ad: e3:ec:0e:db:d2:e0:c4:fe:00:0b:24:d7:df:86:fb:06:39:ff: bd:fe:5c:04:e0:bc:e5:45:58:0c:89:02:82:e6:21:5d:9f:92: 52:a7:13:b8:03:4d:2f:ea:97:13:65:af:fe:83:45:ba:c2:ff: 69:fc:76:f0:7b:e9:61:e2:0e:35:6f:29:e8:0c:bb:0e:4d:99: bb:69:3a:02:85:21:91:f3:cb:d8:98:bf:e4:26:2c:c7:33:60: 07:b2:2c:d3:34:49:18:e8:eb:46:68:a5:83:6f:ac:bb:c8:9a: b1:0b:21:e7:d9:b8:82:94:f1:b9:3c:43:3f:8b:f7:8b:35:fa: 74:6b:0d:6a:b7:83:02:7f:d3:9d:8c:d9:9c:64:70:96:b9:a6: a7:72:1f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pMlcdYbkXS/mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NzMyOTM3OTMtZGQ4Zi00NzRhLTk5MTgtYzE5MjAzMDI4ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgPXIJeCOBL/5xoa05e9ZdpEzPjXFmJpcwpg 2xVgGur5C5dvR0Zq6FXcyp85kU9EUKowGDe3UjJz3MyPzFdUk9kSlxAjml3aXavU Ti+xPtnd3FjftsrTrrVDRuCD5qMskJzpGEA1k86Sl1Klwqlk/oKR/ZA7Yd6CTDxU a8tJXeq7V3gG5ToRK6ESHJAg4PvqBzVmkmuNq3osGIlzGp0tECv0eGAWK5m/JjAU JnEQugyf5JGRn3UTZHvGA6FXxYRWlagsIGWCv3v1I0+Q9yDmPK6qo0bLTQkxqk3B 0IX/KwWVcesqS2cNCSfSAbkcu3AGTWDAfAf6LcNE+1/iSkdjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGX+ZtaR6AcKsyArFyHpM4CAiidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvZjIyY2QzZjctNzg5Yy0z NzUyLTgzOWItMzhhZTcyN2Q0ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN8rMDn7AI3k6690QMtmwBAA4GeqQuEZKxwnYHDispfH2YpovwaXfepr X+BBsXFWRA1uADX2mud0v+lAbutTX15cYwYNKt2P++dwYUtrcSZ0X9GnJ22QDEwi Sgoc/V+Ihct5wCRHaS1bkxaarePsDtvS4MT+AAsk19+G+wY5/73+XATgvOVFWAyJ AoLmIV2fklKnE7gDTS/qlxNlr/6DRbrC/2n8dvB76WHiDjVvKegMuw5NmbtpOgKF IZHzy9iYv+QmLMczYAeyLNM0SRjo60ZopYNvrLvImrELIefZuIKU8bk8Qz+L94s1 +nRrDWq3gwJ/052M2ZxkcJa5pqdyH9s= -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:56 2025 by rpki-client