$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa File: d69391f3-6e1a-3ee4-8354-30ffcd168588.roa (raw, json) Hash identifier: D3NakPi9yPIUhHHqMJWu5pz4mFKs/S2xOblEe5ShhRo= Subject key identifier: 41:EC:A1:5E:00:F9:87:3C:88:6A:0F:93:7C:B5:62:5D:38:14:E4:CD Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584975445618B3C61A7289196280 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 11758 IP address blocks: 198.231.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:56:18:b3:c6:1a:72:89:19:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=ba7797a1-6068-4617-ae8e-1ae88d84f276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:46:3f:b6:b1:5c:ac:82:fa:a1:af:38:dc: 3c:ba:22:f6:93:b6:4c:e6:82:b6:61:a1:7d:d6:ba: 1f:b3:19:6f:f6:ba:10:7d:be:6d:71:78:5a:90:42: 3d:14:96:c3:07:43:57:cb:b5:21:c3:39:0a:3d:fa: a3:b1:1f:f0:3c:e9:1a:78:04:ba:70:79:d0:9e:eb: 60:96:f8:b2:a7:3b:e7:87:fc:1c:33:6e:34:f6:a5: f1:7f:ef:4f:60:70:bd:d0:0e:77:49:89:a3:d9:f5: 03:af:71:6b:d6:f3:da:ac:53:f7:0a:f8:cb:ae:8e: 6a:e4:2a:98:ba:a5:25:4f:d1:ce:e1:0b:98:e3:6e: 5e:25:09:de:26:3b:dd:b6:16:d1:05:7a:f8:df:9b: db:e9:85:ae:0a:89:8f:21:e4:44:6f:55:9b:19:1f: ef:5a:78:71:21:d7:12:82:85:a0:9e:92:ac:dd:10: ca:aa:97:74:df:8f:30:52:7f:a1:78:9d:13:44:a4: b0:3d:0d:31:7c:d0:36:64:40:7a:76:13:69:d8:44: 5b:2b:cd:93:10:99:41:9e:aa:93:22:36:f4:d8:61: 4d:e4:29:87:89:25:99:be:67:61:d8:15:0f:92:8f: f2:ad:53:83:ca:7b:d0:14:30:79:f0:53:94:da:ff: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EC:A1:5E:00:F9:87:3C:88:6A:0F:93:7C:B5:62:5D:38:14:E4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 198.231.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:74:e6:9d:fd:d2:2c:6f:fc:c1:fc:01:5d:28:7f:00:ac:73: d9:f6:45:bb:fc:5f:b8:7f:57:10:11:9f:e5:20:6b:f6:b4:6d: e8:ca:63:47:ff:fd:54:d6:9b:5a:6c:9e:28:e7:7f:8f:34:9c: 01:dc:b8:60:d9:1a:57:2e:3a:92:98:ac:df:d5:32:68:d0:fd: 71:90:49:ba:73:71:ed:02:38:68:0c:86:e0:a4:b7:ac:0e:33: 85:52:c8:2c:18:b1:59:c9:47:e8:57:d5:bf:d7:40:f9:1c:fe: ce:76:c9:f2:dc:6c:36:c2:13:20:2d:cc:f7:3e:7f:f0:8a:61: 46:df:ba:89:8c:c6:da:f9:0e:a7:20:d7:e3:f3:86:d6:36:2b: 8e:c1:c0:e8:62:24:68:5b:70:62:eb:12:5d:8c:e1:23:0a:90: 34:7c:e3:b4:d9:e0:9b:76:27:c4:c9:b1:28:a2:e4:f0:80:4f: ad:5d:41:84:dd:19:4f:01:80:31:c9:7a:ca:83:de:42:c0:ad: ae:15:ed:c4:25:48:6b:1e:27:26:0c:18:da:6f:bd:e0:df:b3: 0e:25:ed:48:cf:c0:75:dc:09:3d:93:03:ac:f5:88:5e:95:5d: 09:04:91:ee:27:bc:6c:a5:41:85:73:96:07:ad:81:77:29:3e: 6a:40:8d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFYYs8YacokZYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YmE3Nzk3YTEtNjA2OC00NjE3LWFlOGUtMWFlODhkODRmMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5udGP7axXKyC+qGvONw8uiL2k7ZM5oK2YaF9 1rofsxlv9roQfb5tcXhakEI9FJbDB0NXy7UhwzkKPfqjsR/wPOkaeAS6cHnQnutg lviypzvnh/wcM2409qXxf+9PYHC90A53SYmj2fUDr3Fr1vParFP3CvjLro5q5CqY uqUlT9HO4QuY425eJQneJjvdthbRBXr435vb6YWuComPIeREb1WbGR/vWnhxIdcS goWgnpKs3RDKqpd0348wUn+heJ0TRKSwPQ0xfNA2ZEB6dhNp2ERbK82TEJlBnqqT Ijb02GFN5CmHiSWZvmdh2BUPko/yrVODynvQFDB58FOU2v+1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHsoV4A+Yc8iGoPk3y1Yl04FOTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvZDY5MzkxZjMtNmUxYS0z ZWU0LTgzNTQtMzBmZmNkMTY4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxuccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJ05p390ixv/MH8AV0ofwCsc9n2Rbv8X7h/VxARn+Uga/a0bejKY0f/ /VTWm1psnijnf480nAHcuGDZGlcuOpKYrN/VMmjQ/XGQSbpzce0COGgMhuCkt6wO M4VSyCwYsVnJR+hX1b/XQPkc/s52yfLcbDbCEyAtzPc+f/CKYUbfuomMxtr5Dqcg 1+PzhtY2K47BwOhiJGhbcGLrEl2M4SMKkDR847TZ4Jt2J8TJsSii5PCAT61dQYTd GU8BgDHJesqD3kLAra4V7cQlSGseJyYMGNpvveDfsw4l7UjPwHXcCT2TA6z1iF6V XQkEke4nvGylQYVzlgetgXcpPmpAjZI= -----END CERTIFICATE-----Generated at Sat Apr 12 13:04:33 2025 by rpki-client