$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa File: 1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa (raw, json) Hash identifier: JWEQHwNRsNq0tn2YU80LniDwfoko8w//F8BhSewMx5E= Subject key identifier: C0:F0:AE:35:B7:7F:D8:13:ED:3B:6C:35:02:2F:2B:00:F0:4A:B8:26 Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Certificate serial: 010D0C9F43285848A830A65002ABCE6207DF07C0 Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 14230 IP address blocks: 198.204.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a6:50:02:ab:ce:62:07:df:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f4f9f2c5-a480-4c19-a29b-b477e484575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:26:11:02:3c:8e:47:cf:2e:98:64:ea:bf: d1:21:2d:64:91:00:46:5a:69:28:20:05:4a:f1:c2: 1c:ed:bf:ea:d4:70:81:ec:65:86:1d:f0:23:b9:aa: 01:b2:2f:09:80:f0:a0:2a:4e:39:79:e8:4e:e1:76: 35:1e:f2:ee:dd:03:cc:0b:cc:7d:a9:78:f6:b6:c9: dc:94:fd:31:bc:2a:4e:e3:64:c4:30:47:39:5d:8d: bd:ea:c7:6a:51:4b:e5:84:59:28:6d:fa:57:a7:2b: 44:03:8d:15:b1:52:8f:83:6d:1f:ba:f7:e5:d0:cc: 99:63:f6:d0:98:86:cc:ff:d7:16:81:67:45:cc:c9: e8:04:12:ed:3f:71:7a:f3:30:87:72:4c:b7:e6:91: 38:25:4f:2d:b0:d5:7a:a5:27:53:64:dc:a3:51:8e: ab:f7:8a:2b:43:0b:be:80:c7:5d:78:8d:71:c1:f3: 94:d4:08:e2:0f:c3:d3:c4:af:65:a3:36:0b:ab:c9: 84:75:a1:51:ef:2c:36:45:80:96:b3:0e:de:11:5b: 1f:c2:b1:b4:f2:c2:d7:98:25:a3:dc:0f:8c:09:37: 38:f9:d6:81:9d:2c:fc:ee:c1:6d:f7:ab:e2:b5:66: 35:8a:b1:de:ab:5d:4b:a5:07:5a:d8:ff:0f:c4:0b: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:AE:35:B7:7F:D8:13:ED:3B:6C:35:02:2F:2B:00:F0:4A:B8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl X509v3 Authority Key Identifier: keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer sbgp-ipAddrBlock: critical IPv4: 198.204.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:07:a0:f3:da:3a:95:ef:81:9e:4c:a7:71:a5:06:ce:d2:86: d5:46:e7:4d:92:58:d5:e8:a9:d9:70:b0:c0:dc:ab:df:ec:0e: 6a:3a:7d:64:e1:84:2a:33:cf:7f:b2:37:d2:dc:59:13:59:c7: 37:14:49:68:88:74:cb:e4:21:de:b1:98:e4:05:2c:e9:d2:de: 41:87:8a:75:a4:1b:cc:65:55:18:7d:b3:18:36:7a:7f:8b:8e: b0:9c:1d:e5:06:6b:75:24:2c:1a:78:11:b7:c5:be:48:23:72: 4a:47:72:c4:e8:48:a7:eb:3b:05:f4:d2:4d:3a:1f:ef:b3:9a: fc:d9:89:8c:28:20:b2:c4:72:fa:ed:76:4b:bb:fe:84:b9:b5: 0c:d9:e1:40:5d:14:f8:e2:c0:4c:46:c0:bc:aa:48:8f:0b:1c: 7e:a5:7c:4b:6c:32:73:58:c1:a4:c2:ee:4e:8f:0e:03:24:2b: 6a:53:04:ae:49:cc:f4:ad:b6:ee:47:a2:72:3f:4a:2a:eb:84: 60:0e:6d:9d:d8:3d:55:15:87:14:1f:94:30:06:20:53:ea:d4: 1e:80:67:17:35:33:ca:7c:4c:dd:4b:be:4e:4f:b5:76:20:b3: bc:f0:47:1d:cd:a5:c3:cd:4e:6a:cb:85:9c:96:b0:bb:b5:e9: 91:e4:0a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKZQAqvOYgffB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYwN2Y4N2YtZDllYy00YTBmLWI2MTEtZDBlZWFkZGU2 YjQyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjRmOWYyYzUtYTQ4MC00YzE5LWEyOWItYjQ3N2U0ODQ1NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArScmEQI8jkfPLphk6r/RIS1kkQBGWmkoIAVK 8cIc7b/q1HCB7GWGHfAjuaoBsi8JgPCgKk45eehO4XY1HvLu3QPMC8x9qXj2tsnc lP0xvCpO42TEMEc5XY296sdqUUvlhFkobfpXpytEA40VsVKPg20fuvfl0MyZY/bQ mIbM/9cWgWdFzMnoBBLtP3F68zCHcky35pE4JU8tsNV6pSdTZNyjUY6r94orQwu+ gMddeI1xwfOU1AjiD8PTxK9lozYLq8mEdaFR7yw2RYCWsw7eEVsfwrG08sLXmCWj 3A+MCTc4+daBnSz87sFt96vitWY1irHeq11LpQda2P8PxAuWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDwrjW3f9gT7TtsNQIvKwDwSrgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NjA3 Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVlYWRkZTZiNDIvMWY5YzNhZTMtOGEyZS0z OTEyLTgzZTAtZWViZjQ4YzkyYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzYwN2Y4N2YtZDllYy00YTBmLWI2 MTEtZDBlZWFkZGU2YjQyLzc2MDdmODdmLWQ5ZWMtNGEwZi1iNjExLWQwZWVhZGRl NmI0Mi5jcmwwHwYDVR0jBBgwFoAUlNlqgFk0RIaJSkjby4cZN5oJl6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NjA3Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVl YWRkZTZiNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxswKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN4HoPPaOpXvgZ5Mp3GlBs7ShtVG502SWNXoqdlwsMDcq9/sDmo6fWTh hCozz3+yN9LcWRNZxzcUSWiIdMvkId6xmOQFLOnS3kGHinWkG8xlVRh9sxg2en+L jrCcHeUGa3UkLBp4EbfFvkgjckpHcsToSKfrOwX00k06H++zmvzZiYwoILLEcvrt dku7/oS5tQzZ4UBdFPjiwExGwLyqSI8LHH6lfEtsMnNYwaTC7k6PDgMkK2pTBK5J zPSttu5HonI/SirrhGAObZ3YPVUVhxQflDAGIFPq1B6AZxc1M8p8TN1Lvk5PtXYg s7zwRx3NpcPNTmrLhZyWsLu16ZHkCrY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:50 2025 by rpki-client