$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa File: dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa (raw, json) Hash identifier: o5Lfo1qHK7P6KPIuFgdtW9cbHpebZox1WDDJA6nWXac= Subject key identifier: E5:20:71:7F:8C:7A:47:C6:1A:52:1F:69:F6:D8:E4:E0:77:E2:1A:7F Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Certificate serial: 010D0C9F43285848A1360C16704427599C9A0FE0 Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 198.204.9.0/24 maxlen: 24 198.204.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0c:16:70:44:27:59:9c:9a:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=44ed9dbf-c90f-4e84-8349-01db9d4fc8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:d3:c1:b5:39:6b:3c:cc:1e:f4:7c:08:68: b4:50:c4:31:61:fd:2c:cc:cd:a9:ca:2d:7d:11:a4: 31:f8:f9:1d:78:26:00:4f:df:96:42:a2:25:12:9c: ec:dd:7e:14:13:ae:3f:9c:b5:16:c9:2a:d2:07:49: c4:83:df:7b:c5:e8:5b:27:2c:0f:e7:34:0a:87:e7: 64:c1:f9:ee:8b:bb:a7:22:92:4d:4a:c1:d9:14:a9: a3:c4:ed:6f:e4:17:92:91:f4:48:36:74:d6:43:fd: b3:6d:f1:55:02:f0:2c:fa:28:8a:2d:d8:f1:58:67: 59:16:39:ae:36:b8:64:f5:84:2d:7e:47:46:8b:e4: 07:8e:fe:61:99:28:52:6b:f4:4e:72:9d:38:c4:36: 46:58:09:64:c0:b7:64:85:4e:d1:38:b9:8d:c8:9c: bf:d4:0e:31:d9:fe:71:4a:68:cb:18:56:73:55:25: 23:e6:87:98:63:61:03:fd:f4:6e:55:1b:a9:c7:95: 40:45:20:2c:46:fa:2e:50:63:60:49:35:f4:1c:af: b6:31:a8:f5:5b:b7:e8:c6:14:ea:fa:8c:20:55:36: f5:ca:c3:3c:b9:75:51:08:54:70:70:2a:fa:7b:b7: a6:d9:d7:76:c9:62:ee:c5:20:e5:22:73:67:42:27: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:20:71:7F:8C:7A:47:C6:1A:52:1F:69:F6:D8:E4:E0:77:E2:1A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl X509v3 Authority Key Identifier: keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer sbgp-ipAddrBlock: critical IPv4: 198.204.9.0/24 198.204.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:99:00:1a:e7:0c:d7:30:26:5d:41:77:db:3c:c6:3b:95:56: 24:23:d6:6f:d7:e0:31:9a:27:91:41:3c:e1:a4:cd:03:54:b8: d7:d2:03:1c:08:49:6e:5e:e3:f5:de:aa:fc:38:02:3a:98:09: fa:f5:3b:4b:22:52:bd:22:6e:e5:4f:36:69:b3:84:c4:cd:3d: a1:2d:5f:eb:3f:f5:3f:96:9f:03:13:17:98:59:3a:b9:40:f7: 68:fa:25:e8:2a:51:4c:59:c4:bf:c3:df:8b:56:c1:bd:02:e3: c2:4f:b6:cc:41:35:ee:6c:04:df:de:1d:48:6c:f6:55:52:bf: 70:1a:ed:b5:34:4c:e7:cd:0a:b4:ea:10:ad:3a:bb:9b:87:7d: 88:1d:63:40:8e:01:d3:84:7a:dc:93:38:4b:99:3f:5a:3c:bb: 00:ec:b7:6c:4b:3f:05:59:b7:53:9a:41:3a:99:1d:46:22:a3: 96:c2:9f:9c:f7:88:61:79:5d:79:00:c0:7a:a6:6f:88:4d:a7: 4d:d5:02:0e:2d:23:a6:fd:e3:9f:24:aa:1d:e5:09:b1:83:34: 42:6c:18:80:27:44:de:e9:d5:5a:f1:49:02:e0:9c:42:55:02: 3d:dc:d0:d6:06:c3:dc:b3:85:1a:33:54:98:6c:78:0a:8a:9e: 16:ad:96:82 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEihNgwWcEQnWZyaD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYwN2Y4N2YtZDllYy00YTBmLWI2MTEtZDBlZWFkZGU2 YjQyMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NDRlZDlkYmYtYzkwZi00ZTg0LTgzNDktMDFkYjlkNGZjOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOvTwbU5azzMHvR8CGi0UMQxYf0szM2pyi19 EaQx+PkdeCYAT9+WQqIlEpzs3X4UE64/nLUWySrSB0nEg997xehbJywP5zQKh+dk wfnui7unIpJNSsHZFKmjxO1v5BeSkfRINnTWQ/2zbfFVAvAs+iiKLdjxWGdZFjmu Nrhk9YQtfkdGi+QHjv5hmShSa/ROcp04xDZGWAlkwLdkhU7ROLmNyJy/1A4x2f5x SmjLGFZzVSUj5oeYY2ED/fRuVRupx5VARSAsRvouUGNgSTX0HK+2Maj1W7foxhTq +owgVTb1ysM8uXVRCFRwcCr6e7em2dd2yWLuxSDlInNnQidkjwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOUgcX+MekfGGlIfafbY5OB34hp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NjA3 Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVlYWRkZTZiNDIvZGZjOGQ2YjctNzUzZC0z NzAwLWI1ZDgtNTVmODE0NmQwYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzYwN2Y4N2YtZDllYy00YTBmLWI2 MTEtZDBlZWFkZGU2YjQyLzc2MDdmODdmLWQ5ZWMtNGEwZi1iNjExLWQwZWVhZGRl NmI0Mi5jcmwwHwYDVR0jBBgwFoAUlNlqgFk0RIaJSkjby4cZN5oJl6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NjA3Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVl YWRkZTZiNDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxswJAwQA xswNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADyZABrnDNcwJl1Bd9s8xjuVViQj1m/X4DGaJ5FBPOGkzQNU uNfSAxwISW5e4/Xeqvw4AjqYCfr1O0siUr0ibuVPNmmzhMTNPaEtX+s/9T+WnwMT F5hZOrlA92j6JegqUUxZxL/D34tWwb0C48JPtsxBNe5sBN/eHUhs9lVSv3Aa7bU0 TOfNCrTqEK06u5uHfYgdY0COAdOEetyTOEuZP1o8uwDst2xLPwVZt1OaQTqZHUYi o5bCn5z3iGF5XXkAwHqmb4hNp03VAg4tI6b9458kqh3lCbGDNEJsGIAnRN7p1Vrx SQLgnEJVAj3c0NYGw9yzhRozVJhseAqKnhatloI= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:07 2025 by rpki-client