$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa File: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (raw, json) Hash identifier: LELbK17ZUS24e0X9ZsBVbNvzVsh/q+LyJUvM0jiW+Ao= Subject key identifier: 00:88:1F:9C:9F:9D:7F:2B:CA:1D:92:95:58:8D:60:20:E1:FE:2A:7F Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F43285848D2113AD729A06609AEBD20C0 Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 6531 IP address blocks: 198.186.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:3a:d7:29:a0:66:09:ae:bd:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=5ea4a36d-53b1-4472-aa63-3e8c0569c611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:fa:f2:8e:ba:e2:19:3c:4b:91:ea:fb:dc: 61:a3:c8:8e:f4:ad:dd:be:ee:01:96:3c:a3:01:b3: f5:8f:ff:9f:ac:7c:f4:86:0e:93:e8:97:41:d8:43: 5e:ee:09:3e:4a:dd:f8:7f:4a:fa:ee:56:18:64:b3: c5:7a:dd:4e:db:b6:c3:26:18:20:f9:e8:a3:53:c9: f4:f4:9d:5f:6b:a1:3a:ad:c7:a2:46:4c:23:e2:b6: 16:db:65:86:8b:70:48:49:fa:bf:ab:b7:61:1d:bb: 04:35:f3:bf:d8:10:32:0a:83:24:01:bf:25:86:5b: 85:43:f4:8f:39:fb:b2:29:1e:44:86:8c:83:37:aa: 24:e8:71:1c:21:ea:7d:fe:18:f7:4e:89:31:aa:34: ca:97:d6:c1:4c:75:85:be:a3:4d:4f:2a:b4:d4:58: cd:9d:10:d6:4c:2a:56:32:91:5d:be:29:a1:06:b4: df:20:56:13:0d:c5:38:a7:90:a2:ee:99:51:48:c4: 25:59:5e:33:9f:ce:ff:d2:d8:12:be:92:57:4f:68: a5:62:14:77:98:1d:4d:14:43:bc:0c:ec:76:fc:e5: 06:47:0c:4e:1f:1a:03:f7:ba:44:b9:51:81:cf:ba: 55:46:ac:77:c0:cb:31:df:8b:ec:f0:4e:e5:d3:f6: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:1F:9C:9F:9D:7F:2B:CA:1D:92:95:58:8D:60:20:E1:FE:2A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: 198.186.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:99:eb:c7:48:4c:a8:cd:ff:fb:47:1b:c9:60:89:a0:cc:ac: 1c:22:9e:2b:8a:a4:3b:a6:e1:d1:6a:96:64:51:02:39:0d:c2: cf:24:3a:4c:dd:54:d5:b0:64:9e:71:ce:e9:1e:24:2f:86:ca: 04:e1:f5:bb:18:d9:97:a2:c4:11:b7:03:25:77:0c:b1:32:bb: 7b:d2:5b:4a:b6:d7:61:bd:c1:94:02:6c:78:c0:e8:98:b5:55: 88:4c:a1:7b:ee:9c:69:f6:ff:f9:89:98:f6:21:e3:ae:ee:bb: 41:3a:06:32:86:71:f5:f3:6b:53:a6:3d:97:34:7d:84:cc:a8: c6:3f:08:be:b5:f3:ed:62:bd:a9:36:d9:a9:5e:a8:ce:22:27: 29:47:7e:10:3e:f3:e2:ab:69:93:e3:bd:9e:4e:a3:a8:48:b1: bc:62:c7:03:c0:b9:9a:b3:ca:ca:00:cc:f1:f9:8e:84:c4:61: 93:ae:66:b9:8c:c1:1a:67:17:e1:3b:cc:41:30:35:67:7e:66: 5c:d5:18:cc:85:79:26:fb:a0:93:51:b1:21:f4:8d:33:a0:37: b5:7a:62:54:52:dd:54:51:96:5e:16:79:dc:85:60:42:46:94: b6:4b:a6:95:94:2d:8c:0f:85:53:88:d6:2d:b6:2b:0e:7e:84: d2:33:45:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETrXKaBmCa69IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NWVhNGEzNmQtNTNiMS00NDcyLWFhNjMtM2U4YzA1NjljNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R/68o664hk8S5Hq+9xho8iO9K3dvu4Bljyj AbP1j/+frHz0hg6T6JdB2ENe7gk+St34f0r67lYYZLPFet1O27bDJhgg+eijU8n0 9J1fa6E6rceiRkwj4rYW22WGi3BISfq/q7dhHbsENfO/2BAyCoMkAb8lhluFQ/SP OfuyKR5EhoyDN6ok6HEcIep9/hj3TokxqjTKl9bBTHWFvqNNTyq01FjNnRDWTCpW MpFdvimhBrTfIFYTDcU4p5Ci7plRSMQlWV4zn87/0tgSvpJXT2ilYhR3mB1NFEO8 DOx2/OUGRwxOHxoD97pEuVGBz7pVRqx3wMsx34vs8E7l0/ZVzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACIH5yfnX8ryh2SlViNYCDh/ip/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvODIwYmVjMzktZDM2Ny0z MGE2LWI1ZDktNjI1Y2NiZjVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Z68dITKjN//tHG8lgiaDMrBwiniuKpDum4dFqlmRRAjkNws8kOkzd VNWwZJ5xzukeJC+GygTh9bsY2ZeixBG3AyV3DLEyu3vSW0q212G9wZQCbHjA6Ji1 VYhMoXvunGn2//mJmPYh467uu0E6BjKGcfXza1OmPZc0fYTMqMY/CL618+1ivak2 2aleqM4iJylHfhA+8+KraZPjvZ5Oo6hIsbxixwPAuZqzysoAzPH5joTEYZOuZrmM wRpnF+E7zEEwNWd+ZlzVGMyFeSb7oJNRsSH0jTOgN7V6YlRS3VRRll4WedyFYEJG lLZLppWULYwPhVOI1i22Kw5+hNIzRZ4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:28:19 2025 by rpki-client