$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa File: 3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa (raw, json) Hash identifier: W05oI9oVMzAPDoKeD3IeTdmQNbb8rgkWsf5mBbzinFk= Subject key identifier: BB:73:78:5A:6E:AF:12:D9:B8:19:A0:BC:D7:C2:3C:16:4E:3F:14:41 Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F43285849540B8A0AC2BBFB3043892A80 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa Signing time: Thu 27 Mar 2025 15:24:59 +0000 ROA not before: Thu 27 Mar 2025 15:24:59 +0000 ROA not after: Wed 25 Jun 2025 15:24:59 +0000 asID: 13538 IP address blocks: 198.32.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:0b:8a:0a:c2:bb:fb:30:43:89:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Mar 27 15:24:59 2025 GMT Not After : Jun 25 15:24:59 2025 GMT Subject: CN=17529737-f310-4db8-8c4f-460970c6d7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:db:6c:f0:a0:89:3e:a3:d9:ff:6b:ba:a9: 8c:d6:0c:a3:ab:89:61:a1:7f:7f:2a:02:bf:8e:39: 0c:14:aa:9a:70:50:94:8f:86:0e:fd:17:a7:8b:fc: 24:39:01:14:c3:bf:e1:57:4d:b3:5f:f9:be:0f:73: df:1f:e7:29:00:3c:65:bc:9e:e4:e8:68:50:15:85: 5b:40:d0:8a:1b:a6:6d:b6:c9:1c:7f:2b:a8:ec:98: 95:6c:43:db:ea:dc:53:d6:6e:09:99:b0:db:bc:fa: 30:5e:3f:42:b6:94:f3:b0:ba:be:0a:7a:c8:1b:58: 0c:54:f3:09:d6:66:0e:42:f9:29:75:c1:4e:59:b8: 63:87:3e:ef:40:aa:69:52:9a:2e:0f:c5:de:b6:2e: 38:f7:e5:06:26:78:3e:bb:48:c8:75:80:bf:d1:11: 02:94:62:ec:a5:24:62:2d:25:a8:e9:32:c2:73:6f: 28:69:bf:30:d6:44:44:ed:b1:b7:f0:6d:21:09:60: 86:63:56:bb:8e:5c:70:09:00:c7:e5:3c:79:78:0d: 89:bd:df:2e:d1:b4:fc:0e:dd:4f:b1:26:45:39:7a: b8:2d:35:73:f8:8f:34:3f:e7:b4:83:3b:7c:f8:0b: 73:f8:cf:b0:d4:59:25:5f:06:65:27:d2:00:c2:f2: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:73:78:5A:6E:AF:12:D9:B8:19:A0:BC:D7:C2:3C:16:4E:3F:14:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv4: 198.32.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8d:5b:c0:a3:e7:c2:e3:a5:ed:8e:0a:25:ab:21:3c:c6:6c: 33:71:c9:ee:c7:c4:29:fb:5d:34:c5:a6:7f:50:99:1f:a6:2b: 05:2f:75:c8:c6:ee:d9:9c:6c:5e:fa:9a:32:8c:48:5a:f1:ef: bf:03:96:2e:a9:0d:19:09:3b:ae:00:f5:50:48:17:c8:2d:48: 59:5d:64:d8:73:54:ce:4a:10:77:1d:b7:1c:16:73:b7:fc:96: 8c:a5:b2:ce:e2:84:1a:a8:b1:01:45:f2:9f:c6:97:e0:8b:d7: 4e:0a:bd:c0:3b:e3:e8:28:83:1c:9f:18:3e:df:65:11:dc:c5: ac:a2:e1:86:41:d3:5f:32:f5:ff:c6:49:80:30:79:57:51:27: d2:81:33:12:1e:90:1e:c7:a6:e9:46:4c:14:22:7d:9d:10:ae: 79:58:2a:5f:31:e0:0e:58:0c:dc:6a:c8:45:9b:09:c0:01:ec: b4:83:9c:90:02:14:9c:76:23:86:c9:23:d9:84:32:9d:70:64: 55:e3:69:c2:e3:2a:73:dc:ce:3d:eb:6b:2c:20:23:61:6d:00: 4f:c2:b6:06:6e:6d:05:a3:55:b0:84:54:9e:6a:b2:ba:80:db: 88:57:b6:ea:2e:3e:77:2f:62:8e:15:fd:59:64:e3:26:92:79: 05:93:e6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUC4oKwrv7MEOJKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDMyNzE1MjQ1OVoXDTI1MDYyNTE1MjQ1OVowLzEtMCsGA1UEAxMk MTc1Mjk3MzctZjMxMC00ZGI4LThjNGYtNDYwOTcwYzZkN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs7bbPCgiT6j2f9ruqmM1gyjq4lhoX9/KgK/ jjkMFKqacFCUj4YO/Reni/wkOQEUw7/hV02zX/m+D3PfH+cpADxlvJ7k6GhQFYVb QNCKG6Zttskcfyuo7JiVbEPb6txT1m4JmbDbvPowXj9CtpTzsLq+CnrIG1gMVPMJ 1mYOQvkpdcFOWbhjhz7vQKppUpouD8Xeti449+UGJng+u0jIdYC/0REClGLspSRi LSWo6TLCc28oab8w1kRE7bG38G0hCWCGY1a7jlxwCQDH5Tx5eA2Jvd8u0bT8Dt1P sSZFOXq4LTVz+I80P+e0gzt8+Atz+M+w1FklXwZlJ9IAwvIRJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtzeFpurxLZuBmgvNfCPBZOPxRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvM2M2NTRjZDAtZmU2Zi0z ODhmLWFkOGEtZTdkZDA1NzZjMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqNW8Cj58Ljpe2OCiWrITzGbDNxye7HxCn7XTTFpn9QmR+mKwUvdcjG 7tmcbF76mjKMSFrx778Dli6pDRkJO64A9VBIF8gtSFldZNhzVM5KEHcdtxwWc7f8 loylss7ihBqosQFF8p/Gl+CL104KvcA74+gogxyfGD7fZRHcxayi4YZB018y9f/G SYAweVdRJ9KBMxIekB7HpulGTBQifZ0QrnlYKl8x4A5YDNxqyEWbCcAB7LSDnJAC FJx2I4bJI9mEMp1wZFXjacLjKnPczj3raywgI2FtAE/CtgZubQWjVbCEVJ5qsrqA 24hXtuouPncvYo4V/Vlk4yaSeQWT5oY= -----END CERTIFICATE-----Generated at Sun Apr 13 00:31:20 2025 by rpki-client