$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa File: 3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa (raw, json) Hash identifier: owiYSWNjH/RuM3iyRINjo6fNWKjkBR3PCXJD49CGZc8= Subject key identifier: 6C:5D:66:2B:63:6F:9E:32:EB:25:8E:B6:45:D7:9F:84:54:51:9A:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489E6B679D383088E0D5605280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 63949 IP address blocks: 198.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:67:9d:38:30:88:e0:d5:60:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e91d39ed-824e-478a-9fbd-4a8d76f89693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:14:7f:3b:f6:87:5e:cf:37:28:9f:cb:e2: 21:08:a7:d2:20:c2:18:0d:67:74:c1:e8:94:95:7c: 1d:c0:d4:07:b9:a4:f0:36:03:3d:3c:b4:7c:5d:94: d6:90:c4:65:18:54:9c:e3:a2:22:62:db:af:b5:db: 73:43:92:82:1f:5c:14:f3:33:83:de:45:06:26:74: 8d:2d:c8:d3:14:b7:95:53:45:29:36:da:6f:8e:e7: 03:ed:dd:63:39:85:9d:91:f9:0a:7f:24:28:31:16: 80:0e:52:6e:c2:b3:4a:c4:00:41:f8:6e:ac:6f:9e: 5f:d8:ab:a0:52:ca:2e:93:ac:85:da:6d:9c:e6:3a: 9f:08:14:dc:99:43:cc:dd:e3:10:fa:48:0c:c8:f4: 1b:4b:11:9c:93:a9:a5:29:56:55:cc:67:79:e2:c5: 9e:47:b9:e3:e1:09:70:6d:6e:7b:9c:c9:62:0d:5f: c7:7a:72:27:e4:c1:f9:44:e8:40:49:ad:0f:80:40: 21:03:37:6b:1a:6f:59:fb:06:20:d6:cc:80:80:91: 5f:3e:32:e7:f3:f4:1d:24:c5:35:ff:cd:15:60:22: 72:5b:34:20:e4:d6:cd:87:8f:e1:e7:78:b8:f0:03: 39:e1:63:0d:6c:a2:41:64:d6:18:18:53:2c:0b:44: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5D:66:2B:63:6F:9E:32:EB:25:8E:B6:45:D7:9F:84:54:51:9A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 198.74.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c9:4b:1b:49:a3:4b:55:17:f6:c1:31:39:9a:76:9b:c7:09: a3:8d:7e:0a:29:44:e8:85:b7:d1:36:cb:53:8c:12:96:b8:70: 52:b3:ae:71:f1:da:0f:83:5e:4f:bd:e8:c5:5f:0e:ee:88:5c: c9:8e:df:a9:5d:d2:8b:e9:4a:78:71:b7:e0:dd:a3:e7:7b:40: 17:79:ca:41:a9:88:60:20:8d:fa:29:52:59:81:49:0f:b2:6a: 25:2e:52:b7:dc:e9:d2:c2:07:89:1a:ef:f2:50:aa:d3:51:31: ce:d9:a8:7d:0e:26:01:c1:e3:8d:9e:f7:55:62:83:51:ce:cf: dc:9f:78:8a:ed:38:4d:55:fc:79:7a:53:a9:f5:16:29:ce:d3: ba:9a:d1:7e:d4:c7:9d:d8:88:32:16:05:69:71:ec:69:58:3e: ca:8c:e4:be:12:c7:cb:59:af:ee:93:ec:76:d3:90:4e:5f:d8: f6:81:75:2f:0b:c2:b6:b4:40:49:1b:af:ce:e9:9c:ff:0b:ae: 1c:da:6b:6d:fe:f0:88:b0:67:91:2b:09:3b:75:97:cb:9e:24: 12:8a:50:0e:24:a9:3a:34:42:67:23:67:12:ae:7f:fe:cf:39: 9d:7e:26:cb:de:ec:17:56:e3:f6:12:35:b5:24:32:e2:aa:15: 7b:96:e5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2edODCI4NVgUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTkxZDM5ZWQtODI0ZS00NzhhLTlmYmQtNGE4ZDc2Zjg5NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIsUfzv2h17PNyify+IhCKfSIMIYDWd0weiU lXwdwNQHuaTwNgM9PLR8XZTWkMRlGFSc46IiYtuvtdtzQ5KCH1wU8zOD3kUGJnSN LcjTFLeVU0UpNtpvjucD7d1jOYWdkfkKfyQoMRaADlJuwrNKxABB+G6sb55f2Kug Usouk6yF2m2c5jqfCBTcmUPM3eMQ+kgMyPQbSxGck6mlKVZVzGd54sWeR7nj4Qlw bW57nMliDV/HenIn5MH5ROhASa0PgEAhAzdrGm9Z+wYg1syAgJFfPjLn8/QdJMU1 /80VYCJyWzQg5NbNh4/h53i48AM54WMNbKJBZNYYGFMsC0Q8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxdZitjb54y6yWOtkXXn4RUUZpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUyOGRiN2MtNDEzYi0z YjZlLWI2ZGItZmE1Y2E3ODQ1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExkowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7JSxtJo0tVF/bBMTmadpvHCaONfgopROiFt9E2y1OMEpa4cFKzrnHx 2g+DXk+96MVfDu6IXMmO36ld0ovpSnhxt+Ddo+d7QBd5ykGpiGAgjfopUlmBSQ+y aiUuUrfc6dLCB4ka7/JQqtNRMc7ZqH0OJgHB442e91Vig1HOz9yfeIrtOE1V/Hl6 U6n1FinO07qa0X7Ux53YiDIWBWlx7GlYPsqM5L4Sx8tZr+6T7HbTkE5f2PaBdS8L wra0QEkbr87pnP8Lrhzaa23+8IiwZ5ErCTt1l8ueJBKKUA4kqTo0QmcjZxKuf/7P OZ1+Jsve7BdW4/YSNbUkMuKqFXuW5as= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:04 2025 by rpki-client