$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/29717f9a-0cc2-3151-8090-91e2ca542402.roa File: 29717f9a-0cc2-3151-8090-91e2ca542402.roa (raw, json) Hash identifier: 1x2CdwxdQ1dJLTt3Dxd+SAhCzjZrwtam6ewRdyoUk0w= Subject key identifier: 6C:9B:C2:59:0D:83:F9:E2:EB:5B:73:75:9A:49:4A:A6:8C:E3:A9:1D Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C41759A95CBA91F10A0500 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/29717f9a-0cc2-3151-8090-91e2ca542402.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54179 IP address blocks: 198.188.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:17:59:a9:5c:ba:91:f1:0a:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=7236a374-0ba6-493f-8a23-8adfddc4f07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:b6:73:51:d8:ec:68:6b:d8:9d:90:98:ba: e7:25:b7:d6:9a:9b:85:43:c9:c1:ee:83:32:04:1c: e8:2d:89:d2:1e:1c:a7:fb:03:a7:56:93:76:a0:ab: 51:34:6b:c6:d8:ec:8c:cc:5c:48:85:6b:b7:43:a8: b8:7a:52:46:10:a1:8e:d6:a1:c3:d3:a2:58:00:c0: 31:47:49:aa:75:12:9a:2e:49:e8:a3:94:7b:9a:a8: 6d:b1:cb:f4:2d:38:9f:9f:4c:9b:c0:40:46:65:fa: 54:35:7c:b8:74:79:45:0a:05:60:bc:05:91:97:e6: cb:cc:80:24:78:f3:45:ed:ab:21:d0:7c:dc:5f:45: 40:57:26:a6:64:36:13:47:48:cf:41:c7:f8:e4:9e: d9:87:b9:7e:fd:b5:f4:9e:5e:99:b0:3f:1a:e7:4e: 49:c9:22:68:68:a1:a6:d0:b4:7b:f5:65:01:9b:44: 90:f8:4b:11:27:20:c2:af:88:07:f6:3c:ff:a0:d8: 9e:6a:cf:41:65:ab:81:af:76:69:b9:80:1c:1d:fe: 6d:68:ed:91:e9:c9:c3:be:fa:39:26:2a:d8:92:55: c7:a2:32:ed:57:18:b9:a0:cc:d4:a1:52:44:f8:87: 0d:0c:00:92:ab:9a:f4:21:51:b7:3c:08:91:25:a2: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:C2:59:0D:83:F9:E2:EB:5B:73:75:9A:49:4A:A6:8C:E3:A9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/29717f9a-0cc2-3151-8090-91e2ca542402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:00:80:52:f8:04:e3:d1:ae:19:02:fc:b7:47:8a:ac:85:c1: 14:1f:01:71:c8:db:e6:64:4e:4b:17:6a:de:f6:26:c5:f4:29: 09:5f:a5:74:91:a5:28:70:94:54:57:de:d8:7a:7d:db:64:40: ba:83:0f:df:a9:65:1d:bb:35:e6:94:af:cf:e7:e8:e4:42:1f: af:ef:be:31:4b:44:db:14:22:43:1e:e7:c2:05:ed:a4:fd:9e: cf:5d:69:d4:a3:58:c1:a7:c9:00:06:1e:e6:7a:54:bb:2c:3f: 53:10:a1:df:f7:ee:90:20:1b:33:2c:fc:49:45:82:7d:43:05: 5d:af:67:2b:45:b5:e1:6a:f7:07:64:10:56:0b:6d:75:5b:58: 62:9e:c9:60:59:c0:0a:1e:67:b9:92:58:79:a8:4d:b8:f4:e5: b6:ed:3c:1a:3c:46:99:30:58:be:61:a1:16:d6:99:84:33:7c: 9f:d7:82:40:b2:52:ef:a6:d0:08:58:78:56:f7:8a:af:3c:86: 27:12:3f:09:f8:88:5b:c5:30:84:ea:16:af:df:9a:a6:67:30: a5:a1:1d:d3:3e:0d:21:fc:cf:89:9f:e9:3e:04:39:c1:bb:51: e2:89:77:1c:d1:ab:52:17:af:3d:76:1b:70:f5:15:e7:e9:d4: f6:85:e2:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBdZqVy6kfEKBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzIzNmEzNzQtMGJhNi00OTNmLThhMjMtOGFkZmRkYzRmMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLC2c1HY7Ghr2J2QmLrnJbfWmpuFQ8nB7oMy BBzoLYnSHhyn+wOnVpN2oKtRNGvG2OyMzFxIhWu3Q6i4elJGEKGO1qHD06JYAMAx R0mqdRKaLknoo5R7mqhtscv0LTifn0ybwEBGZfpUNXy4dHlFCgVgvAWRl+bLzIAk ePNF7ash0HzcX0VAVyamZDYTR0jPQcf45J7Zh7l+/bX0nl6ZsD8a505JySJoaKGm 0LR79WUBm0SQ+EsRJyDCr4gH9jz/oNieas9BZauBr3ZpuYAcHf5taO2R6cnDvvo5 JirYklXHojLtVxi5oMzUoVJE+IcNDACSq5r0IVG3PAiRJaKRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGybwlkNg/ni61tzdZpJSqaM46kdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMjk3MTdmOWEtMGNjMi0z MTUxLTgwOTAtOTFlMmNhNTQyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEAgFL4BOPRrhkC/LdHiqyFwRQfAXHI2+ZkTksXat72JsX0KQlfpXSR pShwlFRX3th6fdtkQLqDD9+pZR27NeaUr8/n6ORCH6/vvjFLRNsUIkMe58IF7aT9 ns9dadSjWMGnyQAGHuZ6VLssP1MQod/37pAgGzMs/ElFgn1DBV2vZytFteFq9wdk EFYLbXVbWGKeyWBZwAoeZ7mSWHmoTbj05bbtPBo8RpkwWL5hoRbWmYQzfJ/XgkCy Uu+m0AhYeFb3iq88hicSPwn4iFvFMITqFq/fmqZnMKWhHdM+DSH8z4mf6T4EOcG7 UeKJdxzRq1IXrz12G3D1Fefp1PaF4kI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:11 2025 by rpki-client