$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/70e385d3-859e-3d75-9a6a-c50b8862efd4.roa File: 70e385d3-859e-3d75-9a6a-c50b8862efd4.roa (raw, json) Hash identifier: Dw22iFrekF/VzyZ922/kMnzL2eio49c/Cg6KT9DeRic= Subject key identifier: 4E:08:24:46:27:83:CA:EB:33:16:04:4C:71:E4:92:C8:85:14:26:C2 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C417495F39B16C053C2E80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/70e385d3-859e-3d75-9a6a-c50b8862efd4.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54179 IP address blocks: 198.188.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:17:49:5f:39:b1:6c:05:3c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=2a93b328-66c4-41aa-85ba-beb79effdb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:79:53:1c:90:65:4c:4e:b9:5a:d2:ab:00: 2d:e2:4c:81:59:a1:10:51:f6:47:5f:c7:b3:36:d1: 8d:a6:d6:e4:23:c0:bb:eb:13:7d:03:4b:c3:c4:bd: 4a:83:24:76:fb:3f:9d:c7:ad:ee:70:ab:6d:46:d0: e7:7d:d9:68:43:a6:64:30:b2:8b:1b:21:cd:b2:5a: b6:dd:48:58:3b:26:2f:28:f7:48:4f:14:95:75:d9: 37:d5:8e:89:09:42:f1:ef:79:c3:0f:cc:40:d5:9a: f8:b6:ad:84:3a:f7:23:9c:64:ce:a6:42:6e:5a:79: 88:4b:d0:6a:74:ce:c1:05:bd:dd:a3:c3:8e:69:df: 3f:b0:bb:5f:05:58:67:e9:15:5d:c8:85:dc:0e:b7: b7:8c:df:11:8a:e1:83:3d:68:32:97:c4:34:df:52: 93:a4:ad:53:6e:1d:f0:7a:9c:ae:86:0c:25:80:0a: 42:91:a9:f5:7f:45:08:48:58:14:cf:6e:f5:53:d5: d1:c6:2a:cd:1e:e1:ce:4d:1e:0a:7f:9f:ed:23:f2: 42:3b:99:71:4f:95:80:c8:3e:76:69:85:87:ca:87: 15:c9:3a:ca:a6:1d:e5:39:d9:d8:8f:b3:a2:3e:19: 17:f4:b1:ad:db:51:cb:fe:60:c2:df:31:1c:80:14: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:24:46:27:83:CA:EB:33:16:04:4C:71:E4:92:C8:85:14:26:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/70e385d3-859e-3d75-9a6a-c50b8862efd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e3:9a:00:d1:09:d9:1b:bc:53:5b:16:6f:c5:f7:53:00:7a: 0e:b4:90:c0:11:43:b0:3f:0b:0e:cd:0f:46:b6:1a:cd:cf:8f: 8d:32:78:e5:7b:49:7d:8a:0e:60:fd:6c:a6:c6:1e:49:80:46: 47:8d:7d:de:e5:2f:a4:fb:a0:75:35:87:20:42:9e:a3:c2:f3: 4f:cf:da:36:a4:93:3b:1a:72:2a:35:8e:e7:74:f8:ab:29:d2: 19:80:b6:c9:46:73:23:74:6e:28:8c:5d:6e:59:e1:cb:81:b5: f2:c7:37:9d:00:c8:4b:b4:cb:34:8c:c2:5a:1b:be:12:a1:59: fc:24:6e:89:18:f6:6e:44:37:a2:f5:97:a6:53:6b:6e:8a:52: cf:f3:af:b4:f0:53:33:1f:e6:6e:60:f6:9c:f1:ad:41:5a:ca: 2a:c2:86:25:02:d4:f8:fd:e7:dc:32:f2:be:1b:f2:97:5f:bd: 26:e3:e2:a7:cb:db:80:98:79:94:37:f7:63:06:a8:14:19:6d: 6e:03:f4:a5:fb:a8:ed:22:55:0c:fb:fe:b4:eb:2b:de:00:58: ca:38:b2:58:15:59:44:0a:02:25:de:e0:96:5a:d7:38:0e:02: 5c:47:a5:d3:ef:07:fe:57:28:eb:8a:34:b2:06:e4:4f:83:93: 19:ad:42:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBdJXzmxbAU8LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmE5M2IzMjgtNjZjNC00MWFhLTg1YmEtYmViNzllZmZkYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLh5UxyQZUxOuVrSqwAt4kyBWaEQUfZHX8ez NtGNptbkI8C76xN9A0vDxL1KgyR2+z+dx63ucKttRtDnfdloQ6ZkMLKLGyHNslq2 3UhYOyYvKPdITxSVddk31Y6JCULx73nDD8xA1Zr4tq2EOvcjnGTOpkJuWnmIS9Bq dM7BBb3do8OOad8/sLtfBVhn6RVdyIXcDre3jN8RiuGDPWgyl8Q031KTpK1Tbh3w epyuhgwlgApCkan1f0UISFgUz271U9XRxirNHuHOTR4Kf5/tI/JCO5lxT5WAyD52 aYWHyocVyTrKph3lOdnYj7OiPhkX9LGt21HL/mDC3zEcgBSTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4IJEYng8rrMxYETHHkksiFFCbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNzBlMzg1ZDMtODU5ZS0z ZDc1LTlhNmEtYzUwYjg4NjJlZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3jmgDRCdkbvFNbFm/F91MAeg60kMARQ7A/Cw7ND0a2Gs3Pj40yeOV7 SX2KDmD9bKbGHkmARkeNfd7lL6T7oHU1hyBCnqPC80/P2jakkzsacio1jud0+Ksp 0hmAtslGcyN0biiMXW5Z4cuBtfLHN50AyEu0yzSMwlobvhKhWfwkbokY9m5EN6L1 l6ZTa26KUs/zr7TwUzMf5m5g9pzxrUFayirChiUC1Pj959wy8r4b8pdfvSbj4qfL 24CYeZQ392MGqBQZbW4D9KX7qO0iVQz7/rTrK94AWMo4slgVWUQKAiXe4JZa1zgO AlxHpdPvB/5XKOuKNLIG5E+DkxmtQp8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:59 2025 by rpki-client