$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa File: d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa (raw, json) Hash identifier: E72+twfG6tVKaKzDUkGMZjKhjLmqOMgE6Uk7DtpYLG0= Subject key identifier: 26:B3:CF:87:10:A5:01:8F:61:5E:3D:A8:D1:29:CC:9E:62:71:D6:89 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584940397F1E89E6FC32A04D9B80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2152 IP address blocks: 198.189.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7f:1e:89:e6:fc:32:a0:4d:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=2020084a-8172-4d1e-8bc9-79038985ed25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:bb:0d:fa:f4:75:cd:8a:83:6e:09:a6:50: 00:d0:02:ff:b6:67:b7:6a:98:2e:74:43:b4:80:6f: 65:b0:ee:a0:f2:51:c0:bb:d2:f9:09:85:a5:bd:f0: 14:0f:c7:5e:5d:5f:f1:03:ab:85:2f:cd:0a:08:1c: 5d:53:05:32:2a:f5:78:2c:cb:f0:00:f8:86:9a:bc: 36:93:cd:e1:3b:99:46:de:2a:53:06:e7:1a:16:02: 82:89:a7:8c:4a:02:8b:d4:aa:47:6c:d4:5b:9b:3a: bb:08:5c:d4:44:46:01:e0:0f:ab:47:65:75:bf:5a: da:a7:21:ad:dd:d7:07:98:61:11:74:12:10:78:05: c2:95:f4:10:4c:d5:21:70:c3:65:8f:5a:4f:a8:02: 65:7a:5e:95:24:ef:a9:3c:1c:d8:e5:3d:87:5d:85: 93:d0:84:b8:35:00:93:4a:07:d3:43:42:47:2c:b8: d6:6d:03:20:e8:65:66:56:57:9a:0b:b0:85:d2:bc: b3:d2:0e:97:6f:90:5e:37:17:27:ce:ca:eb:f0:ba: a0:6e:67:12:0f:4f:5f:34:df:45:1d:93:86:97:72: 37:57:cb:76:fd:52:cc:79:55:5c:76:a8:47:8a:b2: f4:0a:40:60:98:8b:c3:0c:9c:0a:62:b2:72:5a:fe: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B3:CF:87:10:A5:01:8F:61:5E:3D:A8:D1:29:CC:9E:62:71:D6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3e:e9:62:15:6b:00:03:46:d2:b8:ca:83:c9:fb:6b:fd:57: af:a3:eb:c1:4c:ae:f7:9d:52:1e:68:24:37:31:52:1f:46:a3: a3:ad:8f:17:b4:51:5c:4f:3b:95:7d:e8:45:25:ef:19:da:83: b3:75:44:c9:c0:12:0f:8e:dd:54:e9:4c:2c:2a:16:79:07:cc: 7f:91:45:51:bf:a0:07:24:8a:8c:85:52:de:42:55:7d:c9:8d: 9e:57:8a:34:11:21:b1:43:2b:7e:ff:40:be:27:28:45:68:74: 47:92:45:26:0e:6d:24:52:54:5d:2c:28:2a:fe:a7:8d:bb:d1: 3d:85:79:b1:a8:de:a1:69:2a:05:95:14:a6:e9:21:ef:6b:f4: 83:10:28:6c:34:f9:c8:35:cb:a4:84:75:1a:0f:2e:3f:f3:99: ed:9d:48:af:e4:3b:12:7c:c6:d5:fc:33:4e:47:03:46:98:87: af:d4:0f:2f:c3:97:70:ee:a8:ab:d3:76:f1:4a:11:65:9c:ed: 5c:77:07:fc:82:7d:ad:f1:41:3c:be:bc:30:1b:84:93:50:92: c4:83:89:14:d9:2a:ae:30:55:de:3c:ca:4e:71:cb:e4:fe:00: 5b:d5:ff:21:67:53:ae:43:f6:6d:47:da:1e:ae:28:40:e5:38: 0e:7c:dc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX8eieb8MqBNm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MjAyMDA4NGEtODE3Mi00ZDFlLThiYzktNzkwMzg5ODVlZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzW7Dfr0dc2Kg24JplAA0AL/tme3apgudEO0 gG9lsO6g8lHAu9L5CYWlvfAUD8deXV/xA6uFL80KCBxdUwUyKvV4LMvwAPiGmrw2 k83hO5lG3ipTBucaFgKCiaeMSgKL1KpHbNRbmzq7CFzUREYB4A+rR2V1v1rapyGt 3dcHmGERdBIQeAXClfQQTNUhcMNlj1pPqAJlel6VJO+pPBzY5T2HXYWT0IS4NQCT SgfTQ0JHLLjWbQMg6GVmVleaC7CF0ryz0g6Xb5BeNxcnzsrr8LqgbmcSD09fNN9F HZOGl3I3V8t2/VLMeVVcdqhHirL0CkBgmIvDDJwKYrJyWv7DFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCazz4cQpQGPYV49qNEpzJ5icdaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZDFhNGZiNmUtYzNmZS0z MjJkLThiODktMDBhMTc4Y2ZlNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg+6WIVawADRtK4yoPJ+2v9V6+j68FMrvedUh5oJDcxUh9Go6Otjxe0 UVxPO5V96EUl7xnag7N1RMnAEg+O3VTpTCwqFnkHzH+RRVG/oAckioyFUt5CVX3J jZ5XijQRIbFDK37/QL4nKEVodEeSRSYObSRSVF0sKCr+p4270T2FebGo3qFpKgWV FKbpIe9r9IMQKGw0+cg1y6SEdRoPLj/zme2dSK/kOxJ8xtX8M05HA0aYh6/UDy/D l3DuqKvTdvFKEWWc7Vx3B/yCfa3xQTy+vDAbhJNQksSDiRTZKq4wVd48yk5xy+T+ AFvV/yFnU65D9m1H2h6uKEDlOA583LQ= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:18 2025 by rpki-client