$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa File: 932701dc-5170-37c8-b804-8055128c2742.roa (raw, json) Hash identifier: O9PVR+7yb1NMfLLCKAGICrVeKAA6gZ3rlG/6+HZxa3Q= Subject key identifier: 83:68:7D:9E:A9:4B:1C:34:73:B8:5B:86:E8:1A:7F:45:28:4F:F8:D8 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584930DE62DFC8FF378FE8002EA0 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 36692 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:62:df:c8:ff:37:8f:e8:00:2e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=454ebd54-bf6b-4601-a56d-71658f6034a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:17:67:71:e9:20:57:37:02:98:38:83:08: fa:81:b0:79:9c:be:00:c3:d4:fa:3f:10:7c:17:13: 7b:fe:ed:b7:c9:2f:30:7f:3a:30:ca:8c:58:fc:38: cd:5c:aa:c4:86:a0:33:14:fd:47:39:d2:f1:57:e8: 45:ea:51:46:41:66:dd:98:5d:d5:67:b5:bc:18:72: 71:82:df:13:73:75:bd:e9:3c:81:2d:26:35:51:da: e9:57:e0:8a:1d:bb:ba:73:35:fa:1c:a6:44:67:4c: c9:89:15:6d:5b:74:99:22:01:74:05:1e:30:73:d1: ca:15:b7:a2:34:f5:94:1c:8b:ae:8a:9e:e4:63:59: 3e:3f:d8:36:f3:9a:1d:ba:bf:58:e1:ad:c8:63:ba: 44:1b:23:7e:20:89:ef:23:d2:0c:53:3f:d0:82:cb: 49:8b:e8:68:9c:1b:33:24:0d:0b:db:87:f4:c3:9d: 4e:0f:87:45:cd:ff:23:52:9b:f5:60:ad:66:7f:9e: 6d:fc:a6:ae:4c:32:43:90:08:d9:e4:8f:89:f1:6c: c8:23:f5:96:bc:75:30:22:ca:60:25:04:1b:a4:64: cb:a3:45:2f:22:26:6e:f9:f9:20:f7:da:8f:66:42: fa:71:20:8c:64:dc:36:c8:57:ba:44:66:69:37:f3: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:68:7D:9E:A9:4B:1C:34:73:B8:5B:86:E8:1A:7F:45:28:4F:F8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:23:45:7e:ca:db:b7:77:b5:20:1e:41:1a:04:3f:37:4d:b5: bc:dd:e7:d8:5e:88:ae:4e:13:d6:4d:26:62:b9:f9:81:ac:fa: 8a:31:f9:b8:c9:76:9e:6e:1b:f7:d9:7b:d5:8f:5d:78:1c:67: bb:ab:72:6f:55:d1:5b:20:78:40:a0:b6:4d:79:14:ae:a2:59: 28:dc:57:68:c0:90:04:a5:fa:c3:7b:25:bb:7c:8c:5b:59:3a: 65:88:71:b1:da:93:80:41:88:64:98:bf:c4:da:80:6e:00:37: 5f:61:36:26:e5:6e:11:7e:99:24:94:9e:1c:79:24:77:4c:d8: 8e:3d:2a:c8:57:ab:a3:15:14:c5:1e:43:f9:ef:50:c8:63:8f: 0c:c9:18:74:54:61:f3:3b:44:cd:3f:18:6e:b5:27:7e:ab:86: 51:58:63:1d:41:4a:03:f4:10:30:1e:f1:b9:7a:0f:3c:12:c4: 1f:ce:dd:30:d2:da:3d:47:0f:d8:9b:1f:8a:55:04:1f:cf:ee: 66:16:61:9a:f9:e2:48:ae:13:0a:ce:31:21:de:23:a4:0f:5b: 2d:e2:11:04:d6:de:81:3d:38:99:82:43:72:3d:8a:f5:ac:9d: d6:6e:0f:1b:cd:58:00:d9:0a:3b:5c:fa:d4:83:59:a4:fa:b2: cb:13:ab:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mLfyP83j+gALqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDU0ZWJkNTQtYmY2Yi00NjAxLWE1NmQtNzE2NThmNjAzNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudEXZ3HpIFc3Apg4gwj6gbB5nL4Aw9T6PxB8 FxN7/u23yS8wfzowyoxY/DjNXKrEhqAzFP1HOdLxV+hF6lFGQWbdmF3VZ7W8GHJx gt8Tc3W96TyBLSY1UdrpV+CKHbu6czX6HKZEZ0zJiRVtW3SZIgF0BR4wc9HKFbei NPWUHIuuip7kY1k+P9g285odur9Y4a3IY7pEGyN+IInvI9IMUz/QgstJi+honBsz JA0L24f0w51OD4dFzf8jUpv1YK1mf55t/KauTDJDkAjZ5I+J8WzII/WWvHUwIspg JQQbpGTLo0UvIiZu+fkg99qPZkL6cSCMZNw2yFe6RGZpN/PonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINofZ6pSxw0c7hbhugaf0UoT/jYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvOTMyNzAxZGMtNTE3MC0z N2M4LWI4MDQtODA1NTEyOGMyNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcjRX7K27d3tSAeQRoEPzdNtbzd59heiK5OE9ZNJmK5+YGs+oox+bjJ dp5uG/fZe9WPXXgcZ7urcm9V0VsgeECgtk15FK6iWSjcV2jAkASl+sN7Jbt8jFtZ OmWIcbHak4BBiGSYv8TagG4AN19hNiblbhF+mSSUnhx5JHdM2I49KshXq6MVFMUe Q/nvUMhjjwzJGHRUYfM7RM0/GG61J36rhlFYYx1BSgP0EDAe8bl6DzwSxB/O3TDS 2j1HD9ibH4pVBB/P7mYWYZr54kiuEwrOMSHeI6QPWy3iEQTW3oE9OJmCQ3I9ivWs ndZuDxvNWADZCjtc+tSDWaT6sssTq4g= -----END CERTIFICATE-----Generated at Wed Apr 9 00:23:47 2025 by rpki-client