$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa File: 0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa (raw, json) Hash identifier: tBdnB9wmQzVz4R63a8sfaLdwBgeL++CNIs6HHvdDM+U= Subject key identifier: EE:0F:B5:52:EC:B0:D0:E4:9C:18:48:05:19:03:00:4C:B0:1E:A3:14 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848B1F62DFB9AC3D48BC57B5F00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 30058 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2d:fb:9a:c3:d4:8b:c5:7b:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=eba24a62-11f7-4afa-998a-634d485218ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:1d:c5:52:06:3d:9f:15:e9:58:aa:0c:15: 9b:85:5c:32:ec:41:d4:3c:d6:74:66:c7:d1:f7:85: 65:66:6a:db:ac:19:b9:72:36:ca:88:cc:d1:0c:1d: b6:cb:5f:56:ea:ee:55:e1:73:93:6d:ea:f6:c5:cb: bc:ab:1e:83:1a:97:de:29:9e:43:a9:56:13:9f:c9: c9:de:5b:ff:bd:1f:97:4d:f5:f0:17:48:bd:48:26: 18:fe:1a:f4:b8:e7:9d:c3:79:84:6a:15:ed:3a:44: 4d:38:b8:8e:bf:e6:70:da:b3:9e:fc:2f:9f:09:41: 29:78:7b:28:e2:5e:57:5a:4b:a8:82:69:8f:a5:53: 05:3a:ee:6b:42:93:9a:43:05:5c:f7:8a:6b:ab:d0: c4:f3:2b:37:e9:4d:ec:68:b0:72:45:76:9e:bb:79: c1:dc:ae:ab:39:3a:e1:37:3d:44:a0:fa:02:e2:b4: 00:43:89:89:51:c2:41:50:98:05:c8:ba:75:f0:23: 8d:4a:dd:c3:7f:75:2d:35:0b:59:26:5c:54:f6:ca: eb:2a:a3:96:bb:cd:e0:0b:e6:f9:96:c4:00:1d:ed: 20:15:4b:d8:2d:be:9b:4c:80:45:07:b1:d6:2c:df: f2:3d:c6:db:23:73:26:ca:35:55:1b:62:ea:e0:59: 3b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0F:B5:52:EC:B0:D0:E4:9C:18:48:05:19:03:00:4C:B0:1E:A3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:be:6a:d5:95:05:d9:1c:00:b1:96:8f:8b:a8:96:76:1f:6e: d2:1b:ea:a0:66:10:9f:1d:4d:a6:e8:5e:a0:10:f6:48:8c:49: 77:fa:03:0c:97:08:a4:5e:9b:31:da:0d:f3:00:21:1a:30:da: 72:59:12:d8:5e:08:6f:cc:4a:a3:f7:69:07:cd:6b:66:a8:06: 68:29:13:f1:db:b5:90:bf:47:4b:07:61:30:67:dc:24:b3:75: 57:11:ac:a5:4e:1d:8d:8a:55:20:61:ee:20:16:17:3d:b9:60: 34:b8:e4:83:d8:d8:69:22:6c:2a:ca:19:32:ef:f9:6e:55:93: a2:2b:e2:74:85:21:04:6e:76:9d:f9:99:1f:f4:f6:c0:1c:b6: 2c:68:ff:d9:74:7c:41:ef:f5:0a:93:8c:6a:9a:07:18:5c:b9: 73:bc:e0:b9:9c:44:0c:f4:dc:60:8d:a7:28:ee:03:04:6a:0b: 73:bb:bc:50:d5:ae:86:7d:71:bf:1d:d9:a7:bb:7f:a7:ef:08: 68:74:15:96:9b:96:b0:45:7a:31:ca:f0:7e:2b:27:f3:54:ff: 22:fe:09:b1:a9:e3:6d:bb:67:d6:d6:8a:bb:e9:d1:a9:81:d5: d1:ff:47:66:32:f9:59:7a:21:d2:b3:bc:75:a8:47:b7:ba:b4: 0b:8b:8a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i37msPUi8V7XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZWJhMjRhNjItMTFmNy00YWZhLTk5OGEtNjM0ZDQ4NTIxOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo90dxVIGPZ8V6ViqDBWbhVwy7EHUPNZ0ZsfR 94VlZmrbrBm5cjbKiMzRDB22y19W6u5V4XOTber2xcu8qx6DGpfeKZ5DqVYTn8nJ 3lv/vR+XTfXwF0i9SCYY/hr0uOedw3mEahXtOkRNOLiOv+Zw2rOe/C+fCUEpeHso 4l5XWkuogmmPpVMFOu5rQpOaQwVc94prq9DE8ys36U3saLByRXaeu3nB3K6rOTrh Nz1EoPoC4rQAQ4mJUcJBUJgFyLp18CONSt3Df3UtNQtZJlxU9srrKqOWu83gC+b5 lsQAHe0gFUvYLb6bTIBFB7HWLN/yPcbbI3MmyjVVG2Lq4Fk72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4PtVLssNDknBhIBRkDAEywHqMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGFmZjc4YWUtN2Y3OC0z YmY0LWIwNzktYmQxY2IzN2RhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa+atWVBdkcALGWj4uolnYfbtIb6qBmEJ8dTaboXqAQ9kiMSXf6AwyX CKRemzHaDfMAIRow2nJZEtheCG/MSqP3aQfNa2aoBmgpE/HbtZC/R0sHYTBn3CSz dVcRrKVOHY2KVSBh7iAWFz25YDS45IPY2GkibCrKGTLv+W5Vk6Ir4nSFIQRudp35 mR/09sActixo/9l0fEHv9QqTjGqaBxhcuXO84LmcRAz03GCNpyjuAwRqC3O7vFDV roZ9cb8d2ae7f6fvCGh0FZablrBFejHK8H4rJ/NU/yL+CbGp4227Z9bWirvp0amB 1dH/R2Yy+Vl6IdKzvHWoR7e6tAuLivM= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:13 2025 by rpki-client