$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa File: 84617fef-aed5-300e-856b-34d46debd9aa.roa (raw, json) Hash identifier: iuh8M//wTmqgjzY2xnvDyEglFnkbIKCJd5dhg8kEhKM= Subject key identifier: 7B:2C:02:B3:16:26:60:5F:6C:DC:6C:9C:3A:7E:F9:43:2D:5F:5B:90 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848B1F62DD8EB2337DE25EBCD40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 174 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2d:d8:eb:23:37:de:25:eb:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=de10c86e-1d55-4362-9b0f-ee9b4b439cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:3f:c6:63:01:ee:05:70:6a:55:48:9c:51: ed:d5:13:b3:ad:cc:bb:ad:f2:08:22:01:9c:3e:f7: e6:d8:15:e8:e5:23:d8:b2:99:c8:b9:d2:50:e8:e2: d4:b3:12:16:e9:ab:30:0e:fc:bc:d8:a7:4d:32:da: 17:a2:c6:56:fa:c7:c9:21:35:20:9c:08:12:a7:fe: bf:e1:12:69:76:93:85:9e:0b:78:a3:60:8c:8f:73: 8e:87:25:95:59:f4:b3:89:4a:1c:ec:99:c5:b1:4b: 76:70:5b:63:6a:ab:4d:25:17:b7:5d:8e:15:9e:0c: e5:60:f8:02:ee:1d:7c:6e:84:f2:a6:8e:7a:30:5c: 72:5e:e9:bd:2d:4f:07:f7:21:6a:45:8a:5b:88:e6: 26:bf:35:d9:de:00:3e:9f:da:37:0b:19:12:a0:fb: 66:ee:8b:ca:ad:08:b3:2c:65:d1:ca:04:3b:85:3f: e0:b7:90:54:60:2f:6d:b7:8f:20:4c:2e:73:21:38: 81:f3:ae:fb:24:9b:21:96:45:0d:98:86:a4:2d:4f: 31:ec:2d:a6:64:5a:e9:f4:2a:d2:a4:4a:59:01:d7: bf:ad:64:b9:b9:0c:a8:1c:28:46:b4:47:d6:76:a8: f8:81:be:9c:94:b4:87:e7:39:3b:33:76:1c:2b:1b: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:02:B3:16:26:60:5F:6C:DC:6C:9C:3A:7E:F9:43:2D:5F:5B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:31:27:46:cb:3b:a4:6b:e4:ad:06:2a:4a:7a:18:a4:56:23: 89:40:d1:35:e3:97:a9:67:6f:cb:89:59:bc:c1:da:aa:ea:dc: 86:21:31:1e:3c:32:03:74:93:c7:72:f9:50:d4:12:62:ec:0e: fa:fe:b7:57:53:86:4a:79:92:1a:5b:ab:01:8e:3d:3e:e1:fd: 54:3e:45:3f:5a:65:7a:e3:88:d8:3c:60:ea:3a:08:44:d7:eb: 6c:3d:33:6c:1b:e4:f5:2a:f0:e2:59:46:6c:e5:58:08:03:13: b8:ba:fd:a3:9b:e6:b4:ed:4d:46:40:aa:7d:d0:c0:38:eb:ff: 8c:9b:8d:37:5d:2f:14:6a:43:4e:46:a2:f7:e3:de:f2:11:b7: e7:98:26:89:a5:3e:a2:2e:49:d0:b1:db:d4:48:30:28:75:23: 89:e2:9d:4f:aa:7f:f7:2f:99:14:ad:0e:c0:2b:2e:00:cd:f6: 2f:24:0c:99:b3:8e:cf:a3:50:1d:df:26:22:2e:52:89:b6:59: 31:0a:0b:5d:34:9b:d5:0c:30:bf:d0:d9:84:74:74:d6:e9:48: 5b:95:94:94:b8:49:04:93:7e:03:6d:b7:6a:b3:f0:97:05:82: ce:63:33:e3:de:00:9a:e3:3f:9d:73:43:a7:52:13:07:79:50: 0a:4b:45:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i3Y6yM33iXrzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZGUxMGM4NmUtMWQ1NS00MzYyLTliMGYtZWU5YjRiNDM5Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2k/xmMB7gVwalVInFHt1ROzrcy7rfIIIgGc Pvfm2BXo5SPYspnIudJQ6OLUsxIW6aswDvy82KdNMtoXosZW+sfJITUgnAgSp/6/ 4RJpdpOFngt4o2CMj3OOhyWVWfSziUoc7JnFsUt2cFtjaqtNJRe3XY4VngzlYPgC 7h18boTypo56MFxyXum9LU8H9yFqRYpbiOYmvzXZ3gA+n9o3CxkSoPtm7ovKrQiz LGXRygQ7hT/gt5BUYC9tt48gTC5zITiB8677JJshlkUNmIakLU8x7C2mZFrp9CrS pEpZAde/rWS5uQyoHChGtEfWdqj4gb6clLSH5zk7M3YcKxt5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHssArMWJmBfbNxsnDp++UMtX1uQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODQ2MTdmZWYtYWVkNS0z MDBlLTg1NmItMzRkNDZkZWJkOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMxJ0bLO6Rr5K0GKkp6GKRWI4lA0TXjl6lnb8uJWbzB2qrq3IYhMR48 MgN0k8dy+VDUEmLsDvr+t1dThkp5khpbqwGOPT7h/VQ+RT9aZXrjiNg8YOo6CETX 62w9M2wb5PUq8OJZRmzlWAgDE7i6/aOb5rTtTUZAqn3QwDjr/4ybjTddLxRqQ05G ovfj3vIRt+eYJomlPqIuSdCx29RIMCh1I4ninU+qf/cvmRStDsArLgDN9i8kDJmz js+jUB3fJiIuUom2WTEKC100m9UMML/Q2YR0dNbpSFuVlJS4SQSTfgNtt2qz8JcF gs5jM+PeAJrjP51zQ6dSEwd5UApLRSE= -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:29 2025 by rpki-client