$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa File: caa9c6f8-021f-3be2-bae4-31f4834a4921.roa (raw, json) Hash identifier: hz6Sb+ZdDQjcIpdP8uScM0AKwe/TuvC8SOIPi36GjoA= Subject key identifier: 31:40:92:30:80:24:F8:E8:13:C7:F1:51:3D:61:7C:B2:E4:50:0C:BF Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848AC60D585ADADDF4D8285A600 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 1239 IP address blocks: 198.16.70.0/23 maxlen: 23 198.16.72.0/23 maxlen: 23 198.16.76.0/23 maxlen: 23 198.16.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d5:85:ad:ad:df:4d:82:85:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=b11dc949-218a-4cf5-b8c7-bf989935d73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:c9:13:46:e7:ea:51:2e:e6:e9:3b:b5:bb: 1c:39:0d:71:e3:a7:ca:7f:21:08:a3:8f:dc:42:1e: d3:b0:79:15:4f:46:5d:c9:d4:e5:cc:a7:09:b9:77: ca:10:ff:18:8e:ff:d3:25:11:76:eb:0a:86:24:1a: 9b:54:89:4c:79:f9:0a:9e:6c:42:3a:b6:94:a8:da: 14:85:78:e4:0e:2c:37:7f:f0:ef:d9:9e:5c:7e:27: 93:99:1e:07:73:7e:86:41:d2:6e:03:87:9a:ce:ab: 6e:9c:18:1e:d5:9d:a4:6e:e4:6e:79:73:21:b7:34: c8:42:4d:f5:86:68:0f:54:9f:da:ee:fe:b1:ff:5c: 6c:85:65:0b:81:f5:f6:c1:de:84:42:a3:0d:c8:06: 7f:c6:1e:54:f8:6c:02:e4:da:e6:f3:ad:e1:92:aa: e9:c6:24:b7:54:9f:17:6b:3d:27:c2:02:15:3d:a2: aa:b2:27:27:20:f5:11:46:64:bd:c9:5a:8b:80:80: 47:0d:c7:67:d5:11:a4:71:91:e6:0a:16:36:b5:61: 85:bc:cc:49:2d:81:b3:24:bc:31:39:a1:49:41:88: 11:a3:77:8c:57:15:84:2c:b2:3b:61:1e:61:95:67: d9:a3:19:f3:3e:6c:f1:3d:16:e1:e0:55:99:14:d8: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:40:92:30:80:24:F8:E8:13:C7:F1:51:3D:61:7C:B2:E4:50:0C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.70.0-198.16.73.255 198.16.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:21:f4:7b:cb:a4:4a:2a:88:40:f5:32:52:e4:6f:50:58:e6: 3a:06:4d:7b:0c:85:fa:e9:5a:11:4e:00:2f:23:6c:f6:01:44: 6f:ac:14:ba:72:fb:5a:2a:4e:6d:ab:62:04:1e:71:82:03:6c: ff:85:e0:5d:ad:ba:c8:75:6d:c6:43:b7:2e:27:64:6e:c6:a5: ab:33:34:79:62:a9:20:5e:bd:cc:74:7c:e1:17:e7:e8:2c:f4: d3:9b:b9:1e:54:2a:df:87:71:42:fb:be:12:b2:63:88:e7:7d: 71:e1:b8:ff:60:bb:3f:25:16:55:48:2e:7c:f5:c2:d9:03:48: c7:49:c4:d9:57:71:d2:2c:fd:c1:42:df:b7:91:be:86:3a:f9: 87:04:b2:5a:85:89:b6:dc:60:fa:6b:cf:6f:22:f7:7a:4e:d5: 49:a3:30:8d:09:10:e7:88:5b:73:1a:86:c3:b0:2d:26:5a:ee: 98:34:71:ef:d8:c1:ab:c6:44:de:9c:f9:b1:ff:eb:10:c3:59: 83:bb:cd:93:16:b3:9c:b0:53:10:9f:2a:83:74:8b:69:05:09: 0e:58:90:43:6d:72:8d:c2:d4:b6:57:f6:f9:fa:18:76:66:a9: 90:26:ed:a2:d6:42:4f:35:01:88:37:ec:68:b6:8b:af:c4:4e: 41:07:ae:e3 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEisYNWFra3fTYKFpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk YjExZGM5NDktMjE4YS00Y2Y1LWI4YzctYmY5ODk5MzVkNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUPJE0bn6lEu5uk7tbscOQ1x46fKfyEIo4/c Qh7TsHkVT0ZdydTlzKcJuXfKEP8Yjv/TJRF26wqGJBqbVIlMefkKnmxCOraUqNoU hXjkDiw3f/Dv2Z5cfieTmR4Hc36GQdJuA4eazqtunBge1Z2kbuRueXMhtzTIQk31 hmgPVJ/a7v6x/1xshWULgfX2wd6EQqMNyAZ/xh5U+GwC5Nrm863hkqrpxiS3VJ8X az0nwgIVPaKqsicnIPURRmS9yVqLgIBHDcdn1RGkcZHmChY2tWGFvMxJLYGzJLwx OaFJQYgRo3eMVxWELLI7YR5hlWfZoxnzPmzxPRbh4FWZFNhQbQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFDFAkjCAJPjoE8fxUT1hfLLkUAy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvY2FhOWM2ZjgtMDIxZi0z YmUyLWJhZTQtMzFmNDgzNGE0OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHGEEYD BAHGEEgDBALGEEwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAvSH0e8ukSiqIQPUyUuRvUFjmOgZNewyF+ula EU4ALyNs9gFEb6wUunL7WipObatiBB5xggNs/4XgXa26yHVtxkO3LidkbsalqzM0 eWKpIF69zHR84Rfn6Cz005u5HlQq34dxQvu+ErJjiOd9ceG4/2C7PyUWVUgufPXC 2QNIx0nE2Vdx0iz9wULft5G+hjr5hwSyWoWJttxg+mvPbyL3ek7VSaMwjQkQ54hb cxqGw7AtJlrumDRx79jBq8ZE3pz5sf/rEMNZg7vNkxaznLBTEJ8qg3SLaQUJDliQ Q21yjcLUtlf2+foYdmapkCbtotZCTzUBiDfsaLaLr8ROQQeu4w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:56 2025 by rpki-client