$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa File: 85518f83-6d82-3dbd-ad23-fd6459007b47.roa (raw, json) Hash identifier: lM/VtmAyjAFMY3W0phJg96/11l1OsywGtp0nSC2eX/c= Subject key identifier: A8:A7:8E:E0:64:75:D5:B0:EB:A3:AC:EF:A3:9C:70:01:21:85:11:67 Certificate issuer: /CN=c42cfaea-6b46-494e-95ea-944662b8624b Certificate serial: 010D0C9F43285849674EF12771DCD1CD4E2E0140 Authority key identifier: 3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 14618 IP address blocks: 198.232.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f1:27:71:dc:d1:cd:4e:2e:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42cfaea-6b46-494e-95ea-944662b8624b Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=6e7764d0-fe10-430c-9d25-6d654dc6b667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:50:a7:98:58:c9:29:a9:44:dd:cf:3a:a6: e3:02:1a:28:a5:a3:6a:0b:62:9e:c3:3c:49:88:01: 90:10:00:77:c6:aa:87:d7:4e:f6:a8:bd:a4:07:1b: 45:a6:bd:ca:b2:86:c0:97:2a:b8:a9:da:de:11:4b: 69:37:3e:d4:5d:59:76:42:15:a4:5b:44:fe:a7:54: 04:e4:d8:db:f1:6b:8e:c7:66:9d:cf:d8:7f:a6:d6: a1:a1:97:bc:e7:49:83:11:57:e6:f3:3d:9c:ca:d3: f8:4a:f3:21:74:9b:1e:fb:ab:2b:f6:48:85:64:c2: bc:e3:3e:c9:41:f3:49:77:55:7a:ae:fa:a1:9b:c9: 28:b3:f5:f6:e1:74:3d:68:86:82:1b:86:2b:55:06: 91:c0:52:c9:c2:41:fa:48:81:96:50:07:1b:18:d4: 39:01:06:02:7f:b9:2e:7b:2e:c5:16:78:a3:90:dc: 02:12:11:d2:a8:80:27:ab:db:85:bb:f7:9a:ae:89: 9a:d1:ab:05:9a:e6:3f:43:fe:3b:7e:73:dc:24:08: a6:ee:20:6b:c2:bd:79:a0:e3:01:42:40:2f:71:a3: 97:68:d6:4b:1d:03:4e:27:46:b1:0b:70:86:3e:22: 34:b8:14:41:06:63:d0:c8:2a:fa:ed:dd:9b:9f:6b: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:8E:E0:64:75:D5:B0:EB:A3:AC:EF:A3:9C:70:01:21:85:11:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl X509v3 Authority Key Identifier: keyid:3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer sbgp-ipAddrBlock: critical IPv4: 198.232.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:60:0d:05:a0:ae:9b:b8:cb:1a:bf:b6:12:15:e3:cd:22:62: 2b:d4:61:54:ce:52:86:36:3a:b3:39:77:fe:8d:04:66:25:92: 3b:34:3c:e0:07:10:70:05:3b:96:45:38:06:23:62:70:23:e6: a9:53:be:0b:53:d1:c1:35:f3:95:b1:ae:1d:af:c2:85:95:12: 3e:71:8d:8c:e0:ba:75:df:3f:4b:a0:21:10:48:e3:f0:98:d8: 09:ce:3e:6b:c0:cb:33:fd:d3:19:22:c2:ce:57:81:00:39:5c: 3a:51:52:cb:7d:28:ea:78:c6:ba:1c:04:40:55:5a:dc:23:79: 79:6c:9a:b8:13:0a:5a:b7:e0:9a:0a:28:2c:00:cb:ee:62:f5: d8:7c:68:34:66:75:6a:a7:61:8f:4a:73:8d:01:39:fc:94:34: c5:25:77:6b:fa:2f:60:9c:80:e5:8f:98:4c:26:90:99:43:46: 39:43:4f:a4:1d:01:72:8d:62:a1:cc:e5:97:db:4b:fe:c0:55: 31:9b:19:27:f5:5a:f4:c0:d4:0a:56:82:e0:6d:8b:0b:98:9b: 79:16:5c:31:12:7d:33:f8:ed:73:92:65:f7:da:5b:da:1e:08: 38:8f:da:c5:c2:d5:06:a8:6f:76:ab:5f:70:d8:50:41:ac:c6: c4:08:03:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvEncdzRzU4uAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyY2ZhZWEtNmI0Ni00OTRlLTk1ZWEtOTQ0NjYyYjg2 MjRiMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk NmU3NzY0ZDAtZmUxMC00MzBjLTlkMjUtNmQ2NTRkYzZiNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjhQp5hYySmpRN3POqbjAhoopaNqC2KewzxJ iAGQEAB3xqqH1072qL2kBxtFpr3KsobAlyq4qdreEUtpNz7UXVl2QhWkW0T+p1QE 5Njb8WuOx2adz9h/ptahoZe850mDEVfm8z2cytP4SvMhdJse+6sr9kiFZMK84z7J QfNJd1V6rvqhm8kos/X24XQ9aIaCG4YrVQaRwFLJwkH6SIGWUAcbGNQ5AQYCf7ku ey7FFnijkNwCEhHSqIAnq9uFu/earoma0asFmuY/Q/47fnPcJAim7iBrwr15oOMB QkAvcaOXaNZLHQNOJ0axC3CGPiI0uBRBBmPQyCr67d2bn2ssUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKinjuBkddWw66Os76OccAEhhRFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDJj ZmFlYS02YjQ2LTQ5NGUtOTVlYS05NDQ2NjJiODYyNGIvODU1MThmODMtNmQ4Mi0z ZGJkLWFkMjMtZmQ2NDU5MDA3YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyY2ZhZWEtNmI0Ni00OTRlLTk1 ZWEtOTQ0NjYyYjg2MjRiL2M0MmNmYWVhLTZiNDYtNDk0ZS05NWVhLTk0NDY2MmI4 NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP69YmtGPZUfNWrdXxrbqzS2raukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDJjZmFlYS02YjQ2LTQ5NGUtOTVlYS05NDQ2 NjJiODYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxgDQWgrpu4yxq/thIV480iYivUYVTOUoY2OrM5d/6NBGYlkjs0POAH EHAFO5ZFOAYjYnAj5qlTvgtT0cE185Wxrh2vwoWVEj5xjYzgunXfP0ugIRBI4/CY 2AnOPmvAyzP90xkiws5XgQA5XDpRUst9KOp4xrocBEBVWtwjeXlsmrgTClq34JoK KCwAy+5i9dh8aDRmdWqnYY9Kc40BOfyUNMUld2v6L2CcgOWPmEwmkJlDRjlDT6Qd AXKNYqHM5ZfbS/7AVTGbGSf1WvTA1ApWguBtiwuYm3kWXDESfTP47XOSZffaW9oe CDiP2sXC1Qaob3arX3DYUEGsxsQIAzA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:38:25 2025 by rpki-client