$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa File: 4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (raw, json) Hash identifier: w7B8YDPRkxjyU/tbsBSrn+GMupFQHOoVnKLxN5vBFvs= Subject key identifier: 79:01:7F:F6:A8:DF:BA:EF:3C:9E:1F:27:AA:2E:E8:0E:B3:B2:E6:EB Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F43285848E9CBD95E117E085B19D59A80 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 22966 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d9:5e:11:7e:08:5b:19:d5:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=fc525eaa-b868-4bd6-b0d4-aa216fcd48eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:90:6c:39:e2:dd:08:c6:76:19:b0:58:e7:d9: c6:75:52:66:3b:fb:55:db:26:6e:02:cd:37:d0:fd: ae:5d:90:c3:8e:12:c7:42:58:ee:3e:3f:3e:82:8f: da:df:ef:67:02:d7:4c:cc:37:ac:e5:54:1a:ff:53: 29:29:c5:1c:72:4b:95:04:64:9b:98:04:5e:2e:42: 91:68:a1:fd:11:52:7e:09:a4:92:d1:aa:b5:d2:31: 1f:bb:35:b6:30:61:7c:be:44:47:81:5b:e0:fd:76: d1:16:b7:1f:fa:7c:c1:c6:d3:a2:06:66:f7:dc:ee: c2:69:2c:b7:fa:e4:ef:47:e8:4c:52:4a:2a:cf:41: 8b:a5:c0:fe:93:49:c4:f1:c5:c0:a6:59:d4:4b:97: 1a:60:0d:66:ea:92:a8:54:47:b1:c4:8d:10:e1:a0: a1:43:d9:ef:08:38:88:50:1c:c8:fa:6d:f8:3c:99: 7b:f2:9f:93:f5:0b:f9:2d:8c:e2:f2:80:3b:20:c8: ee:ae:09:8c:21:3f:5f:00:a8:f1:02:2f:ad:6f:c4: 27:cf:c2:fd:da:a3:af:f4:b7:0a:fa:cd:65:43:35: 8e:47:93:af:97:3e:dc:c3:9e:fa:22:10:58:60:8d: 50:aa:f9:09:12:6a:6b:cf:6e:f0:2f:98:69:2b:8a: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:01:7F:F6:A8:DF:BA:EF:3C:9E:1F:27:AA:2E:E8:0E:B3:B2:E6:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ef:54:41:07:af:5a:db:29:1d:72:41:82:e2:90:97:6a:5a: 40:12:ab:43:e7:e4:b1:d6:07:b7:44:de:09:8a:4a:0a:c8:e5: d1:ac:03:b6:62:9c:61:38:3e:46:63:5f:36:cf:14:5e:ea:d0: d5:9c:bc:a7:84:2c:d6:e3:e1:ac:13:cb:77:23:8b:a6:1d:6c: b4:65:57:55:f2:9e:d9:1c:72:04:52:e7:43:b8:46:b8:f7:5b: 46:41:bf:68:30:60:36:82:a6:8c:1f:92:97:a2:2b:d2:ff:3d: 99:cd:cb:09:0f:66:e1:50:71:0c:be:44:22:d2:44:75:95:b6: 65:93:09:61:d7:8d:a2:a0:aa:a2:6d:d8:04:ff:47:76:a5:f0: be:79:51:ee:81:d7:fc:48:0c:eb:b7:5a:b9:de:26:66:0f:fa: 80:82:39:f7:19:44:30:3c:41:54:dd:7b:04:d6:e5:c3:09:93: d8:95:be:b1:a5:7d:32:23:cf:8c:0e:b6:8c:8f:b0:04:37:b8: bb:fe:6b:ef:8a:23:02:cc:5e:ab:8d:17:3b:ba:cd:d1:6d:e6: 3f:73:b0:ed:7a:d7:81:dc:52:42:f6:62:cc:a9:9e:5e:d0:7b: b0:d6:85:0b:09:6c:fa:7d:af:c5:d8:be:ae:e4:d9:f2:df:3b: 67:0c:77:8b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjpy9leEX4IWxnVmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZmM1MjVlYWEtYjg2OC00YmQ2LWIwZDQtYWEyMTZmY2Q0OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpBsOeLdCMZ2GbBY59nGdVJmO/tV2yZuAs03 0P2uXZDDjhLHQljuPj8+go/a3+9nAtdMzDes5VQa/1MpKcUcckuVBGSbmAReLkKR aKH9EVJ+CaSS0aq10jEfuzW2MGF8vkRHgVvg/XbRFrcf+nzBxtOiBmb33O7CaSy3 +uTvR+hMUkoqz0GLpcD+k0nE8cXAplnUS5caYA1m6pKoVEexxI0Q4aChQ9nvCDiI UBzI+m34PJl78p+T9Qv5LYzi8oA7IMjurgmMIT9fAKjxAi+tb8Qnz8L92qOv9LcK +s1lQzWOR5Ovlz7cw576IhBYYI1QqvkJEmprz27wL5hpK4qZ9wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHkBf/ao37rvPJ4fJ6ou6A6zsubrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNGJhNjBlODItMGNlZS0z ZWI3LWE2ZjItY2FkZmJmOTJlYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAre9UQQevWtspHXJBguKQl2paQBKrQ+fksdYHt0TeCYpK Csjl0awDtmKcYTg+RmNfNs8UXurQ1Zy8p4Qs1uPhrBPLdyOLph1stGVXVfKe2Rxy BFLnQ7hGuPdbRkG/aDBgNoKmjB+Sl6Ir0v89mc3LCQ9m4VBxDL5EItJEdZW2ZZMJ YdeNoqCqom3YBP9HdqXwvnlR7oHX/EgM67daud4mZg/6gII59xlEMDxBVN17BNbl wwmT2JW+saV9MiPPjA62jI+wBDe4u/5r74ojAsxeq40XO7rN0W3mP3Ow7XrXgdxS QvZizKmeXtB7sNaFCwls+n2vxdi+ruTZ8t87Zwx3iw== -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:18 2025 by rpki-client