$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa File: 50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa (raw, json) Hash identifier: shlMyAHr3No9rY6khHN/XlbhK+VcFVXaKlpC/uxEHYc= Subject key identifier: 13:8A:C0:7B:6E:64:CB:43:54:91:B3:0A:9A:7C:2E:49:4E:CB:9E:3F Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F432858489075F27037FC6957D4EFD2C0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 14618 IP address blocks: 198.154.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f2:70:37:fc:69:57:d4:ef:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=4bd7bad6-abfd-47c6-958a-37a390996d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:49:32:ec:ff:c6:14:69:f0:49:6b:38:71: 2c:c0:25:ce:32:b4:cb:0d:15:81:d1:f2:94:dc:f6: 18:20:a9:56:a3:0a:24:b8:db:df:37:c0:c3:af:36: 04:23:88:7f:31:2c:34:e3:ec:1b:de:c7:7a:e0:83: 65:95:c2:5f:f8:2d:64:0c:85:0d:ac:a8:54:e4:a9: fd:9e:78:4f:00:90:0e:e9:71:fe:c9:05:3a:b8:af: 14:1a:4b:57:4c:ff:a3:f4:74:08:99:a3:c5:b8:d3: 3c:3f:e6:5a:4c:7b:8b:40:62:a8:ed:d5:ef:f4:71: 4f:19:81:db:d7:ff:15:b9:04:31:91:b1:ab:03:d2: 94:2a:03:7e:39:57:54:db:ec:56:9e:5a:23:60:6c: d3:ee:ea:47:6c:36:03:02:0f:8b:a6:5f:46:69:05: e8:63:17:25:ec:14:28:de:10:60:9d:b6:48:36:f5: a6:bb:17:f4:db:77:6b:33:b5:37:fe:41:63:a0:98: 79:51:62:de:7b:a4:47:cc:d8:85:a2:63:99:f1:68: e0:bd:c5:13:37:b0:07:52:25:59:c8:f9:99:38:4b: e8:69:33:97:cf:ea:8a:24:97:92:c1:26:06:ef:2f: 8c:14:e9:bf:b9:cd:40:c2:e0:56:a0:8e:28:a1:9e: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8A:C0:7B:6E:64:CB:43:54:91:B3:0A:9A:7C:2E:49:4E:CB:9E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 198.154.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cf:17:9b:3d:81:42:b9:aa:8b:be:57:18:6e:bd:12:4c:b0: 18:1c:22:f6:a0:ca:5c:c0:3d:6c:90:fd:0f:e2:22:32:4b:6b: 48:cb:80:16:e8:15:43:00:53:3d:a7:b4:e1:32:66:db:f9:21: 23:f3:92:97:2e:02:e3:99:34:29:bf:ea:7c:f7:27:bd:eb:d0: b5:3f:a6:13:b6:66:98:4e:8a:b8:da:2e:fa:b5:63:6c:c8:9f: 02:6f:5a:c5:b3:e8:91:0f:28:4a:64:4e:1f:f4:ef:5e:56:60: 34:b4:78:e3:8f:76:cd:b6:3f:82:ea:22:1c:97:35:87:89:0a: d9:6d:7c:d1:cf:1a:80:7c:cb:a4:ae:d8:a0:fb:a9:5c:41:3f: c1:08:e8:de:83:be:d0:6d:09:e0:7a:de:45:e9:39:bd:b3:c8: 35:f0:cf:09:01:d7:61:95:bc:85:98:9e:e2:53:cd:dc:79:16: c0:c4:0c:28:19:ec:b4:7a:ad:7b:b5:cf:cb:d3:5a:5c:72:95: 0f:35:27:10:e3:61:18:d3:8e:e8:5d:72:f5:d7:ef:57:57:81: a4:a1:cf:06:87:8e:53:80:a2:91:30:7d:1c:77:bf:f2:88:92: 03:75:19:52:7a:f9:1f:e2:a5:0c:f2:74:45:f4:80:2e:4b:a5: ab:a4:a5:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfJwN/xpV9Tv0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NGJkN2JhZDYtYWJmZC00N2M2LTk1OGEtMzdhMzkwOTk2ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeJJMuz/xhRp8ElrOHEswCXOMrTLDRWB0fKU 3PYYIKlWowokuNvfN8DDrzYEI4h/MSw04+wb3sd64INllcJf+C1kDIUNrKhU5Kn9 nnhPAJAO6XH+yQU6uK8UGktXTP+j9HQImaPFuNM8P+ZaTHuLQGKo7dXv9HFPGYHb 1/8VuQQxkbGrA9KUKgN+OVdU2+xWnlojYGzT7upHbDYDAg+Lpl9GaQXoYxcl7BQo 3hBgnbZINvWmuxf023drM7U3/kFjoJh5UWLee6RHzNiFomOZ8WjgvcUTN7AHUiVZ yPmZOEvoaTOXz+qKJJeSwSYG7y+MFOm/uc1AwuBWoI4ooZ5uTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOKwHtuZMtDVJGzCpp8LklOy54/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTBmYjVmMjMtYTRlZS0z YzBjLWJlNTYtNmUzYTkyZDQ0NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpq1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPPF5s9gUK5qou+VxhuvRJMsBgcIvagylzAPWyQ/Q/iIjJLa0jLgBbo FUMAUz2ntOEyZtv5ISPzkpcuAuOZNCm/6nz3J73r0LU/phO2ZphOirjaLvq1Y2zI nwJvWsWz6JEPKEpkTh/0715WYDS0eOOPds22P4LqIhyXNYeJCtltfNHPGoB8y6Su 2KD7qVxBP8EI6N6DvtBtCeB63kXpOb2zyDXwzwkB12GVvIWYnuJTzdx5FsDEDCgZ 7LR6rXu1z8vTWlxylQ81JxDjYRjTjuhdcvXX71dXgaShzwaHjlOAopEwfRx3v/KI kgN1GVJ6+R/ipQzydEX0gC5LpaukpWY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:36 2025 by rpki-client