$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa File: 7d914a29-07b2-3546-9c70-6be805db3231.roa (raw, json) Hash identifier: cGY0uFf/4J7tabCfL7KNYGi7zkUwrGXVWTHwynno688= Subject key identifier: E8:FA:F4:54:F0:01:0C:1A:F6:95:95:F7:1C:C8:48:00:1A:3B:BA:0B Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F43285849C4D4C3BBC3FFF516DE949580 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 23428 IP address blocks: 198.160.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c3:bb:c3:ff:f5:16:de:94:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=efeead47-78dd-4df8-bab4-109723203100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:20:3f:76:5d:22:f1:37:b6:58:a2:a5:10: 09:1a:b5:1b:cc:97:dd:6f:b1:2f:3d:f8:da:8e:fd: 54:17:62:69:fd:5a:da:36:f8:56:46:d1:9a:97:1f: 8e:0f:c0:7d:f4:d1:36:da:bd:02:a4:5e:4a:4e:3a: 5c:5e:2d:4e:28:98:70:87:01:94:87:7c:e7:c1:bf: 49:ac:ae:ce:27:07:06:8f:4b:c4:89:fa:a4:af:30: 0c:51:81:3f:eb:10:77:05:a9:98:af:cc:9f:62:db: 5c:68:7e:da:85:ef:89:5a:8b:ee:8d:43:2d:8d:9c: 31:7b:54:76:4e:e1:93:ac:ca:32:70:99:e7:0d:2d: 0e:cf:b3:9b:59:20:8b:e7:c8:7a:bc:11:83:27:aa: 75:6b:02:68:9c:9e:76:a7:f2:7c:e5:6d:f9:00:03: 3a:ea:be:d9:a7:17:4e:e8:c3:f3:b4:89:63:83:e3: 90:64:14:a7:0a:6e:35:df:26:98:be:ac:27:9c:ba: 8a:7c:a4:ea:fa:c9:66:d8:2d:71:6b:11:7f:16:f9: 62:56:c7:24:4f:0b:c3:63:b5:6f:7c:1f:d6:da:06: 3f:2d:2f:bf:71:f6:4a:2c:dc:db:d3:69:36:ea:31: 4d:cd:fa:05:34:23:2c:a5:b1:de:6d:22:d3:2b:40: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FA:F4:54:F0:01:0C:1A:F6:95:95:F7:1C:C8:48:00:1A:3B:BA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 198.160.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:22:77:41:18:47:ad:16:fe:b8:ba:d7:e4:86:83:c4:39:b5: 20:2e:be:ed:0d:8c:68:26:c2:5f:52:30:6f:75:98:fc:60:03: 7b:64:2e:5d:dd:d9:23:90:ce:d4:9d:8d:49:7a:2f:0f:f8:ab: 12:7b:81:ef:34:71:f0:69:1f:fc:fc:43:a9:79:9f:dd:41:b0: 34:71:ea:79:5e:f3:0a:9f:65:41:cd:4e:2c:d1:d8:71:6c:fe: 5a:b2:a5:c2:e3:7f:1d:7c:e0:13:42:cc:ac:fb:cd:6d:a0:84: 96:73:f0:ea:e8:bc:7e:a6:91:bd:d5:50:9c:f8:9d:52:dd:d7: b6:ba:15:44:3a:42:ca:f4:81:1d:37:7d:f9:c3:be:f3:5f:44: fc:b3:19:e2:2c:ac:0f:0c:86:4b:ac:83:f6:78:5c:e5:3a:a2: f1:70:a0:af:a9:f6:d3:b2:a2:45:f0:a9:24:d7:11:89:8b:ad: 2a:46:b7:7c:4d:51:63:14:9a:47:48:2d:8f:53:07:28:12:f6: cb:bf:df:b4:f2:ab:94:a7:a9:89:b4:15:e3:3e:70:c0:3b:2c: 68:8a:e8:75:25:43:4c:ae:cd:0d:94:3e:c5:fc:91:e7:5e:f1: 7f:1e:d5:a7:00:27:5c:8e:1e:79:2a:97:89:9d:f9:21:67:bc: 3a:db:30:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MO7w//1Ft6UlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZWZlZWFkNDctNzhkZC00ZGY4LWJhYjQtMTA5NzIzMjAzMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6QgP3ZdIvE3tliipRAJGrUbzJfdb7EvPfja jv1UF2Jp/VraNvhWRtGalx+OD8B99NE22r0CpF5KTjpcXi1OKJhwhwGUh3znwb9J rK7OJwcGj0vEifqkrzAMUYE/6xB3BamYr8yfYttcaH7ahe+JWovujUMtjZwxe1R2 TuGTrMoycJnnDS0Oz7ObWSCL58h6vBGDJ6p1awJonJ52p/J85W35AAM66r7ZpxdO 6MPztIljg+OQZBSnCm413yaYvqwnnLqKfKTq+slm2C1xaxF/FvliVsckTwvDY7Vv fB/W2gY/LS+/cfZKLNzb02k26jFNzfoFNCMspbHebSLTK0BGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj69FTwAQwa9pWV9xzISAAaO7oLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvN2Q5MTRhMjktMDdiMi0z NTQ2LTljNzAtNmJlODA1ZGIzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAid0EYR60W/ri61+SGg8Q5tSAuvu0NjGgmwl9SMG91mPxgA3tkLl3d 2SOQztSdjUl6Lw/4qxJ7ge80cfBpH/z8Q6l5n91BsDRx6nle8wqfZUHNTizR2HFs /lqypcLjfx184BNCzKz7zW2ghJZz8OrovH6mkb3VUJz4nVLd17a6FUQ6Qsr0gR03 ffnDvvNfRPyzGeIsrA8Mhkusg/Z4XOU6ovFwoK+p9tOyokXwqSTXEYmLrSpGt3xN UWMUmkdILY9TBygS9su/37Tyq5SnqYm0FeM+cMA7LGiK6HUlQ0yuzQ2UPsX8kede 8X8e1acAJ1yOHnkql4md+SFnvDrbMLE= -----END CERTIFICATE-----Generated at Wed Jun 4 21:54:49 2025 by rpki-client