$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa File: db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa (raw, json) Hash identifier: hgk0N1hDWsW4CLo10rHBx/o8fZ80F89HBz38nKbZNh0= Subject key identifier: 5A:95:63:6A:92:D7:D2:E5:FE:A6:EC:44:29:D3:4E:36:39:96:CE:46 Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F43285849955F11088C474F50C023A680 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 23404 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:11:08:8c:47:4f:50:c0:23:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=3474dd6e-40b2-428d-96d4-378680e716d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:1d:43:68:ae:0a:4f:12:69:4f:9d:bf:bb: a7:71:1f:3c:7e:e8:3c:d6:40:86:9d:a7:b0:fa:47: 2c:13:51:57:2f:c4:58:be:b5:6c:0c:24:96:b2:0c: 3a:5b:75:eb:e3:8a:96:59:6d:be:77:6f:df:ca:93: 45:a4:ee:97:b8:a5:7c:6c:4d:14:f2:af:c0:54:f6: b9:7e:ec:3f:0a:95:d0:9a:8d:85:55:7a:52:0f:76: 23:8b:4b:d5:62:9c:70:4f:db:28:cd:b5:47:f3:20: 10:1a:27:c1:81:31:73:a8:30:79:78:36:a1:82:47: f1:a6:e2:ef:0e:0f:14:7a:e8:df:25:b1:37:8f:e3: f4:a8:a5:84:63:d3:f9:ab:bc:b5:db:8e:0a:45:d3: 21:67:0d:f0:e3:d2:61:2f:a9:49:d1:45:dc:e0:1a: 50:0f:df:fd:42:aa:ab:c7:d8:84:0f:79:6c:c5:e2: 6f:76:a6:07:95:8b:c9:e9:0b:ff:c0:97:50:a5:0d: fc:8f:08:08:83:af:0f:ab:c9:50:a4:10:22:7b:9c: 7d:c8:fc:98:7a:51:5a:f1:ee:71:1f:bb:9b:7f:ba: 5b:12:47:38:2f:26:dc:c1:d5:48:41:c6:f0:37:eb: 9d:25:11:1a:b6:ad:28:4c:19:c8:7f:4a:22:fe:04: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:63:6A:92:D7:D2:E5:FE:A6:EC:44:29:D3:4E:36:39:96:CE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2a:e9:0d:69:62:10:97:69:6d:0e:3f:5c:f1:6e:2b:80:b5: 57:aa:2b:52:99:2b:8b:cf:76:c3:d2:49:25:7f:f0:65:0f:1e: 91:c5:7f:ff:f7:49:1e:c2:85:08:1c:b6:64:a2:47:88:62:dd: cd:bb:c5:c3:51:99:4c:96:3f:30:58:b9:93:7d:3b:39:7b:1f: b2:2f:f6:fb:16:8e:94:26:2c:66:f5:25:fd:34:7a:dd:5b:55: 11:b1:0f:3b:21:2c:82:30:e0:ac:85:79:79:d5:c3:52:d6:d9: df:84:f4:81:08:53:72:e0:c5:15:88:29:b3:af:ca:ff:ee:16: 69:a0:da:c6:e2:a3:a7:a6:94:3b:17:04:fc:d8:61:b3:ce:f9: 4e:ec:af:b1:9f:3a:14:13:8d:a8:cc:9a:76:e2:b0:1e:60:34: d6:4d:75:cd:8b:33:18:97:f3:b3:74:ae:59:03:7b:5e:f3:a7: c0:92:dc:82:de:c0:2a:77:7c:ad:ff:79:d3:4c:fe:e2:ad:f4: 86:80:4d:4d:dc:74:8c:85:00:ae:d3:14:28:11:dc:58:e9:10: 4d:8e:ae:5b:62:ba:3b:22:fd:50:5f:f7:fe:07:b2:89:9b:aa: 77:53:35:0e:7b:e9:73:f0:b7:44:11:6c:3f:ce:d5:f9:11:60: 05:b8:52:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxEIjEdPUMAjpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MzQ3NGRkNmUtNDBiMi00MjhkLTk2ZDQtMzc4NjgwZTcxNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0wdQ2iuCk8SaU+dv7uncR88fug81kCGnaew +kcsE1FXL8RYvrVsDCSWsgw6W3Xr44qWWW2+d2/fypNFpO6XuKV8bE0U8q/AVPa5 fuw/CpXQmo2FVXpSD3Yji0vVYpxwT9sozbVH8yAQGifBgTFzqDB5eDahgkfxpuLv Dg8UeujfJbE3j+P0qKWEY9P5q7y1244KRdMhZw3w49JhL6lJ0UXc4BpQD9/9Qqqr x9iED3lsxeJvdqYHlYvJ6Qv/wJdQpQ38jwgIg68Pq8lQpBAie5x9yPyYelFa8e5x H7ubf7pbEkc4LybcwdVIQcbwN+udJREatq0oTBnIf0oi/gT9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqVY2qS19Ll/qbsRCnTTjY5ls5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZGIwNzlkN2MtZTEwZC0z NTU5LWIzZmQtMjViNGVjNjk3M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYq6Q1pYhCXaW0OP1zxbiuAtVeqK1KZK4vPdsPSSSV/8GUPHpHFf//3 SR7ChQgctmSiR4hi3c27xcNRmUyWPzBYuZN9Ozl7H7Iv9vsWjpQmLGb1Jf00et1b VRGxDzshLIIw4KyFeXnVw1LW2d+E9IEIU3LgxRWIKbOvyv/uFmmg2sbio6emlDsX BPzYYbPO+U7sr7GfOhQTjajMmnbisB5gNNZNdc2LMxiX87N0rlkDe17zp8CS3ILe wCp3fK3/edNM/uKt9IaATU3cdIyFAK7TFCgR3FjpEE2Orltiujsi/VBf9/4Hsomb qndTNQ576XPwt0QRbD/O1fkRYAW4UgU= -----END CERTIFICATE-----Generated at Sat May 10 14:52:13 2025 by rpki-client