$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa File: 297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa (raw, json) Hash identifier: Ql4vUyjXLOMawUtDW3/tiV/p2uA+SF3Q4c5AidKr31A= Subject key identifier: 42:B5:E3:AA:4C:1E:71:6E:C3:5C:5F:59:58:95:14:88:4F:AA:AE:3D Certificate issuer: /CN=95f49444-5166-4f97-ba58-3d78336ec4ce Certificate serial: 010D0C9F43285849D42FA3D6CA1740CE2A131A80 Authority key identifier: AE:7E:BB:B6:EA:26:51:87:2D:15:43:B6:4D:5B:6B:55:EC:7C:1C:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 16517 IP address blocks: 198.252.255.0/24 maxlen: 24 2620:97:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a3:d6:ca:17:40:ce:2a:13:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95f49444-5166-4f97-ba58-3d78336ec4ce Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cf95617f-a660-41ff-a68c-b44d1d4f18d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:45:e6:ae:ee:7a:1c:dd:54:52:fa:60:73: 87:e3:10:79:01:01:8c:5b:16:64:06:4c:3a:2a:6c: 98:5d:9b:87:84:94:32:72:f2:44:f4:40:eb:b3:7d: be:db:19:a9:0b:6d:af:85:0b:23:b1:8a:dd:64:77: 7e:61:8e:bb:c2:dc:bd:e8:0c:7e:ce:ee:48:a7:ba: d1:25:83:be:08:c5:62:3a:f7:ab:22:44:8c:64:47: c6:df:0e:c9:fa:ba:84:46:3f:6c:e9:79:35:cf:06: 75:99:93:58:3f:80:44:18:55:91:92:18:ae:ec:5c: e5:cc:ed:74:15:57:98:a5:17:4e:a4:28:69:66:42: 6a:8e:48:ac:dd:c1:53:76:2a:87:be:e9:eb:c3:57: 6d:b9:ed:e7:60:07:80:54:d4:76:0d:07:18:bf:7e: a6:da:54:e1:9b:95:e8:3d:0a:d6:ab:de:df:26:a1: 70:7c:2d:93:ab:5c:73:26:e0:ea:fd:fc:cd:80:a8: fc:5a:ce:3d:3f:e1:69:94:87:71:60:5e:aa:b6:47: ef:3d:bc:70:e7:aa:6a:5b:2d:78:e0:3c:b9:a9:52: fc:c4:45:d8:00:09:c8:3c:93:9d:38:5f:58:f1:1b: 69:bd:03:66:34:38:3c:aa:9a:93:ac:97:cb:12:92: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:E3:AA:4C:1E:71:6E:C3:5C:5F:59:58:95:14:88:4F:AA:AE:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/297b0a13-c878-3ff8-a1a2-d7bdcdd42b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.crl X509v3 Authority Key Identifier: keyid:AE:7E:BB:B6:EA:26:51:87:2D:15:43:B6:4D:5B:6B:55:EC:7C:1C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer sbgp-ipAddrBlock: critical IPv4: 198.252.255.0/24 IPv6: 2620:97:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:31:0d:1e:aa:5f:25:01:03:89:49:21:1e:64:78:e7:5f:44: 97:24:d5:f5:ea:dc:86:56:5d:6f:31:10:d8:1d:25:60:e0:6d: 4a:0b:d4:f2:fd:e6:a0:25:5f:9a:7f:92:62:e4:f8:e8:2b:4b: 5d:b3:fb:1d:da:e1:32:8f:06:c5:d8:9f:51:6d:da:ac:b0:3f: ab:a9:43:80:89:96:36:9a:1f:40:f4:d9:6a:25:b2:d0:fe:3f: 4b:0f:b2:d7:c3:1c:27:7c:14:04:b2:aa:0c:c4:d0:4c:67:42: 86:ec:a3:69:0c:25:ee:43:21:bc:a8:19:b6:cd:b2:54:d1:f5: ae:f8:32:8f:c9:96:aa:07:a9:52:c1:af:51:9e:b4:d5:bb:84: fa:93:7c:d0:31:76:cf:7d:75:65:57:2a:ee:63:58:ad:d5:51: 1e:20:e0:9b:b9:e4:1b:e1:56:09:d9:d1:63:1a:e2:3f:e8:8b: 68:f9:3f:f2:21:fd:74:a5:15:9d:14:ce:44:48:97:58:49:df: 29:c1:aa:da:ba:43:2d:bf:4f:30:59:7e:64:24:62:07:11:ad: 04:27:9f:8d:35:65:c8:8f:c8:28:33:a1:39:d6:03:cf:5a:f2: 87:49:ef:8a:2f:db:8c:c4:01:cd:78:68:95:75:b0:97:19:03: 0d:55:e9:db -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnUL6PWyhdAzioTGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVmNDk0NDQtNTE2Ni00Zjk3LWJhNTgtM2Q3ODMzNmVj NGNlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2Y5NTYxN2YtYTY2MC00MWZmLWE2OGMtYjQ0ZDFkNGYxOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA315F5q7uehzdVFL6YHOH4xB5AQGMWxZkBkw6 KmyYXZuHhJQycvJE9EDrs32+2xmpC22vhQsjsYrdZHd+YY67wty96Ax+zu5Ip7rR JYO+CMViOverIkSMZEfG3w7J+rqERj9s6Xk1zwZ1mZNYP4BEGFWRkhiu7FzlzO10 FVeYpRdOpChpZkJqjkis3cFTdiqHvunrw1dtue3nYAeAVNR2DQcYv36m2lThm5Xo PQrWq97fJqFwfC2Tq1xzJuDq/fzNgKj8Ws49P+FplIdxYF6qtkfvPbxw56pqWy14 4Dy5qVL8xEXYAAnIPJOdOF9Y8RtpvQNmNDg8qpqTrJfLEpKKLwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEK146pMHnFuw1xfWViVFIhPqq49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NWY0 OTQ0NC01MTY2LTRmOTctYmE1OC0zZDc4MzM2ZWM0Y2UvMjk3YjBhMTMtYzg3OC0z ZmY4LWExYTItZDdiZGNkZDQyYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTVmNDk0NDQtNTE2Ni00Zjk3LWJh NTgtM2Q3ODMzNmVjNGNlLzk1ZjQ5NDQ0LTUxNjYtNGY5Ny1iYTU4LTNkNzgzMzZl YzRjZS5jcmwwHwYDVR0jBBgwFoAUrn67tuomUYctFUO2TVtrVex8HMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NWY0OTQ0NC01MTY2LTRmOTctYmE1OC0zZDc4 MzM2ZWM0Y2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxvz/MA8E AgACMAkDBwAmIACXYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKjENHqpfJQEDiUkhHmR4519ElyTV9erc hlZdbzEQ2B0lYOBtSgvU8v3moCVfmn+SYuT46CtLXbP7HdrhMo8GxdifUW3arLA/ q6lDgImWNpofQPTZaiWy0P4/Sw+y18McJ3wUBLKqDMTQTGdChuyjaQwl7kMhvKgZ ts2yVNH1rvgyj8mWqgepUsGvUZ601buE+pN80DF2z311ZVcq7mNYrdVRHiDgm7nk G+FWCdnRYxriP+iLaPk/8iH9dKUVnRTOREiXWEnfKcGq2rpDLb9PMFl+ZCRiBxGt BCefjTVlyI/IKDOhOdYDz1ryh0nvii/bjMQBzXholXWwlxkDDVXp2w== -----END CERTIFICATE-----Generated at Tue May 13 10:03:26 2025 by rpki-client