$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa File: 187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa (raw, json) Hash identifier: q0ZHswNGRDBqUCjYPlKL23awqd2mDThOntzbUd+Rm3Q= Subject key identifier: F3:C7:89:E9:91:19:35:AE:A6:E8:39:BF:BC:87:12:E2:92:73:B6:90 Certificate issuer: /CN=0b6916e5-2238-46bc-9e75-63363cc71a0a Certificate serial: 010D0C9F43285849B14A0DAAF5BA38532A641400 Authority key identifier: 9F:A9:3A:33:C1:81:A1:D6:03:0F:94:A9:27:BC:23:65:64:99:D5:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 21976 IP address blocks: 198.133.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0d:aa:f5:ba:38:53:2a:64:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6916e5-2238-46bc-9e75-63363cc71a0a Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=95e38f72-58d8-400a-a49c-6ceb8a5b0ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:35:18:31:cf:11:7d:80:4d:30:bf:9f:67: 19:db:e3:5d:0a:ac:69:b1:7f:99:4e:21:ba:c9:6f: e9:fc:61:94:e4:7c:c4:a7:26:e7:25:e7:fb:69:81: 36:fd:54:59:84:ec:7e:3c:99:b7:31:b6:2e:2a:1f: 12:78:ca:b6:b0:05:c3:47:9f:0f:d4:91:49:4e:09: 95:63:4d:c2:16:da:89:02:4c:0c:57:5f:cf:91:f7: 33:ac:5e:b4:b0:9a:a9:17:00:ce:11:ed:0a:ef:9d: f2:8d:9d:70:97:9c:b3:a5:70:85:05:c8:e3:0d:eb: e8:3f:b5:b0:81:a6:d3:a7:14:75:f6:40:72:d6:4a: a5:4f:f4:e9:b2:5b:e5:a1:ec:13:f8:8b:39:b1:9b: 32:ff:ef:db:22:22:52:b1:b0:96:b8:e4:c6:99:83: 26:8b:bc:99:6c:c1:47:4a:53:46:4d:1f:65:3a:62: 73:42:d8:eb:ee:fa:89:cf:6d:39:f8:fe:0c:83:c7: 4c:90:47:1d:bf:df:85:bb:7f:c0:03:c7:fc:e9:1d: db:5f:59:d3:b8:da:56:a1:51:6f:f3:6f:4c:8c:a0: 9e:ac:a4:55:89:98:96:b2:1d:d3:27:58:60:75:58: 53:cc:02:d4:56:0e:52:21:27:44:35:57:e1:34:2d: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:89:E9:91:19:35:AE:A6:E8:39:BF:BC:87:12:E2:92:73:B6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/187e31e9-b3aa-3c7f-bfab-ee0c273e2f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.crl X509v3 Authority Key Identifier: keyid:9F:A9:3A:33:C1:81:A1:D6:03:0F:94:A9:27:BC:23:65:64:99:D5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer sbgp-ipAddrBlock: critical IPv4: 198.133.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2e:c9:78:28:a6:77:76:ea:35:21:93:6b:02:b3:96:8c:d0: fe:a5:62:be:23:12:be:40:93:cc:67:11:e7:9f:ef:d9:56:3f: 12:5f:d8:a4:ea:32:10:37:89:a1:38:a4:d2:d5:d9:13:c9:f0: 17:45:7b:b0:5a:32:83:c7:10:da:2c:50:99:76:aa:9f:f5:42: fd:08:b1:cc:c3:05:04:c4:b4:cf:52:fc:fc:b5:f5:9b:db:4a: a3:64:be:87:3f:68:07:d8:97:b6:64:b1:5b:b3:6e:06:71:7d: f5:74:74:8d:34:af:47:22:d7:b2:09:d3:c4:a5:78:5c:e5:36: 5d:d4:8d:8d:f7:13:5e:b4:df:dd:fa:0d:61:a5:19:fc:94:1c: 2b:63:b0:02:c1:8a:9a:1b:28:63:b1:d7:70:f9:6c:50:ef:eb: 06:ed:7d:b4:c4:ba:26:f4:f0:6d:c9:63:ad:6f:8e:4e:37:d2: 89:24:95:d2:5c:be:6c:39:3d:5e:a1:e6:eb:12:26:aa:9e:55: 3f:2d:5c:37:37:83:a8:ea:9a:fe:41:39:09:e4:d6:14:78:37: ee:b6:ce:90:d9:94:72:47:25:7a:8b:bc:12:68:97:05:b8:cc: df:af:cd:2f:53:10:14:c5:ff:79:44:dc:70:ba:93:80:03:03: 0c:da:4f:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg2q9bo4UypkFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2OTE2ZTUtMjIzOC00NmJjLTllNzUtNjMzNjNjYzcx YTBhMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTVlMzhmNzItNThkOC00MDBhLWE0OWMtNmNlYjhhNWIwY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE81GDHPEX2ATTC/n2cZ2+NdCqxpsX+ZTiG6 yW/p/GGU5HzEpybnJef7aYE2/VRZhOx+PJm3MbYuKh8SeMq2sAXDR58P1JFJTgmV Y03CFtqJAkwMV1/PkfczrF60sJqpFwDOEe0K753yjZ1wl5yzpXCFBcjjDevoP7Ww gabTpxR19kBy1kqlT/TpslvloewT+Is5sZsy/+/bIiJSsbCWuOTGmYMmi7yZbMFH SlNGTR9lOmJzQtjr7vqJz205+P4Mg8dMkEcdv9+Fu3/AA8f86R3bX1nTuNpWoVFv 829MjKCerKRViZiWsh3TJ1hgdVhTzALUVg5SISdENVfhNC34uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPHiemRGTWupug5v7yHEuKSc7aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYjY5 MTZlNS0yMjM4LTQ2YmMtOWU3NS02MzM2M2NjNzFhMGEvMTg3ZTMxZTktYjNhYS0z YzdmLWJmYWItZWUwYzI3M2UyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGI2OTE2ZTUtMjIzOC00NmJjLTll NzUtNjMzNjNjYzcxYTBhLzBiNjkxNmU1LTIyMzgtNDZiYy05ZTc1LTYzMzYzY2M3 MWEwYS5jcmwwHwYDVR0jBBgwFoAUn6k6M8GBodYDD5SpJ7wjZWSZ1VMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wYjY5MTZlNS0yMjM4LTQ2YmMtOWU3NS02MzM2 M2NjNzFhMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwuyXgopnd26jUhk2sCs5aM0P6lYr4jEr5Ak8xnEeef79lWPxJf2KTq MhA3iaE4pNLV2RPJ8BdFe7BaMoPHENosUJl2qp/1Qv0IsczDBQTEtM9S/Py19Zvb SqNkvoc/aAfYl7ZksVuzbgZxffV0dI00r0ci17IJ08SleFzlNl3UjY33E1603936 DWGlGfyUHCtjsALBipobKGOx13D5bFDv6wbtfbTEuib08G3JY61vjk430okkldJc vmw5PV6h5usSJqqeVT8tXDc3g6jqmv5BOQnk1hR4N+62zpDZlHJHJXqLvBJolwW4 zN+vzS9TEBTF/3lE3HC6k4ADAwzaT60= -----END CERTIFICATE-----Generated at Mon May 12 00:06:06 2025 by rpki-client