$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dfb07e-3184-3414-9556-d94b7275778b.roa File: b8dfb07e-3184-3414-9556-d94b7275778b.roa (raw, json) Hash identifier: aZF1kUOuvcBSzaUlk9+4VbjHlz6c96VJHe5t0AXyR58= Subject key identifier: 3E:0E:17:5F:10:01:1B:21:DB:A2:0E:01:45:AB:97:23:1F:83:D9:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849CE9A76CF5DE3A426D9920100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dfb07e-3184-3414-9556-d94b7275778b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 198.41.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:76:cf:5d:e3:a4:26:d9:92:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=5e530744-dd5f-4ff8-9097-24b60a58ce04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:eb:8a:82:25:a3:ad:90:fe:83:e0:b1:6a: 72:7d:27:01:c6:2f:29:70:b9:b2:7d:84:6a:78:fd: 9f:fe:60:82:25:f7:de:95:24:b0:7d:4c:06:a7:fb: fa:6e:48:36:19:11:0f:b0:e0:31:92:dc:c3:46:1b: fd:e2:73:1e:6d:92:4c:9a:32:52:9b:4d:ca:a5:50: 3c:1e:8d:0b:8a:85:9b:65:c1:c6:1e:4d:ae:27:d4: f8:f1:6d:69:a3:a4:8f:af:ff:91:c8:dc:b3:de:70: c6:b6:25:da:82:22:01:1d:b6:bb:77:fe:29:78:cb: d5:6e:41:60:91:70:55:5a:03:ad:3d:32:35:10:6a: b7:5c:14:9a:5c:35:2e:bf:cb:da:36:ad:16:42:f0: 9e:49:3e:e0:44:60:e8:6a:e2:af:40:0a:b1:c5:2e: 88:f8:ca:f3:5e:46:be:19:0f:db:2a:b5:ae:10:fd: 6d:59:ed:f6:2e:c5:b2:52:a8:9e:08:08:b9:fb:05: c5:08:42:4c:04:e6:9e:53:22:dd:b7:40:b7:de:9d: 45:5d:92:c4:d5:cf:a8:a3:12:fb:a0:82:34:eb:c3: b6:ab:42:94:35:46:d9:07:e5:56:4c:00:3c:a0:06: e8:9e:ce:d7:10:7f:b1:57:57:5b:3d:d4:c2:80:1a: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0E:17:5F:10:01:1B:21:DB:A2:0E:01:45:AB:97:23:1F:83:D9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dfb07e-3184-3414-9556-d94b7275778b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3c:e6:8c:6f:c7:01:f3:5c:82:66:dc:ff:11:8a:d1:52:03: a0:39:50:55:02:ce:34:34:87:f9:ec:78:6f:2c:fc:9b:f2:dd: d6:b0:43:12:67:7b:c3:69:59:eb:65:77:67:1a:e5:3e:ee:dd: 68:be:4d:f8:ad:a9:a4:3d:fe:2d:52:73:6f:e5:29:e5:7f:a9: 7f:29:b8:94:76:86:34:33:76:94:b1:7b:e9:fb:f0:67:a6:ca: 18:e4:49:f5:6b:d9:7a:fb:77:94:b2:d9:7f:a3:55:3b:bc:f0: ff:5c:8f:69:e4:5e:ec:4e:5e:c8:e3:8e:59:bc:0a:f4:48:ff: d2:cc:f3:f8:19:bd:33:0b:a3:90:45:af:69:7b:09:f7:03:ef: fd:a3:a5:25:1b:d9:6e:3d:ec:0e:4b:5b:f3:75:0f:37:95:b3: 31:42:88:7b:f7:3a:d1:f1:89:59:ac:5a:18:cf:47:8c:d2:b5: ac:a4:80:ce:6c:02:40:76:f7:c6:31:23:2e:de:12:78:20:2c: ba:1e:b1:9c:b9:21:31:8c:79:c2:cb:63:6f:e4:d2:cc:68:40: 70:ba:ef:2c:b3:5e:80:d7:a0:25:84:29:de:ad:f7:b1:cf:5c: 2c:05:ca:a8:c5:c7:12:02:38:55:ae:a9:c8:24:d5:a5:2b:7f: 69:41:ea:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnbPXeOkJtmSAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NWU1MzA3NDQtZGQ1Zi00ZmY4LTkwOTctMjRiNjBhNThjZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCrrioIlo62Q/oPgsWpyfScBxi8pcLmyfYRq eP2f/mCCJffelSSwfUwGp/v6bkg2GREPsOAxktzDRhv94nMebZJMmjJSm03KpVA8 Ho0LioWbZcHGHk2uJ9T48W1po6SPr/+RyNyz3nDGtiXagiIBHba7d/4peMvVbkFg kXBVWgOtPTI1EGq3XBSaXDUuv8vaNq0WQvCeST7gRGDoauKvQAqxxS6I+MrzXka+ GQ/bKrWuEP1tWe32LsWyUqieCAi5+wXFCEJMBOaeUyLdt0C33p1FXZLE1c+ooxL7 oII068O2q0KUNUbZB+VWTAA8oAbons7XEH+xV1dbPdTCgBo8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4OF18QARsh26IOAUWrlyMfg9mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkZmIwN2UtMzE4NC0z NDE0LTk1NTYtZDk0YjcyNzU3NzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY85oxvxwHzXIJm3P8RitFSA6A5UFUCzjQ0h/nseG8s/Jvy3dawQxJn e8NpWetld2ca5T7u3Wi+TfitqaQ9/i1Sc2/lKeV/qX8puJR2hjQzdpSxe+n78Gem yhjkSfVr2Xr7d5Sy2X+jVTu88P9cj2nkXuxOXsjjjlm8CvRI/9LM8/gZvTMLo5BF r2l7CfcD7/2jpSUb2W497A5LW/N1DzeVszFCiHv3OtHxiVmsWhjPR4zStaykgM5s AkB298YxIy7eEnggLLoesZy5ITGMecLLY2/k0sxoQHC67yyzXoDXoCWEKd6t97HP XCwFyqjFxxICOFWuqcgk1aUrf2lB6u0= -----END CERTIFICATE-----Generated at Mon May 12 02:36:51 2025 by rpki-client