$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa File: 3e196079-8695-30ec-97ad-a014098a62f1.roa (raw, json) Hash identifier: Jc9eHHE4Sqh/HOjrqEh8ybj6a6GoZLcVXiOQKdoN0RM= Subject key identifier: D2:37:12:3A:17:79:09:BE:22:1D:F5:C1:51:1D:8B:F1:0E:B1:00:DB Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F432858496E4989C6A6573CBB638901C0 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 400519 IP address blocks: 198.22.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:89:c6:a6:57:3c:bb:63:89:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=c67cadbf-fb81-479c-9eee-3ccd0ad57195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:21:71:8d:33:12:3d:3d:39:39:1f:4b:b2: bb:8c:51:07:77:c8:51:7c:f7:96:9c:0e:c8:f4:49: 61:1f:9c:be:05:07:54:6d:19:ee:dd:ff:f1:b7:03: 68:8a:76:5c:7b:70:1b:2d:c9:80:43:57:1a:17:c6: 5d:b5:d0:01:bc:d8:1e:55:67:3c:44:73:12:ba:08: a1:5b:96:dd:07:07:88:db:2c:51:5e:b0:47:be:44: d6:9a:35:d9:3d:21:76:01:bf:28:84:61:f2:e6:72: 36:26:ef:92:79:1d:96:e0:23:8a:31:e5:60:28:e1: b5:1a:72:0a:7a:e5:8c:66:30:4b:0a:52:bf:b6:b4: 3b:4c:0e:9f:4f:2f:68:4e:ec:40:ac:c2:ae:b8:4b: b5:5f:e4:fa:26:d0:4f:11:13:7b:ad:40:3d:72:b7: 15:66:06:0a:60:56:ea:3f:c1:f6:d0:4b:2b:80:e9: c2:96:af:43:1d:ba:76:02:e0:4a:2b:ad:3f:c1:58: a5:0d:dc:8d:1e:d3:11:f0:be:9a:f4:05:2c:cc:4b: 18:ab:12:e4:c7:b4:1b:01:28:44:4f:bb:35:d9:12: 0d:ae:e2:6c:e8:85:03:84:ee:34:c8:31:d1:ee:9d: 26:18:a2:c7:1a:4c:ff:63:a1:8b:71:8e:d4:da:42: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:37:12:3A:17:79:09:BE:22:1D:F5:C1:51:1D:8B:F1:0E:B1:00:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 198.22.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a8:a1:8e:f2:a4:0b:d5:02:1a:63:b7:20:9e:4a:ea:83:00: 61:37:a7:02:5d:91:02:8d:05:29:14:31:58:ac:05:cc:16:63: 88:90:e0:84:bc:ce:9b:18:92:ba:f4:22:02:ff:4b:e2:58:b8: 74:9f:29:7c:5a:d0:d8:41:c7:a2:ec:d2:66:af:96:17:95:7a: cb:bd:85:a5:f2:52:b8:dd:33:9f:82:53:de:60:77:cc:03:a9: a3:6b:8a:cd:67:4a:d0:33:bf:8b:ad:e5:da:0b:18:9c:7a:ba: e3:fb:7d:86:27:04:16:50:28:d7:c8:75:0a:62:6e:eb:6a:69: ac:34:0d:2c:f9:54:74:9c:4b:d0:3b:e7:49:ee:a1:21:d9:45: d6:a4:b6:1c:2d:a6:0d:5e:1f:9e:52:ff:48:13:03:58:7d:ad: 8f:94:8e:9f:76:55:43:0e:f3:66:bf:9f:3d:88:b8:ab:55:59: ae:cf:a4:76:32:11:99:07:8a:39:f5:7d:64:d9:3d:27:f8:44: 40:cc:6a:60:bb:0a:14:02:95:84:f8:ee:eb:d2:ec:b9:ac:51: 0b:0f:73:94:ab:1b:38:b8:0e:36:0a:ad:00:34:35:46:d2:08: e0:fd:de:33:a9:e0:25:2f:99:b5:c3:76:da:71:e1:5c:e4:34: 73:c5:e6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYnGplc8u2OJAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk YzY3Y2FkYmYtZmI4MS00NzljLTllZWUtM2NjZDBhZDU3MTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9whcY0zEj09OTkfS7K7jFEHd8hRfPeWnA7I 9ElhH5y+BQdUbRnu3f/xtwNoinZce3AbLcmAQ1caF8ZdtdABvNgeVWc8RHMSugih W5bdBweI2yxRXrBHvkTWmjXZPSF2Ab8ohGHy5nI2Ju+SeR2W4COKMeVgKOG1GnIK euWMZjBLClK/trQ7TA6fTy9oTuxArMKuuEu1X+T6JtBPERN7rUA9crcVZgYKYFbq P8H20EsrgOnClq9DHbp2AuBKK60/wVilDdyNHtMR8L6a9AUszEsYqxLkx7QbAShE T7s12RINruJs6IUDhO40yDHR7p0mGKLHGkz/Y6GLcY7U2kIvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI3EjoXeQm+Ih31wVEdi/EOsQDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvM2UxOTYwNzktODY5NS0z MGVjLTk3YWQtYTAxNDA5OGE2MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ooY7ypAvVAhpjtyCeSuqDAGE3pwJdkQKNBSkUMVisBcwWY4iQ4IS8 zpsYkrr0IgL/S+JYuHSfKXxa0NhBx6Ls0mavlheVesu9haXyUrjdM5+CU95gd8wD qaNris1nStAzv4ut5doLGJx6uuP7fYYnBBZQKNfIdQpibutqaaw0DSz5VHScS9A7 50nuoSHZRdakthwtpg1eH55S/0gTA1h9rY+Ujp92VUMO82a/nz2IuKtVWa7PpHYy EZkHijn1fWTZPSf4REDMamC7ChQClYT47uvS7LmsUQsPc5SrGzi4DjYKrQA0NUbS COD93jOp4CUvmbXDdtpx4VzkNHPF5ow= -----END CERTIFICATE-----Generated at Sun May 11 21:45:31 2025 by rpki-client