$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa File: f9a2facb-e73a-3151-8001-8276673133ae.roa (raw, json) Hash identifier: p0Muy/RzZT7HTFwo64P7Y8V/K5wT5W6LQ2+QYA14qh0= Subject key identifier: 94:70:5E:33:51:A2:45:DE:7C:C5:A9:69:F0:AA:03:3E:D1:2A:A1:D5 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499829D31F9E988608A8861F80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 198.135.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d3:1f:9e:98:86:08:a8:86:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9f458c23-a719-41b6-bd46-f526f34b4aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:12:a9:86:49:e9:ed:47:f5:1a:2a:96:b1: 83:6f:13:50:56:85:e5:a8:68:c0:e6:be:d3:2c:48: fc:65:2e:2d:db:47:aa:98:10:bd:d2:67:91:ce:69: 1e:2e:47:98:5d:47:41:03:45:dc:dc:11:f8:9f:55: b7:77:38:f3:ca:ad:c2:a9:07:fc:c1:8c:0c:a7:15: 2f:24:f7:12:86:52:ae:60:09:2d:13:97:e2:e2:84: 9f:6a:19:71:b7:19:cf:20:e6:f1:20:a0:ff:60:7f: 90:f1:13:4a:c2:6a:5a:96:7b:d9:88:c7:a4:30:ac: 88:82:08:d6:75:c2:f9:63:e9:9c:7b:f4:c9:60:f2: 37:55:c7:6c:02:fc:f0:89:a7:77:52:95:aa:50:57: 59:d8:42:fa:c9:ce:fd:13:3e:1e:d8:7e:27:d1:85: 6f:2d:56:89:52:6d:07:a4:2a:49:e0:1e:41:60:6f: aa:0b:cc:fc:f5:06:5e:7f:ff:4b:82:ce:3e:3d:a3: 39:63:5a:9c:35:0a:f0:8a:59:58:7c:70:e9:3b:3f: ef:cb:27:8f:7c:4a:5e:8d:4b:1a:3a:79:96:7c:86: 8b:e9:db:48:98:75:4f:f1:6c:62:fe:e3:a6:09:ca: 21:04:89:af:c4:b6:b0:27:ed:97:58:f5:a5:03:60: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:5E:33:51:A2:45:DE:7C:C5:A9:69:F0:AA:03:3E:D1:2A:A1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.135.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:25:08:b3:77:a0:3d:50:0c:b1:f2:00:89:a4:7a:4f:c0:19: 64:82:f6:d3:d9:58:90:88:73:c3:e0:c2:ff:33:c5:48:7f:28: 08:83:91:44:30:a4:94:83:e4:cb:3b:6d:3a:f0:b2:88:7a:d4: 6e:e1:eb:33:a3:5a:c0:13:13:5a:38:18:c3:00:6d:79:65:62: 80:e3:66:14:a9:aa:e0:9d:51:1e:58:fd:2b:66:29:2a:48:56: 5d:6e:b2:10:ca:75:05:a7:ba:f4:0f:4c:f3:a3:a1:d4:3a:70: 8a:6b:d6:d6:07:32:f8:65:61:1a:91:c2:f3:e6:eb:ca:d5:7c: ee:69:e7:9c:d8:ee:6d:d4:00:3f:ea:66:22:54:10:9b:cc:2a: 51:ba:3f:5d:3d:01:d5:0d:9d:74:d6:05:67:1c:e8:6f:0f:e3: 5c:b2:c9:13:9e:13:1c:e6:03:cf:f9:e8:10:b5:d1:66:ad:ba: fc:58:5c:19:d2:f1:dd:55:8c:32:54:b7:a8:3d:3b:29:09:18: 16:c1:67:38:e2:fe:6d:59:10:43:37:5d:55:b2:18:82:e6:6d: ae:51:1f:a1:d0:96:8e:42:14:46:af:16:4d:a8:b9:f8:5d:70: e0:7e:89:40:11:4f:7d:85:41:27:23:4a:7c:29:b7:06:15:96: de:d1:7d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdMfnpiGCKiGH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OWY0NThjMjMtYTcxOS00MWI2LWJkNDYtZjUyNmYzNGI0YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5MSqYZJ6e1H9RoqlrGDbxNQVoXlqGjA5r7T LEj8ZS4t20eqmBC90meRzmkeLkeYXUdBA0Xc3BH4n1W3dzjzyq3CqQf8wYwMpxUv JPcShlKuYAktE5fi4oSfahlxtxnPIObxIKD/YH+Q8RNKwmpalnvZiMekMKyIggjW dcL5Y+mce/TJYPI3VcdsAvzwiad3UpWqUFdZ2EL6yc79Ez4e2H4n0YVvLVaJUm0H pCpJ4B5BYG+qC8z89QZef/9Lgs4+PaM5Y1qcNQrwillYfHDpOz/vyyePfEpejUsa OnmWfIaL6dtImHVP8Wxi/uOmCcohBImvxLawJ+2XWPWlA2DdiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRwXjNRokXefMWpafCqAz7RKqHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjlhMmZhY2ItZTczYS0z MTUxLTgwMDEtODI3NjY3MzEzM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxoegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKElCLN3oD1QDLHyAImkek/AGWSC9tPZWJCIc8Pgwv8zxUh/KAiDkUQw pJSD5Ms7bTrwsoh61G7h6zOjWsATE1o4GMMAbXllYoDjZhSpquCdUR5Y/StmKSpI Vl1ushDKdQWnuvQPTPOjodQ6cIpr1tYHMvhlYRqRwvPm68rVfO5p55zY7m3UAD/q ZiJUEJvMKlG6P109AdUNnXTWBWcc6G8P41yyyROeExzmA8/56BC10WatuvxYXBnS 8d1VjDJUt6g9OykJGBbBZzji/m1ZEEM3XVWyGILmba5RH6HQlo5CFEavFk2oufhd cOB+iUART32FQScjSnwptwYVlt7RfXw= -----END CERTIFICATE-----Generated at Mon May 5 14:36:42 2025 by rpki-client