$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa File: 58cb281c-c134-3300-b62f-7a82f33f8b29.roa (raw, json) Hash identifier: hq5IKC/A6+kFKnTA4Re/dOH2fcLHRC5AO6pbDEbMvTQ= Subject key identifier: 69:88:66:E5:58:59:72:F5:43:E1:A6:66:CC:11:DC:7A:9A:FF:87:31 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F43285849CE9A6568626F9FD3357E6500 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 56274 IP address blocks: 198.208.133.0/24 maxlen: 24 198.208.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:65:68:62:6f:9f:d3:35:7e:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=30d5b471-ba28-4e09-9d9f-0d6e503b3242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:14:df:18:a3:98:4c:62:78:d3:35:5d:48: b3:94:58:b6:8d:c4:97:b1:76:a6:ae:ed:a5:ad:5c: ef:2d:d7:e7:13:58:0e:e1:74:e3:ac:bd:80:f2:4d: 1c:c1:65:62:99:fc:b8:54:1e:fb:ec:07:c4:a6:f0: d5:af:8f:4f:44:7f:27:22:66:e1:25:19:66:4d:fd: 17:b6:62:85:b4:34:17:ad:81:d4:37:60:4f:6c:e0: f0:4e:8a:5a:c0:b0:50:a1:92:61:49:87:3e:79:ee: 73:e5:fd:34:bc:b9:a5:0f:34:d5:7e:59:47:90:88: 7e:91:fd:78:28:43:93:19:85:c7:52:06:80:8e:88: c8:2a:a4:a0:20:e9:07:76:e0:6b:8d:52:10:07:70: 2b:23:06:ad:c1:d6:0f:33:c6:a0:dd:02:2b:50:35: 71:aa:85:e9:59:e3:82:63:cd:de:23:f4:a5:22:81: 7c:b4:c6:e0:02:7f:ed:c7:6d:6b:b3:88:f7:c1:b1: f3:73:fc:b1:99:21:62:71:a3:23:29:37:d4:db:78: 35:16:29:fb:72:83:e9:ec:3d:b7:ee:e8:56:da:2d: 47:f1:52:d9:0f:1b:49:05:81:71:8b:6b:d0:6f:dd: d9:40:b4:b5:51:4b:ba:3d:eb:35:04:5d:b8:32:d2: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:88:66:E5:58:59:72:F5:43:E1:A6:66:CC:11:DC:7A:9A:FF:87:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/58cb281c-c134-3300-b62f-7a82f33f8b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.133.0/24 198.208.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:76:7d:b9:11:da:a6:de:4d:58:e9:a4:3a:6e:12:41:b7:c8: 8a:47:dc:2a:b8:90:74:76:e5:4f:f1:fd:d3:e3:06:c8:3e:ef: 8d:47:33:27:9f:b2:e1:4c:b8:5f:46:2d:8a:31:7a:cd:d9:a6: 4e:12:b0:23:5c:a1:b3:73:13:d4:ce:ea:94:4f:54:de:15:69: 36:d1:c4:bc:0c:84:f3:16:c1:7c:09:4e:f1:ee:95:8e:27:34: f9:85:2d:c0:1e:d1:a2:0c:41:c7:21:22:64:97:23:3e:ac:74: 09:04:bb:d8:e3:40:c1:51:5a:95:22:ed:3a:2b:a5:ea:53:b7: 26:46:43:76:20:bf:3d:00:c2:e9:0f:e1:8e:1d:4f:da:6f:9a: e9:fd:f4:ce:b2:06:38:17:9f:5c:df:87:65:51:53:75:91:35: da:86:ed:32:2c:f4:7d:41:b2:47:b1:5a:50:b2:62:31:8b:d5: 09:d4:cf:3f:e4:05:5f:4f:22:a7:17:81:89:09:eb:d5:b9:c7: 70:86:30:2d:d9:e1:2a:11:bb:ec:2a:cc:25:cd:df:cb:3b:5b: 40:96:f5:79:9e:11:f6:b2:2b:00:79:63:e9:4a:00:7e:85:43: 49:4d:83:1e:a8:a2:2f:89:6f:68:8a:5b:7b:66:d3:82:01:c5: 91:a3:87:fe -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnOmmVoYm+f0zV+ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzBkNWI0NzEtYmEyOC00ZTA5LTlkOWYtMGQ2ZTUwM2IzMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zwU3xijmExieNM1XUizlFi2jcSXsXamru2l rVzvLdfnE1gO4XTjrL2A8k0cwWVimfy4VB777AfEpvDVr49PRH8nImbhJRlmTf0X tmKFtDQXrYHUN2BPbODwTopawLBQoZJhSYc+ee5z5f00vLmlDzTVfllHkIh+kf14 KEOTGYXHUgaAjojIKqSgIOkHduBrjVIQB3ArIwatwdYPM8ag3QIrUDVxqoXpWeOC Y83eI/SlIoF8tMbgAn/tx21rs4j3wbHzc/yxmSFicaMjKTfU23g1Fin7coPp7D23 7uhW2i1H8VLZDxtJBYFxi2vQb93ZQLS1UUu6Pes1BF24MtKT+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGmIZuVYWXL1Q+GmZswR3Hqa/4cxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNThjYjI4MWMtYzEzNC0z MzAwLWI2MmYtN2E4MmYzM2Y4YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtCFAwQA xtDYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADd2fbkR2qbeTVjppDpuEkG3yIpH3Cq4kHR25U/x/dPjBsg+ 741HMyefsuFMuF9GLYoxes3Zpk4SsCNcobNzE9TO6pRPVN4VaTbRxLwMhPMWwXwJ TvHulY4nNPmFLcAe0aIMQcchImSXIz6sdAkEu9jjQMFRWpUi7TorpepTtyZGQ3Yg vz0AwukP4Y4dT9pvmun99M6yBjgXn1zfh2VRU3WRNdqG7TIs9H1BskexWlCyYjGL 1QnUzz/kBV9PIqcXgYkJ69W5x3CGMC3Z4SoRu+wqzCXN38s7W0CW9XmeEfayKwB5 Y+lKAH6FQ0lNgx6ooi+Jb2iKW3tm04IBxZGjh/4= -----END CERTIFICATE-----Generated at Sun May 11 23:23:43 2025 by rpki-client