$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa File: 07c30033-c037-384c-b725-0b56b7f2738d.roa (raw, json) Hash identifier: WwNRs5IJO3gqxEsIZI+L7uN5YGdxuvEc2K6DOCtDONg= Subject key identifier: 03:AC:2A:70:2A:88:27:37:E0:3E:B7:42:1E:CB:B6:42:4B:28:0B:27 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F432858492CB22A14F7ABB76EA3103680 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 4181 IP address blocks: 198.150.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:2a:14:f7:ab:b7:6e:a3:10:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e48567a8-f798-42e1-8c34-2b00d82f4dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:93:f5:00:e1:d3:3b:64:9d:ab:f0:25:2a: 7e:20:6c:fa:79:6b:fc:6b:90:83:d9:71:b2:26:1c: 25:df:70:a1:68:d7:5b:54:ea:a5:1e:ed:4e:8d:da: 52:a7:4a:34:e4:b2:58:79:f4:4b:62:07:a5:06:93: e1:99:91:0a:f7:72:89:16:d6:ea:9d:d3:51:9e:2e: e2:23:3d:4d:6d:84:db:eb:58:af:f4:0c:d0:36:e5: 7b:1b:a4:8b:3b:77:dd:8f:cf:e5:c3:0c:0a:26:e6: 81:1b:74:e1:57:83:a5:c5:e0:ec:57:a9:10:92:02: 0e:7a:46:c5:14:37:ac:5e:4c:83:3b:cc:70:c2:a8: 42:3a:e8:4e:c5:dc:5e:68:bb:af:83:f3:76:1a:0f: 20:3d:8c:7d:48:50:e5:bc:9c:9a:02:1d:7b:82:02: 23:5a:87:f7:c4:43:7e:c6:a7:c4:18:25:f9:bd:5c: df:f1:88:f1:18:95:92:96:95:99:4b:34:05:c9:1b: 43:fa:e7:b5:27:7a:6c:d8:99:90:93:8e:b3:78:23: 09:57:db:db:a8:54:c4:ea:de:af:50:2c:2a:6e:72: d6:a0:b7:9a:7d:20:37:9e:91:26:3a:a0:32:c6:35: 8f:ac:15:f4:51:5a:ef:9b:47:57:cd:26:eb:40:9c: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AC:2A:70:2A:88:27:37:E0:3E:B7:42:1E:CB:B6:42:4B:28:0B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e5:fb:36:76:71:c6:b1:a3:63:d8:d4:29:e9:f8:7c:b2:48: 0b:ed:82:61:22:af:8f:52:47:50:63:20:c3:7e:37:6a:95:4e: af:f6:e2:71:df:9f:48:21:d0:e6:d1:be:4c:cc:27:67:cf:9b: f9:c5:f7:51:52:ce:63:0d:70:4c:9a:88:81:56:2e:b6:a4:5d: 24:86:1c:a4:3f:47:db:1f:27:7d:67:7b:4c:c6:b5:e2:64:0e: a2:bf:9a:70:53:c3:60:5f:fb:44:3b:15:13:27:92:aa:ee:70: b8:22:07:eb:3c:c0:cb:e1:24:09:54:54:34:22:63:53:5f:42: ac:3c:ad:39:6f:2a:82:51:39:25:b5:0a:06:98:5e:df:88:e5: 95:d5:2e:08:4f:39:e7:7f:d1:0f:ab:16:7f:3f:82:14:fc:af: d8:e9:e8:6a:16:32:bf:c8:8e:27:af:30:b1:07:5f:40:d1:48: 61:78:f4:c1:c7:d0:9c:30:72:b9:f4:1d:56:50:8f:e4:68:db: 12:f3:23:a9:43:67:96:df:b3:8e:20:5f:89:08:9b:c1:36:81: c0:e0:ff:82:8e:8f:9e:95:b7:f0:f5:0d:bc:bc:6d:1b:d3:74: 7c:e5:56:a1:ca:cd:92:5c:f6:81:de:e1:45:89:3a:13:68:41: bf:c4:77:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssioU96u3bqMQNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQ4NTY3YTgtZjc5OC00MmUxLThjMzQtMmIwMGQ4MmY0ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPuT9QDh0ztknavwJSp+IGz6eWv8a5CD2XGy Jhwl33ChaNdbVOqlHu1OjdpSp0o05LJYefRLYgelBpPhmZEK93KJFtbqndNRni7i Iz1NbYTb61iv9AzQNuV7G6SLO3fdj8/lwwwKJuaBG3ThV4OlxeDsV6kQkgIOekbF FDesXkyDO8xwwqhCOuhOxdxeaLuvg/N2Gg8gPYx9SFDlvJyaAh17ggIjWof3xEN+ xqfEGCX5vVzf8YjxGJWSlpWZSzQFyRtD+ue1J3ps2JmQk46zeCMJV9vbqFTE6t6v UCwqbnLWoLeafSA3npEmOqAyxjWPrBX0UVrvm0dXzSbrQJzjGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOsKnAqiCc34D63Qh7LtkJLKAsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMDdjMzAwMzMtYzAzNy0z ODRjLWI3MjUtMGI1NmI3ZjI3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHl+zZ2ccaxo2PY1Cnp+HyySAvtgmEir49SR1BjIMN+N2qVTq/24nHf n0gh0ObRvkzMJ2fPm/nF91FSzmMNcEyaiIFWLrakXSSGHKQ/R9sfJ31ne0zGteJk DqK/mnBTw2Bf+0Q7FRMnkqrucLgiB+s8wMvhJAlUVDQiY1NfQqw8rTlvKoJROSW1 CgaYXt+I5ZXVLghPOed/0Q+rFn8/ghT8r9jp6GoWMr/IjievMLEHX0DRSGF49MHH 0Jwwcrn0HVZQj+Ro2xLzI6lDZ5bfs44gX4kIm8E2gcDg/4KOj56Vt/D1Dby8bRvT dHzlVqHKzZJc9oHe4UWJOhNoQb/Ed5w= -----END CERTIFICATE-----Generated at Mon May 12 11:08:35 2025 by rpki-client