$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/7176dc3e-6c03-3ee7-859f-80de053d65d8.roa File: 7176dc3e-6c03-3ee7-859f-80de053d65d8.roa (raw, json) Hash identifier: JBzt9HNPxHkHTk2zNaHrvJkcBi/0gzMCbDgCamJzCiw= Subject key identifier: 13:61:FE:5D:05:B8:58:81:50:C7:FA:02:59:AD:7D:84:71:D2:96:63 Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F432858496B7ED108F4C63D1DCDA4E700 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/7176dc3e-6c03-3ee7-859f-80de053d65d8.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 40244 IP address blocks: 173.198.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d1:08:f4:c6:3d:1d:cd:a4:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=80ca99a1-5601-4ea6-a1f4-0586a847a22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:b8:df:3e:94:51:f6:36:ce:86:4f:97:5e: 67:5d:4f:ff:86:e6:e5:24:ff:e0:fc:71:9d:4d:e6: 71:6b:64:7e:eb:90:9f:89:91:fb:0e:89:03:fe:25: 1e:5b:4f:82:99:4d:6f:8e:0e:3f:6e:3c:0c:be:57: 22:e2:3a:13:48:6e:0b:c4:32:1c:f1:90:8b:b1:8b: e3:6a:8f:01:f6:cd:52:48:94:2c:ec:c6:f4:1a:d9: ce:1c:eb:34:96:01:6d:ed:b7:23:8c:79:0d:d7:1f: 0b:52:c0:d8:6f:f4:af:d7:d6:1b:76:2b:ce:89:4d: 58:27:29:8e:32:31:3b:67:c4:72:56:d4:41:40:a1: b5:4f:81:75:72:20:86:11:49:11:61:c4:20:0c:6d: da:ef:0e:51:93:b7:72:cb:a7:48:f2:51:00:56:68: c3:c5:2e:18:94:a6:f7:ac:0a:a3:80:58:01:cf:73: b6:aa:b6:fc:33:3b:a4:5c:57:2a:87:9d:57:d2:80: de:9a:55:84:a0:a2:a0:c9:67:21:65:ab:53:1e:89: 1b:da:b8:5c:c9:09:d0:8a:f7:1d:c9:e8:42:b6:30: 35:55:78:d5:74:09:03:36:71:9b:42:66:66:65:a0: b4:8f:9b:97:18:e5:2a:f1:0f:b0:45:f0:b8:14:02: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:61:FE:5D:05:B8:58:81:50:C7:FA:02:59:AD:7D:84:71:D2:96:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/7176dc3e-6c03-3ee7-859f-80de053d65d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 173.198.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:74:d6:0a:ad:1d:4a:ac:84:4d:26:16:2b:c7:92:d1:45:b2: 62:a9:53:69:90:d7:b6:b3:a2:aa:15:22:04:d1:9f:c7:f1:1d: 1a:43:4b:bc:99:7f:16:33:72:12:72:58:0f:12:59:46:5e:f2: 2b:d5:93:77:e3:4f:c8:86:92:ac:3b:de:53:07:5b:33:5b:47: f3:96:e6:98:0b:4c:f6:f9:62:ec:e1:62:96:37:42:74:c3:41: 9f:08:eb:8b:21:02:22:38:7f:78:ec:dd:6a:84:77:99:c7:2b: 14:69:86:fa:89:14:df:52:33:30:de:58:a8:24:03:4c:ac:1c: ff:d3:eb:a0:b9:f3:f8:f7:14:ac:c8:27:84:b8:93:19:20:a3: 94:7c:22:e7:8e:f8:bf:13:9a:94:90:05:e6:4e:87:3a:d4:15: 5f:b6:26:79:ef:60:95:ac:2f:f8:c5:3a:22:34:08:d0:ca:39: 33:a2:bf:f1:31:31:af:ce:ea:8f:5d:39:cc:2a:9e:8c:bb:98: 15:e0:30:d7:51:f1:88:5a:6a:be:4e:2b:20:20:a1:e2:e3:70: 8e:67:91:a8:6f:f6:7c:92:2d:1b:6d:5f:d3:47:af:05:c9:3c: 2e:35:ff:85:08:66:19:25:92:1a:64:66:bb:9e:c6:03:f5:55: e5:2e:f7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftEI9MY9Hc2k5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ODBjYTk5YTEtNTYwMS00ZWE2LWExZjQtMDU4NmE4NDdhMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPe43z6UUfY2zoZPl15nXU//hublJP/g/HGd TeZxa2R+65CfiZH7DokD/iUeW0+CmU1vjg4/bjwMvlci4joTSG4LxDIc8ZCLsYvj ao8B9s1SSJQs7Mb0GtnOHOs0lgFt7bcjjHkN1x8LUsDYb/Sv19YbdivOiU1YJymO MjE7Z8RyVtRBQKG1T4F1ciCGEUkRYcQgDG3a7w5Rk7dyy6dI8lEAVmjDxS4YlKb3 rAqjgFgBz3O2qrb8MzukXFcqh51X0oDemlWEoKKgyWchZatTHokb2rhcyQnQivcd yehCtjA1VXjVdAkDNnGbQmZmZaC0j5uXGOUq8Q+wRfC4FAJGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNh/l0FuFiBUMf6AlmtfYRx0pZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvNzE3NmRjM2UtNmMwMy0z ZWU3LTg1OWYtODBkZTA1M2Q2NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrcbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp01gqtHUqshE0mFivHktFFsmKpU2mQ17azoqoVIgTRn8fxHRpDS7yZ fxYzchJyWA8SWUZe8ivVk3fjT8iGkqw73lMHWzNbR/OW5pgLTPb5YuzhYpY3QnTD QZ8I64shAiI4f3js3WqEd5nHKxRphvqJFN9SMzDeWKgkA0ysHP/T66C58/j3FKzI J4S4kxkgo5R8IueO+L8TmpSQBeZOhzrUFV+2JnnvYJWsL/jFOiI0CNDKOTOiv/Ex Ma/O6o9dOcwqnoy7mBXgMNdR8Yhaar5OKyAgoeLjcI5nkahv9nySLRttX9NHrwXJ PC41/4UIZhklkhpkZruexgP1VeUu98c= -----END CERTIFICATE-----Generated at Wed May 7 18:15:09 2025 by rpki-client