$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa File: e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa (raw, json) Hash identifier: aAazGMTkMPehM7srQcznK7rZcgHv0q+z+HKyrKBH42s= Subject key identifier: F3:F2:B9:68:06:88:C4:B2:8C:53:06:C1:BE:F7:84:F5:D6:A1:04:6E Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F43285849BC74ACC36F376320A2252F80 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 2559 IP address blocks: 198.241.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ac:c3:6f:37:63:20:a2:25:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=4a7fdd58-edb4-49a4-9700-bce948039f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:c5:9a:f4:0c:f7:a6:4c:c2:b6:7c:54:f7: 88:8a:65:ba:b1:93:e7:87:66:6a:0d:a2:9d:7a:3e: bb:c8:1a:80:b3:de:83:6f:fc:ec:d4:d5:ae:90:69: 66:e5:c0:8f:79:a4:79:c2:ab:6e:dc:be:8e:17:e5: 12:4e:a9:01:6f:ac:c0:e5:8d:c4:7e:7f:ef:c5:72: de:0b:bd:df:52:99:f7:d8:de:04:75:0b:cd:99:64: be:56:34:3c:fb:59:5d:4b:df:1e:db:dd:83:c5:80: 54:60:55:f2:73:3c:bc:8c:09:64:ee:6d:2f:f9:ac: 71:35:cf:24:62:9c:60:8a:f4:8f:29:bc:4b:91:ed: 13:00:40:48:59:4a:6d:de:ff:ed:1d:7a:71:84:74: 27:14:ac:ad:7c:0c:e3:8d:1b:d1:1f:55:a8:4f:86: 27:3e:36:cd:32:b4:5b:47:01:89:0b:7f:c0:d1:c5: 16:58:af:5c:69:38:17:6a:e6:11:9f:e4:fa:81:a8: 5a:85:00:11:d8:13:76:9c:d0:6d:7f:21:62:9e:86: 46:47:4f:74:1a:cc:68:c1:f0:c5:24:ce:01:f4:4d: 49:ab:76:03:37:6e:b9:0f:6b:92:c4:19:cf:36:5a: c1:a2:20:47:ce:18:ad:37:f4:45:01:f0:3b:ca:51: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:B9:68:06:88:C4:B2:8C:53:06:C1:BE:F7:84:F5:D6:A1:04:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:41:a2:cc:f9:65:9c:a6:8a:d9:d8:ab:6b:5d:61:15:f2:21: c1:da:f1:ea:29:a2:e3:50:c1:34:f8:ab:7e:16:74:9c:34:ef: f5:93:af:a1:e8:22:c0:9b:22:d9:db:ad:7b:8a:40:f2:74:c3: a4:e4:0b:26:58:3c:f2:c5:a4:54:4b:10:0a:49:e7:db:ad:e7: ba:76:d3:62:3e:8c:e6:72:bd:a5:76:c8:f2:af:d9:d0:af:be: b9:5d:b0:ba:8f:bb:d8:10:f4:9b:aa:b5:cb:6f:27:56:cf:03: f1:16:ab:1d:27:82:e1:a2:ef:7d:de:23:1b:ea:da:6a:d9:9c: 02:cd:f6:e1:1e:1c:20:79:5d:b8:61:a2:24:ee:fa:94:e9:13: ce:36:fc:8d:0a:f6:b4:80:93:0d:d2:00:18:31:e3:d2:65:47: 89:31:86:9b:31:00:c5:75:ca:f1:10:dc:fc:ea:22:78:0a:fb: 2b:7b:b9:93:e2:0b:17:7b:87:af:b0:43:e5:9b:91:10:0c:44: eb:1d:e9:7a:c1:ed:39:99:fc:23:a0:bd:82:cc:28:79:b6:60: e1:8a:d5:dc:62:41:38:d0:86:6c:c5:e1:55:b9:f5:08:41:e7: 1c:23:99:99:07:72:47:f5:1d:76:69:79:31:31:73:e1:79:cc: 1b:e8:cf:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKzDbzdjIKIlL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk NGE3ZmRkNTgtZWRiNC00OWE0LTk3MDAtYmNlOTQ4MDM5ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXLFmvQM96ZMwrZ8VPeIimW6sZPnh2ZqDaKd ej67yBqAs96Db/zs1NWukGlm5cCPeaR5wqtu3L6OF+USTqkBb6zA5Y3Efn/vxXLe C73fUpn32N4EdQvNmWS+VjQ8+1ldS98e292DxYBUYFXyczy8jAlk7m0v+axxNc8k YpxgivSPKbxLke0TAEBIWUpt3v/tHXpxhHQnFKytfAzjjRvRH1WoT4YnPjbNMrRb RwGJC3/A0cUWWK9caTgXauYRn+T6gahahQAR2BN2nNBtfyFinoZGR090GsxowfDF JM4B9E1Jq3YDN265D2uSxBnPNlrBoiBHzhitN/RFAfA7ylFEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPyuWgGiMSyjFMGwb73hPXWoQRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZTQwYTFiYmQtMzdkMy0z MWZhLTk1YjMtMDBjZTNkZDU3OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxBosz5ZZymitnYq2tdYRXyIcHa8eopouNQwTT4q34WdJw07/WTr6Ho IsCbItnbrXuKQPJ0w6TkCyZYPPLFpFRLEApJ59ut57p202I+jOZyvaV2yPKv2dCv vrldsLqPu9gQ9JuqtctvJ1bPA/EWqx0nguGi733eIxvq2mrZnALN9uEeHCB5Xbhh oiTu+pTpE842/I0K9rSAkw3SABgx49JlR4kxhpsxAMV1yvEQ3PzqIngK+yt7uZPi Cxd7h6+wQ+WbkRAMROsd6XrB7TmZ/COgvYLMKHm2YOGK1dxiQTjQhmzF4VW59QhB 5xwjmZkHckf1HXZpeTExc+F5zBvoz8M= -----END CERTIFICATE-----Generated at Sat May 10 09:34:28 2025 by rpki-client