$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa File: db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa (raw, json) Hash identifier: Hlv8EbwEMZsBjzXMatd+w7pKPyJvfhazmw17cwDmJoA= Subject key identifier: 85:99:63:D3:F3:98:88:17:EA:04:40:DE:E8:C6:B6:4F:8F:00:36:E4 Certificate issuer: /CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74 Certificate serial: 010D0C9F43285849B14A08A8EA4CE974523B4580 Authority key identifier: 68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 8075 IP address blocks: 198.245.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:08:a8:ea:4c:e9:74:52:3b:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c8f3554f-c4e1-44a3-99f9-8cc1b1f39bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:73:f1:9c:09:66:99:aa:f1:b1:ec:cd:30: 19:94:ed:e6:de:9d:44:8f:89:b0:bf:dc:40:e2:ed: 57:89:da:5e:3b:92:4b:f8:cb:f4:b8:64:ac:09:51: ef:55:5a:f2:47:f2:26:1c:91:05:86:59:14:60:2f: 77:12:7a:b2:1b:36:ca:f1:5a:56:a0:37:10:4a:23: 32:9d:8a:fa:74:f1:6a:55:d3:33:04:a2:2e:34:72: ce:77:b9:ee:3b:80:99:66:d8:c9:f1:83:58:fc:f8: e9:87:89:f6:ae:15:28:50:dd:03:32:eb:52:e2:59: 7e:ce:31:60:e8:6a:26:29:bf:f8:1a:77:5b:2f:13: 81:95:9d:12:86:06:a2:02:f1:aa:6d:f6:85:85:6a: ba:aa:72:f6:5e:47:f3:96:70:20:57:a5:9c:17:04: 20:c9:54:4b:3d:18:33:35:e3:07:8f:12:84:1d:ea: 81:3a:7c:6f:96:1c:26:b6:fa:d9:4e:b5:87:7e:9b: 40:c0:ac:47:a3:3a:0f:a1:5f:e0:b4:2b:07:cc:94: 00:44:a3:1d:df:4b:4e:0f:dd:7e:12:cb:ff:54:8a: 0d:6d:21:00:98:3a:c3:84:fa:c1:68:49:3f:7e:9f: fb:01:e9:82:09:06:a8:ce:1a:7e:e6:82:7e:f4:51: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:99:63:D3:F3:98:88:17:EA:04:40:DE:E8:C6:B6:4F:8F:00:36:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl X509v3 Authority Key Identifier: keyid:68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer sbgp-ipAddrBlock: critical IPv4: 198.245.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:08:c1:7a:a5:ae:64:39:06:22:85:16:f7:e9:32:95:b6:c3: 54:74:bb:76:22:63:83:dc:66:6c:6b:89:49:c3:84:d6:83:a6: e7:49:1e:39:2e:22:8b:c3:49:87:9d:f5:00:76:d5:b0:79:9a: c2:54:df:07:69:17:85:17:66:27:50:e4:8a:ec:03:4a:5a:f7: 70:6a:2f:1c:b5:c1:7e:1e:58:11:c8:e5:ea:b4:58:05:45:5e: e8:70:5a:04:67:95:e8:be:3b:cf:71:45:a7:dd:e5:5a:99:26: 71:a3:26:cb:e4:77:38:75:e9:b1:9b:4d:ba:49:15:df:85:c9: 4a:ec:81:78:b6:45:8d:f6:fe:cd:df:07:90:63:80:be:e3:61: 66:e6:63:f7:8e:3b:af:b5:07:8b:20:34:da:70:05:ce:08:83: 59:a7:46:14:3d:19:74:b7:16:a0:de:3a:6b:4f:cc:fe:9e:45: ec:55:3d:4e:89:44:fc:76:b1:ca:a2:42:08:0a:a7:7c:54:5e: 81:ed:7b:01:d2:1d:2f:04:b3:02:6e:4e:a8:60:6d:34:c8:d7: 8c:5d:da:f3:e5:72:0f:24:6f:db:8d:4b:7a:cc:52:81:14:f3: e8:42:1d:8a:17:26:45:f8:74:b8:7d:8e:ab:79:8d:af:77:78: 35:22:01:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgio6kzpdFI7RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYWY3Y2ItYmM4Mi00YTc4LWJhMGYtMmJhODhiNmQ5 Zjc0MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzhmMzU1NGYtYzRlMS00NGEzLTk5ZjktOGNjMWIxZjM5YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx5z8ZwJZpmq8bHszTAZlO3m3p1Ej4mwv9xA 4u1XidpeO5JL+Mv0uGSsCVHvVVryR/ImHJEFhlkUYC93EnqyGzbK8VpWoDcQSiMy nYr6dPFqVdMzBKIuNHLOd7nuO4CZZtjJ8YNY/Pjph4n2rhUoUN0DMutS4ll+zjFg 6GomKb/4GndbLxOBlZ0ShgaiAvGqbfaFhWq6qnL2XkfzlnAgV6WcFwQgyVRLPRgz NeMHjxKEHeqBOnxvlhwmtvrZTrWHfptAwKxHozoPoV/gtCsHzJQARKMd30tOD91+ Esv/VIoNbSEAmDrDhPrBaEk/fp/7AemCCQaozhp+5oJ+9FGJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWZY9PzmIgX6gRA3ujGtk+PADbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFh ZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4OGI2ZDlmNzQvZGIzMzBjMzEtMWI2YS0z MjUxLTliNzAtMGNlYjViZThjOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODExYWY3Y2ItYmM4Mi00YTc4LWJh MGYtMmJhODhiNmQ5Zjc0LzgxMWFmN2NiLWJjODItNGE3OC1iYTBmLTJiYTg4YjZk OWY3NC5jcmwwHwYDVR0jBBgwFoAUaBAzo6bjFx1WmzKvg7cn1rax/18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFhZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4 OGI2ZDlmNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUIwXqlrmQ5BiKFFvfpMpW2w1R0u3YiY4PcZmxriUnDhNaDpudJHjku IovDSYed9QB21bB5msJU3wdpF4UXZidQ5IrsA0pa93BqLxy1wX4eWBHI5eq0WAVF XuhwWgRnlei+O89xRafd5VqZJnGjJsvkdzh16bGbTbpJFd+FyUrsgXi2RY32/s3f B5BjgL7jYWbmY/eOO6+1B4sgNNpwBc4Ig1mnRhQ9GXS3FqDeOmtPzP6eRexVPU6J RPx2scqiQggKp3xUXoHtewHSHS8EswJuTqhgbTTI14xd2vPlcg8kb9uNS3rMUoEU 8+hCHYoXJkX4dLh9jqt5ja93eDUiAe8= -----END CERTIFICATE-----Generated at Mon May 5 14:52:02 2025 by rpki-client