$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa File: dfec57e8-4be0-3a83-b962-789595b0a605.roa (raw, json) Hash identifier: CynQuHA9o50LKNDJ6WQ8utJLt1iMmoOPFtivFyeYeRk= Subject key identifier: DD:7B:5A:E1:E5:E9:5D:1C:F7:F1:6B:CD:9B:D6:1E:10:B9:4E:FB:92 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F43285849B149EAA4A4DA835AEE978800 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 22987 IP address blocks: 198.52.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ea:a4:a4:da:83:5a:ee:97:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=07bf3698-3054-43bf-8abd-32bd83a11570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:41:02:a9:fb:d8:5c:e6:ed:4a:51:a8:0a: e0:c3:b0:37:65:86:fb:3c:4f:3c:eb:aa:29:f3:3e: 05:d8:c7:0c:46:b0:78:02:56:2b:3f:9e:b6:a2:69: 63:f5:7d:d4:2b:0b:49:ac:8a:39:5a:32:c2:4c:7a: 45:50:f0:94:1b:e3:d0:ce:cb:34:73:ac:36:ed:e7: 14:aa:b9:1f:2b:59:ce:22:65:15:a0:f7:2a:d3:cc: 5a:c7:26:16:c6:e4:f3:03:71:05:3c:2f:48:88:1e: fd:47:e2:a1:13:92:60:c1:db:6b:e5:0c:4b:90:60: 88:a3:90:a4:c8:d6:2b:2d:f2:a6:98:e0:66:96:ce: a9:71:b0:7d:7b:aa:6d:24:56:de:17:56:1d:47:d7: b2:09:8e:14:18:5b:95:79:26:e2:56:8e:53:92:67: 25:91:c6:d5:7e:ca:b2:0a:64:99:49:bc:9d:62:6c: d3:09:b7:38:f7:a1:cb:39:48:c4:c1:a8:65:ff:16: 93:00:ad:c6:d4:53:eb:50:50:2b:e4:41:04:69:a3: 49:5e:ce:99:a8:bb:06:70:b9:6e:6f:ca:d6:64:13: 7c:83:31:53:b1:e1:69:cb:b1:a9:e7:5a:1d:d1:2d: 2e:09:79:96:8c:dd:eb:4b:8e:bf:7e:07:8c:3e:e4: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7B:5A:E1:E5:E9:5D:1C:F7:F1:6B:CD:9B:D6:1E:10:B9:4E:FB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 198.52.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e1:81:7c:c5:ae:1e:92:93:51:80:30:e4:af:e2:c7:e0:f1: 9a:12:8e:db:e7:d2:55:d3:27:df:4a:f5:d1:41:8b:eb:ed:b5: b9:ee:0c:49:67:98:8e:c6:55:9a:e8:a2:48:dc:a3:e0:e5:2f: 3d:6d:e7:0f:54:43:75:4e:9f:1d:09:01:71:b4:c2:8c:e6:4b: b5:2d:fa:75:cf:3a:76:24:43:4f:d2:13:33:d6:d6:c1:6d:9c: 6c:b4:11:ab:2e:c6:d9:fc:10:28:d4:ba:d5:9c:14:f7:4f:5a: fb:ad:36:c3:01:69:3e:0c:08:19:28:07:1a:09:e3:a2:6a:b9: 9a:4f:b2:6f:4e:fd:e1:49:b1:3a:6d:ec:92:dc:dc:15:7e:9b: ed:ca:a3:69:7b:d2:10:48:4d:2b:2c:1e:c6:ee:96:07:4e:90: 0a:24:dc:f0:4a:7f:6c:e3:20:d2:27:94:ac:ae:e2:d3:42:82: 81:77:8b:8b:e0:6a:32:3a:77:fd:b8:8e:59:18:db:aa:66:2f: 88:f9:04:08:66:1d:31:c0:a3:84:b9:e0:39:0e:d1:54:6d:0c: 7f:c8:aa:e3:00:82:4a:76:37:86:92:ba:aa:87:cd:97:da:01: 00:f9:8b:b8:38:79:6f:8d:77:15:4c:d7:40:aa:18:99:f9:b5: 80:20:62:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSeqkpNqDWu6XiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDdiZjM2OTgtMzA1NC00M2JmLThhYmQtMzJiZDgzYTExNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifBBAqn72Fzm7UpRqArgw7A3ZYb7PE8866op 8z4F2McMRrB4AlYrP562omlj9X3UKwtJrIo5WjLCTHpFUPCUG+PQzss0c6w27ecU qrkfK1nOImUVoPcq08xaxyYWxuTzA3EFPC9IiB79R+KhE5Jgwdtr5QxLkGCIo5Ck yNYrLfKmmOBmls6pcbB9e6ptJFbeF1YdR9eyCY4UGFuVeSbiVo5TkmclkcbVfsqy CmSZSbydYmzTCbc496HLOUjEwahl/xaTAK3G1FPrUFAr5EEEaaNJXs6ZqLsGcLlu b8rWZBN8gzFTseFpy7Gp51od0S0uCXmWjN3rS46/fgeMPuTivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN17WuHl6V0c9/FrzZvWHhC5TvuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZGZlYzU3ZTgtNGJlMC0z YTgzLWI5NjItNzg5NTk1YjBhNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDhgXzFrh6Sk1GAMOSv4sfg8ZoSjtvn0lXTJ99K9dFBi+vttbnuDEln mI7GVZrookjco+DlLz1t5w9UQ3VOnx0JAXG0wozmS7Ut+nXPOnYkQ0/SEzPW1sFt nGy0Easuxtn8ECjUutWcFPdPWvutNsMBaT4MCBkoBxoJ46JquZpPsm9O/eFJsTpt 7JLc3BV+m+3Ko2l70hBITSssHsbulgdOkAok3PBKf2zjINInlKyu4tNCgoF3i4vg ajI6d/24jlkY26pmL4j5BAhmHTHAo4S54DkO0VRtDH/IquMAgkp2N4aSuqqHzZfa AQD5i7g4eW+NdxVM10CqGJn5tYAgYgE= -----END CERTIFICATE-----Generated at Thu May 8 21:05:55 2025 by rpki-client