$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa File: 814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa (raw, json) Hash identifier: s6cNtEUz9LjUihKwF2D35rDAudObnllB17gkQ8iZF0I= Subject key identifier: 28:0E:21:3B:87:EE:DC:A4:08:DB:6F:18:40:79:BC:43:4D:D4:4E:C7 Certificate issuer: /CN=a4aa20f3-940b-4178-8460-6af30ac20ab8 Certificate serial: 010D0C9F43285849C36F752BB41DC794F2D99E00 Authority key identifier: 8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 18908 IP address blocks: 198.175.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:75:2b:b4:1d:c7:94:f2:d9:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4aa20f3-940b-4178-8460-6af30ac20ab8 Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=23202be7-ae87-425e-816f-b4f2841e71a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:b7:31:1c:d2:2a:78:0d:28:81:dc:04:9d: 66:1c:8e:6b:80:61:18:06:ef:b3:57:e5:2d:65:fb: 58:3a:df:14:a6:85:45:51:c7:8a:80:8a:ef:f6:23: ac:86:ea:f0:8a:e1:0b:61:82:2a:15:29:71:9a:89: e9:24:6e:62:29:fb:2f:25:41:3f:6e:8d:8d:50:e3: 79:a3:28:f9:bb:26:a1:50:cb:22:0f:5b:84:67:c1: e9:ba:9a:91:f4:c4:25:4d:12:71:16:5d:85:f5:71: 49:84:d1:58:72:c6:1a:37:c2:a7:b7:c2:c3:06:e1: 0b:f9:c8:e9:5f:27:3b:2b:95:4a:7f:aa:6f:c4:15: 81:27:70:8e:91:bc:e0:73:be:59:43:1c:55:01:57: a8:5f:7e:a9:66:26:6b:d5:18:d5:70:94:c3:86:d0: f7:c1:d9:1a:0c:72:80:56:37:9a:9c:c3:82:4f:5b: 83:e5:65:8b:8a:ef:84:89:4d:a4:bf:a3:12:18:1f: 1a:bc:91:ea:6e:9d:09:7d:96:58:06:23:85:28:f7: ae:32:a3:3c:f3:43:ad:58:ed:68:5d:3c:7e:ae:e3: 66:df:f8:16:e0:09:6c:9a:fc:20:b1:63:98:6e:e0: dd:fe:47:5a:4c:71:3d:20:71:d2:d6:3e:ad:9c:3e: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:21:3B:87:EE:DC:A4:08:DB:6F:18:40:79:BC:43:4D:D4:4E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl X509v3 Authority Key Identifier: keyid:8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer sbgp-ipAddrBlock: critical IPv4: 198.175.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fa:da:1b:dc:e0:17:f5:0f:11:a6:ea:33:e2:07:08:f3:d8: 53:e4:5f:9b:df:4a:55:a7:27:76:e1:23:a3:01:a1:79:48:d6: f8:d2:c8:4e:a7:8a:eb:f7:2e:9a:b0:1a:8d:31:3c:e1:98:a3: de:fb:f5:6c:d7:d5:88:a1:b4:cb:9d:82:d7:66:34:b3:ca:f6: 89:9c:5f:16:3e:b4:a1:f7:6f:8b:13:1d:e4:4a:f7:9d:9a:1d: 2b:94:93:4d:e7:65:a3:37:c3:cf:86:b8:da:66:cb:f5:c3:fd: 47:1f:76:3d:bc:3f:ac:91:70:bf:33:96:c8:a4:79:80:e8:be: 2d:ec:e8:41:91:49:f1:dc:b9:90:e4:94:b1:bc:88:1a:bb:41: c5:27:be:c5:fc:52:52:5e:11:85:75:33:00:cc:af:6f:00:0f: 51:fa:ff:82:18:07:74:13:4c:f0:97:aa:8c:95:a9:9e:29:3f: 8d:8f:7c:86:7e:b2:14:59:79:82:03:18:2b:92:69:53:1f:6d: 93:3d:d8:4a:48:1c:7c:e1:49:e7:e0:da:ff:43:40:8b:da:c0: 1a:d5:69:f1:66:c8:a1:59:78:c1:83:4a:94:bb:3f:6a:ce:09: cd:f9:6d:b6:33:90:84:22:d3:35:1e:3a:6b:62:f1:98:74:df: 59:c5:0a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb3UrtB3HlPLZngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRhYTIwZjMtOTQwYi00MTc4LTg0NjAtNmFmMzBhYzIw YWI4MB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk MjMyMDJiZTctYWU4Ny00MjVlLTgxNmYtYjRmMjg0MWU3MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytq3MRzSKngNKIHcBJ1mHI5rgGEYBu+zV+Ut ZftYOt8UpoVFUceKgIrv9iOshurwiuELYYIqFSlxmonpJG5iKfsvJUE/bo2NUON5 oyj5uyahUMsiD1uEZ8HpupqR9MQlTRJxFl2F9XFJhNFYcsYaN8Knt8LDBuEL+cjp Xyc7K5VKf6pvxBWBJ3COkbzgc75ZQxxVAVeoX36pZiZr1RjVcJTDhtD3wdkaDHKA VjeanMOCT1uD5WWLiu+EiU2kv6MSGB8avJHqbp0JfZZYBiOFKPeuMqM880OtWO1o XTx+ruNm3/gW4AlsmvwgsWOYbuDd/kdaTHE9IHHS1j6tnD6C1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgOITuH7tykCNtvGEB5vENN1E7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGFh MjBmMy05NDBiLTQxNzgtODQ2MC02YWYzMGFjMjBhYjgvODE0ZGNiZjItMTI1MS0z ZDcxLWEzZmUtNGYzMzQ3NzY0Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRhYTIwZjMtOTQwYi00MTc4LTg0 NjAtNmFmMzBhYzIwYWI4L2E0YWEyMGYzLTk0MGItNDE3OC04NDYwLTZhZjMwYWMy MGFiOC5jcmwwHwYDVR0jBBgwFoAUiumv2n4ikIrU0JM2fY/NmEqvwmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGFhMjBmMy05NDBiLTQxNzgtODQ2MC02YWYz MGFjMjBhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxq/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz62hvc4Bf1DxGm6jPiBwjz2FPkX5vfSlWnJ3bhI6MBoXlI1vjSyE6n iuv3LpqwGo0xPOGYo9779WzX1YihtMudgtdmNLPK9omcXxY+tKH3b4sTHeRK952a HSuUk03nZaM3w8+GuNpmy/XD/Ucfdj28P6yRcL8zlsikeYDovi3s6EGRSfHcuZDk lLG8iBq7QcUnvsX8UlJeEYV1MwDMr28AD1H6/4IYB3QTTPCXqoyVqZ4pP42PfIZ+ shRZeYIDGCuSaVMfbZM92EpIHHzhSefg2v9DQIvawBrVafFmyKFZeMGDSpS7P2rO Cc35bbYzkIQi0zUeOmti8Zh031nFCkw= -----END CERTIFICATE-----Generated at Sat May 10 14:41:39 2025 by rpki-client