$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8f419f66-9008-33b9-8242-4c8980233d9c.roa File: 8f419f66-9008-33b9-8242-4c8980233d9c.roa (raw, json) Hash identifier: QTfr0s48w//I7ekHAmm4FYY00Vsxh+zVAKvGggT2p04= Subject key identifier: B4:0D:54:69:3A:13:29:ED:B0:8C:E4:B1:0D:86:51:BD:DD:AD:86:8C Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F43285849AFF3055ED5949AD77717A980 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8f419f66-9008-33b9-8242-4c8980233d9c.roa Signing time: Tue 29 Apr 2025 13:29:57 +0000 ROA not before: Tue 29 Apr 2025 13:29:57 +0000 ROA not after: Mon 28 Jul 2025 13:29:57 +0000 asID: 151964 IP address blocks: 198.1.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:f3:05:5e:d5:94:9a:d7:77:17:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Apr 29 13:29:57 2025 GMT Not After : Jul 28 13:29:57 2025 GMT Subject: CN=0e1a10dc-ae31-4957-aba2-c5e8115dff8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:e0:b7:2f:33:98:db:09:b4:25:a3:2c:c6: 5c:eb:e5:ff:5a:4f:76:a0:24:03:81:3e:67:76:1a: 0d:65:ae:63:3a:23:1b:9e:c9:8f:78:5d:4d:d9:e2: 16:65:ec:94:ce:97:6d:b8:a1:b4:1a:61:24:98:e5: 38:40:c5:ae:b1:57:06:38:2d:ce:03:ea:9c:99:e5: 8d:52:d5:7f:9c:27:ea:e2:ca:a7:9a:53:b4:35:53: f4:d5:bb:d3:ec:c3:c9:08:45:af:89:7f:73:90:df: 97:e2:31:52:23:50:4b:cc:0a:e3:b0:11:1c:14:9a: 85:32:0e:0f:fc:be:3c:2e:ea:69:5f:b1:bc:7b:5f: 98:6d:3f:ca:8d:3f:c9:98:b6:c5:fc:74:31:39:cc: e3:a9:22:c8:04:b4:96:a5:4e:92:e5:c9:63:73:9b: 96:c1:93:5c:68:8c:03:01:bc:b5:a3:3d:cf:5b:a1: 6d:f7:cd:ac:8c:21:60:34:f7:b4:19:ad:1d:31:06: 69:e8:16:d8:59:2d:81:db:0f:9e:ab:2c:53:51:f2: 1a:a8:a3:de:e3:d0:b7:ac:54:c6:00:f3:87:4b:7e: 5c:f7:09:f4:20:f1:03:e0:0a:a0:fe:e7:09:43:cb: 55:38:b5:be:d6:ac:e9:26:d9:d7:4f:95:55:31:f7: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:54:69:3A:13:29:ED:B0:8C:E4:B1:0D:86:51:BD:DD:AD:86:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8f419f66-9008-33b9-8242-4c8980233d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c0:09:61:b8:59:31:d7:38:77:e2:27:41:2f:e6:59:e5:dd: bd:ca:f4:6c:92:88:75:17:eb:a6:a5:b0:e9:9d:47:85:04:cb: 01:61:cd:7e:da:ff:ba:bb:7c:1c:96:97:e5:51:f2:6a:b4:eb: ec:d2:7f:1d:a3:f1:ea:1e:97:a2:3b:b1:7e:eb:3d:b5:6c:e2: aa:65:71:e7:b5:b2:78:b7:fa:34:05:a4:53:2b:45:7a:13:e0: f8:6b:95:56:50:54:b9:6a:d7:e2:b1:d3:67:03:0f:c4:d7:dc: 14:63:fd:e5:29:a7:28:67:52:97:1a:34:37:0e:1e:72:34:6b: 6b:c4:38:8f:1f:ec:68:98:6d:cd:2c:e8:18:b5:31:a5:51:99: b3:98:82:f9:19:b3:9f:49:2f:ab:54:72:39:df:ce:aa:fd:64: 70:f9:00:76:80:c8:23:ee:77:36:5f:0b:fb:60:62:49:f6:21: be:b1:f4:d3:e2:37:a6:86:eb:4c:0e:f1:98:87:2d:a3:90:58: 2f:57:aa:75:f8:3c:97:47:ab:6f:f4:d2:08:8f:5e:26:5a:3c: 38:96:19:a8:7e:41:70:15:cc:97:ec:67:27:40:30:60:ae:20: 92:a0:4d:b2:44:a0:ad:ad:c5:27:63:d3:26:2f:4c:ba:d7:d9: 70:e4:5f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv8wVe1ZSa13cXqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDQyOTEzMjk1N1oXDTI1MDcyODEzMjk1N1owLzEtMCsGA1UEAxMk MGUxYTEwZGMtYWUzMS00OTU3LWFiYTItYzVlODExNWRmZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPLgty8zmNsJtCWjLMZc6+X/Wk92oCQDgT5n dhoNZa5jOiMbnsmPeF1N2eIWZeyUzpdtuKG0GmEkmOU4QMWusVcGOC3OA+qcmeWN UtV/nCfq4sqnmlO0NVP01bvT7MPJCEWviX9zkN+X4jFSI1BLzArjsBEcFJqFMg4P /L48LuppX7G8e1+YbT/KjT/JmLbF/HQxOczjqSLIBLSWpU6S5cljc5uWwZNcaIwD Aby1oz3PW6Ft982sjCFgNPe0Ga0dMQZp6BbYWS2B2w+eqyxTUfIaqKPe49C3rFTG APOHS35c9wn0IPED4Aqg/ucJQ8tVOLW+1qzpJtnXT5VVMffgOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQNVGk6EyntsIzksQ2GUb3drYaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOGY0MTlmNjYtOTAwOC0z M2I5LTgyNDItNGM4OTgwMjMzZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbACWG4WTHXOHfiJ0Ev5lnl3b3K9GySiHUX66alsOmdR4UEywFhzX7a /7q7fByWl+VR8mq06+zSfx2j8eoel6I7sX7rPbVs4qplcee1sni3+jQFpFMrRXoT 4PhrlVZQVLlq1+Kx02cDD8TX3BRj/eUppyhnUpcaNDcOHnI0a2vEOI8f7GiYbc0s 6Bi1MaVRmbOYgvkZs59JL6tUcjnfzqr9ZHD5AHaAyCPudzZfC/tgYkn2Ib6x9NPi N6aG60wO8ZiHLaOQWC9XqnX4PJdHq2/00giPXiZaPDiWGah+QXAVzJfsZydAMGCu IJKgTbJEoK2txSdj0yYvTLrX2XDkX6g= -----END CERTIFICATE-----Generated at Sat May 10 10:22:59 2025 by rpki-client