$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa File: ed3a5a88-86fa-36da-a653-e12390ec8538.roa (raw, json) Hash identifier: nRVfGBtBKWT9KBC2xLdcRBMvqAzKxFhZ1TByEtuaTCo= Subject key identifier: 61:67:A3:7A:25:D4:B4:58:0F:DD:F4:53:26:11:6A:BF:99:79:8B:7E Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F432858492A22B36B4FD0E825155A2F80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa Signing time: Wed 12 Mar 2025 15:07:42 +0000 ROA not before: Wed 12 Mar 2025 15:07:42 +0000 ROA not after: Tue 10 Jun 2025 15:07:42 +0000 asID: 64267 IP address blocks: 198.1.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:22:b3:6b:4f:d0:e8:25:15:5a:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 12 15:07:42 2025 GMT Not After : Jun 10 15:07:42 2025 GMT Subject: CN=9e4222a4-cd00-4b64-9c64-69f69457550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:d2:d7:1e:9e:b9:eb:37:24:a7:6f:39:07: 59:d2:86:63:6b:9c:e7:ee:d6:01:81:a5:e0:fb:cf: 5a:80:00:70:52:e3:06:0d:f1:bf:00:02:8c:68:72: 56:7f:f8:a7:b3:bb:08:c4:42:57:a4:bf:f5:29:db: 0e:81:c7:43:1f:a2:06:7c:62:f2:0d:79:c2:66:a6: cc:ff:9d:4f:64:4b:0d:f7:51:40:fd:6d:f2:56:df: a0:c8:8d:38:54:89:53:93:a4:ec:77:cb:d7:11:61: 8f:20:63:ef:f8:cc:6e:54:32:45:4f:6d:c9:a9:31: 12:73:dd:25:eb:f3:a6:ed:05:75:06:b2:d0:d4:c1: ba:bd:10:5a:34:2d:d0:11:6b:3b:e6:7c:81:c5:53: 67:de:8b:fd:fb:68:2f:5e:59:66:32:58:00:3f:00: 63:90:3d:49:4a:17:ec:c8:fc:55:d2:0c:4a:25:51: 97:2e:60:f5:ee:ff:5a:bd:ac:a9:bb:96:89:f7:01: bd:2b:77:67:a7:2d:14:57:83:40:10:0d:3e:03:be: d8:5b:16:47:34:dc:ee:84:97:7d:50:38:c5:73:73: 61:d2:14:d8:a6:4e:94:43:c6:29:cb:a8:79:ad:6c: 0b:43:d1:74:b5:a2:5b:fe:fb:9f:cc:48:b6:2a:58: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:A3:7A:25:D4:B4:58:0F:DD:F4:53:26:11:6A:BF:99:79:8B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:31:93:f0:81:76:c2:7c:a1:15:a0:ab:30:69:c7:99:95:bb: c3:58:4f:ad:1a:a3:5c:fc:0c:40:e0:39:a5:af:66:03:b3:4e: e7:e2:de:aa:85:4a:8b:27:33:cc:95:9b:d7:9d:15:99:56:61: 3f:05:8f:97:a3:83:c7:4a:da:45:19:00:ca:91:65:95:44:18: 7b:02:79:40:f4:33:82:40:9a:83:9b:8a:9e:5c:e8:fb:ce:89: 39:2d:09:50:01:5c:9c:6b:ad:a8:30:0a:5c:eb:e5:78:7b:2e: d2:28:b4:d7:9b:10:f1:2c:5c:ec:1a:c8:24:c5:a1:53:65:ac: b0:7d:39:b1:c6:01:a7:d7:24:01:6c:61:20:40:69:36:1d:d0: 76:0b:4f:13:49:24:48:cd:92:3e:1b:ee:33:b6:62:48:e5:b5: f5:e5:1b:e2:71:cb:d0:87:7e:79:3a:0e:94:73:14:e3:3a:ca: a5:87:0d:0c:5b:47:4c:97:fe:ce:52:3a:74:be:8e:86:51:0b: 69:ba:5c:80:c9:9b:af:ce:81:bd:38:7a:0b:5c:e9:6d:14:4e: 2d:21:ea:7e:73:56:71:18:d7:0f:28:b6:cb:4e:c1:b3:4f:ff: bd:f2:6e:5e:99:20:45:ff:b1:45:bc:bc:70:17:4f:0b:e6:6b: 50:a0:03:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkqIrNrT9DoJRVaL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDMxMjE1MDc0MloXDTI1MDYxMDE1MDc0MlowLzEtMCsGA1UEAxMk OWU0MjIyYTQtY2QwMC00YjY0LTljNjQtNjlmNjk0NTc1NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5bS1x6eues3JKdvOQdZ0oZja5zn7tYBgaXg +89agABwUuMGDfG/AAKMaHJWf/ins7sIxEJXpL/1KdsOgcdDH6IGfGLyDXnCZqbM /51PZEsN91FA/W3yVt+gyI04VIlTk6Tsd8vXEWGPIGPv+MxuVDJFT23JqTESc90l 6/Om7QV1BrLQ1MG6vRBaNC3QEWs75nyBxVNn3ov9+2gvXllmMlgAPwBjkD1JShfs yPxV0gxKJVGXLmD17v9avaypu5aJ9wG9K3dnpy0UV4NAEA0+A77YWxZHNNzuhJd9 UDjFc3Nh0hTYpk6UQ8Ypy6h5rWwLQ9F0taJb/vufzEi2KliacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFno3ol1LRYD930UyYRar+ZeYt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWQzYTVhODgtODZmYS0z NmRhLWE2NTMtZTEyMzkwZWM4NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUxk/CBdsJ8oRWgqzBpx5mVu8NYT60ao1z8DEDgOaWvZgOzTufi3qqF SosnM8yVm9edFZlWYT8Fj5ejg8dK2kUZAMqRZZVEGHsCeUD0M4JAmoObip5c6PvO iTktCVABXJxrragwClzr5Xh7LtIotNebEPEsXOwayCTFoVNlrLB9ObHGAafXJAFs YSBAaTYd0HYLTxNJJEjNkj4b7jO2YkjltfXlG+Jxy9CHfnk6DpRzFOM6yqWHDQxb R0yX/s5SOnS+joZRC2m6XIDJm6/Ogb04egtc6W0UTi0h6n5zVnEY1w8otstOwbNP /73ybl6ZIEX/sUW8vHAXTwvma1CgA1U= -----END CERTIFICATE-----Generated at Sat May 10 13:23:20 2025 by rpki-client