$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa File: 3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa (raw, json) Hash identifier: R4pdhmQrYXrjpozHNfyLx5emD3oclrLOhFneORHU38I= Subject key identifier: 4B:47:E4:D2:E8:D4:94:DC:B8:56:EE:DE:AC:4A:1F:FC:BB:FD:03:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497DA46EB6BF73BEB951F20EA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 63949 IP address blocks: 198.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6e:b6:bf:73:be:b9:51:f2:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=883c1ae1-78e7-4fcc-9a40-a747f95e7191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:c0:69:49:35:05:b1:96:7d:5e:24:7c:33: e0:e2:10:68:30:22:ac:ed:3c:5f:66:ff:35:06:a9: a2:7e:85:01:d2:f1:b5:c3:64:e6:7b:50:a1:39:eb: 6b:d9:9c:ae:ae:a5:92:d5:ee:2c:a5:03:16:a9:eb: 7f:04:3a:03:2d:0a:86:db:98:9b:f0:8c:b4:cd:99: 4f:18:61:4f:00:a0:44:02:6c:6f:37:8b:ce:f4:c9: 3e:bf:07:bb:c9:c9:ce:f3:53:01:3d:20:1c:11:1e: b4:18:13:7f:1c:b0:f5:1f:ff:78:9b:22:80:33:37: d2:4e:af:47:ce:a2:04:e9:75:da:1a:bb:5f:b2:70: b0:db:a7:8d:e0:22:28:5a:bc:83:d2:39:fb:ec:7f: df:39:9d:18:4e:6f:d4:3d:59:13:5d:9c:f5:0b:9e: b5:b1:af:77:48:1b:0a:2b:dd:16:22:94:1e:b2:33: 1f:00:d4:87:6e:81:e0:b2:cb:c4:de:e0:28:29:4c: fe:1b:e8:9e:04:14:09:d2:40:40:66:bd:ee:50:28: 42:f6:81:d3:f6:d1:ba:38:7f:82:2a:33:43:ad:51: 09:1b:b4:be:0a:17:ae:72:f0:64:4f:97:44:49:a5: 14:d1:a8:bc:36:d0:c6:fa:ad:84:42:13:75:82:72: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:47:E4:D2:E8:D4:94:DC:B8:56:EE:DE:AC:4A:1F:FC:BB:FD:03:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3528db7c-413b-3b6e-b6db-fa5ca7845f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 198.74.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a1:c8:46:c7:90:d9:c2:28:6f:31:5e:dd:0a:11:8d:02:7c: 4f:fb:64:7d:9b:9b:93:88:21:65:39:e2:2f:97:03:02:32:e0: 2c:ef:b8:e6:99:60:e7:ee:a6:07:bb:e3:68:9b:82:de:17:6c: 1a:b8:b1:34:04:25:c5:8a:e3:3f:59:6f:a8:e4:f5:0e:c5:2d: 7b:d0:a1:bf:bd:74:01:e1:82:4e:0d:99:e7:ec:f0:a0:9b:11: 7b:05:3d:79:e9:0c:8d:99:ad:96:96:31:9f:23:be:8a:73:df: 46:16:04:62:83:d0:97:fe:40:2f:47:d1:77:19:b3:5c:e6:b5: f6:fb:b2:d7:22:6a:16:e5:9f:7e:e3:31:14:db:2b:d9:cd:c3: 35:ec:c7:03:01:e9:47:02:da:82:8e:cb:26:6a:d0:54:07:10: c0:a6:6e:e3:42:09:dd:35:41:88:cb:2f:27:89:35:d9:4c:73: 7a:d8:ad:20:0f:af:8e:dd:e7:dc:16:c6:80:e7:b7:bd:c6:9d: 05:a7:84:2b:c0:37:c6:69:4b:29:94:4c:17:6a:51:d2:d5:89: 52:84:1c:30:bc:24:cf:8d:f9:be:1f:9e:2b:15:f9:ef:74:76: b6:4f:77:77:2f:f3:5e:3b:27:a0:cf:21:b7:26:dc:51:71:e5: 74:94:0b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pG62v3O+uVHyDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODgzYzFhZTEtNzhlNy00ZmNjLTlhNDAtYTc0N2Y5NWU3MTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1rAaUk1BbGWfV4kfDPg4hBoMCKs7TxfZv81 BqmifoUB0vG1w2Tme1ChOetr2ZyurqWS1e4spQMWqet/BDoDLQqG25ib8Iy0zZlP GGFPAKBEAmxvN4vO9Mk+vwe7ycnO81MBPSAcER60GBN/HLD1H/94myKAMzfSTq9H zqIE6XXaGrtfsnCw26eN4CIoWryD0jn77H/fOZ0YTm/UPVkTXZz1C561sa93SBsK K90WIpQesjMfANSHboHgssvE3uAoKUz+G+ieBBQJ0kBAZr3uUChC9oHT9tG6OH+C KjNDrVEJG7S+CheucvBkT5dESaUU0ai8NtDG+q2EQhN1gnIbrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtH5NLo1JTcuFbu3qxKH/y7/QNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUyOGRiN2MtNDEzYi0z YjZlLWI2ZGItZmE1Y2E3ODQ1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExkowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWhyEbHkNnCKG8xXt0KEY0CfE/7ZH2bm5OIIWU54i+XAwIy4CzvuOaZ YOfupge742ibgt4XbBq4sTQEJcWK4z9Zb6jk9Q7FLXvQob+9dAHhgk4Nmefs8KCb EXsFPXnpDI2ZrZaWMZ8jvopz30YWBGKD0Jf+QC9H0XcZs1zmtfb7stciahbln37j MRTbK9nNwzXsxwMB6UcC2oKOyyZq0FQHEMCmbuNCCd01QYjLLyeJNdlMc3rYrSAP r47d59wWxoDnt73GnQWnhCvAN8ZpSymUTBdqUdLViVKEHDC8JM+N+b4fnisV+e90 drZPd3cv8147J6DPIbcm3FFx5XSUC1g= -----END CERTIFICATE-----Generated at Mon May 5 06:08:48 2025 by rpki-client