$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa File: ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa (raw, json) Hash identifier: HPVgnBMRK9FelzXqBGwzStuIojf5dfR7JdsAsf7E6hs= Subject key identifier: 8D:5C:00:24:D2:47:57:5D:FF:A7:78:35:6E:65:58:F3:4A:80:05:58 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F432858495C24418EEC1698A9D25069B4 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14860 IP address blocks: 198.36.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:41:8e:ec:16:98:a9:d2:50:69:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=95e21a8c-3cd3-4bdb-bb71-3bd44df365f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:a0:b8:32:08:22:cc:eb:0f:7d:11:e7:10: d0:47:a3:0e:db:8c:52:9e:bc:4a:3b:53:21:04:55: 07:22:de:cd:ed:a0:d6:7e:05:d3:fa:6f:a9:c4:f3: b9:cc:0f:0a:1b:fe:b7:a8:de:c3:27:59:9a:fe:ae: 7a:89:4c:88:57:5a:6b:74:01:0e:42:13:66:eb:0f: cb:27:91:e0:84:ea:31:65:e8:ec:71:ad:50:2b:8f: 73:65:d9:8e:b6:bd:34:9e:67:a8:e6:ff:74:d7:f7: ad:f1:b3:2b:4f:d5:8e:b5:0c:a3:3f:75:c5:7b:0d: 4b:c8:ea:1b:cd:b9:b5:3a:d6:f8:bd:aa:30:c6:cb: 20:cf:9b:82:60:3c:65:7a:0a:35:e9:5d:0a:f8:45: d5:12:bd:bf:99:5e:7b:8f:d4:0d:35:30:e1:76:b9: 42:72:ff:d9:6c:c2:8e:d8:63:c5:e0:74:eb:9f:6b: e9:91:82:eb:d0:5d:3a:b4:47:86:c7:8e:57:68:dd: 16:d9:2b:56:2f:d4:45:ec:77:09:4c:56:6c:f8:f9: a2:ea:3f:9e:42:46:0f:70:cd:dd:4b:57:56:5d:8b: 96:aa:9f:61:a8:18:1d:2a:44:2f:6a:9d:f6:2b:e4: 06:c1:2e:14:62:f6:bd:89:73:12:4e:23:9c:e2:7a: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5C:00:24:D2:47:57:5D:FF:A7:78:35:6E:65:58:F3:4A:80:05:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 198.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:18:cf:0d:1b:2d:16:e1:16:d7:a8:14:e5:ea:a5:6e:9c:c8: 02:26:79:15:d0:bd:41:1e:ba:f5:d9:49:bf:2d:08:c8:23:b8: 3e:6e:43:e0:a3:9d:d4:85:7e:60:29:04:fb:46:1d:85:8d:bc: 9c:0e:f1:07:35:6e:2a:1e:ca:48:8f:5f:e0:ac:b3:c1:04:f9: 87:8b:d1:62:35:89:78:98:2e:25:1a:fc:33:ad:dc:54:73:d6: b6:ad:5d:57:4d:a1:ec:0c:3a:a0:bc:3f:46:c1:bd:e4:e5:f7: 4a:98:a0:2b:21:5d:a2:f3:ee:30:47:eb:c1:68:c4:37:c4:65: dd:70:f0:fb:05:54:dc:ad:06:b8:cc:a1:f5:ba:d2:85:83:1b: 33:1e:3f:99:ab:b4:d3:8b:49:d2:77:29:32:e9:c0:a6:7c:2f: 0f:03:5f:5f:f9:02:96:8d:f6:4d:a8:5c:06:4b:83:fa:36:fe: 86:21:2a:57:6d:bf:59:50:1c:9c:dd:14:84:86:d3:6a:17:49: 2f:42:e2:11:97:8f:b4:83:ad:0d:68:0b:a2:a8:af:50:0e:cc: e3:2b:3e:7b:c6:d5:42:a8:79:3f:5e:29:af:76:58:93:a5:fe: 1b:87:9c:e8:ce:13:cc:e5:6d:11:27:1e:83:a8:19:17:d5:51: 18:3e:b0:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEGO7BaYqdJQabQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OTVlMjFhOGMtM2NkMy00YmRiLWJiNzEtM2JkNDRkZjM2NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWyguDIIIszrD30R5xDQR6MO24xSnrxKO1Mh BFUHIt7N7aDWfgXT+m+pxPO5zA8KG/63qN7DJ1ma/q56iUyIV1prdAEOQhNm6w/L J5HghOoxZejsca1QK49zZdmOtr00nmeo5v901/et8bMrT9WOtQyjP3XFew1LyOob zbm1Otb4vaowxssgz5uCYDxlego16V0K+EXVEr2/mV57j9QNNTDhdrlCcv/ZbMKO 2GPF4HTrn2vpkYLr0F06tEeGx45XaN0W2StWL9RF7HcJTFZs+Pmi6j+eQkYPcM3d S1dWXYuWqp9hqBgdKkQvap32K+QGwS4UYva9iXMSTiOc4noKpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1cACTSR1dd/6d4NW5lWPNKgAVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvY2U4OWYzNGQtMzg1MC0z Y2YzLWI2ZjAtYjNjMDc1ZTE4NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExiQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgYzw0bLRbhFteoFOXqpW6cyAImeRXQvUEeuvXZSb8tCMgjuD5uQ+Cj ndSFfmApBPtGHYWNvJwO8Qc1bioeykiPX+Css8EE+YeL0WI1iXiYLiUa/DOt3FRz 1ratXVdNoewMOqC8P0bBveTl90qYoCshXaLz7jBH68FoxDfEZd1w8PsFVNytBrjM ofW60oWDGzMeP5mrtNOLSdJ3KTLpwKZ8Lw8DX1/5ApaN9k2oXAZLg/o2/oYhKldt v1lQHJzdFISG02oXSS9C4hGXj7SDrQ1oC6Kor1AOzOMrPnvG1UKoeT9eKa92WJOl /huHnOjOE8zlbREnHoOoGRfVURg+sNs= -----END CERTIFICATE-----Generated at Fri May 9 09:49:03 2025 by rpki-client