$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa File: 341edec5-b518-3c8f-a902-95c55b0baaa0.roa (raw, json) Hash identifier: MoyJetM+43x2FdnSR0udE4jgg78Qhc1cJjkc2DC+bG4= Subject key identifier: 67:80:E2:DA:35:5B:CB:83:23:1B:7D:54:BC:5A:05:1E:25:66:48:E7 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584940397F69551E5508A3563300 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2152 IP address blocks: 198.188.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7f:69:55:1e:55:08:a3:56:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=0c45e0dc-6bcb-4481-942a-81ffd378e3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:8a:ec:23:87:a2:c6:73:21:26:00:3e:7d: f9:a9:b8:01:71:0e:32:1f:8c:ca:f7:b4:8d:13:fa: 73:fb:93:ea:92:db:f4:80:75:ae:54:d6:d3:be:88: 52:cf:6d:27:43:0c:2a:a0:d0:bf:f8:df:ac:50:d0: 2f:86:29:61:49:00:dd:d3:b6:96:42:39:42:80:b0: a1:3e:ea:46:94:47:05:f3:11:11:24:f6:0a:bf:47: 24:e1:89:5a:57:42:f4:15:39:7d:db:05:cf:93:93: db:8d:04:be:7f:25:f9:e1:5a:37:10:85:35:d4:a4: e6:49:41:c3:b4:86:bc:2a:a0:f2:74:65:02:6f:89: b3:d5:49:84:59:33:14:6c:f8:25:9d:a3:9e:48:63: 7a:82:d9:9d:95:9e:33:d4:44:24:94:4c:77:85:e7: 71:31:ed:0e:eb:c5:61:0d:a9:64:a9:c9:39:f8:39: 93:b5:83:fb:37:53:54:a8:e8:eb:4d:30:dd:a1:da: 37:33:9b:00:9b:62:98:75:d5:ee:b0:96:26:73:61: ec:26:ca:54:d3:2f:ef:02:08:25:56:1b:2e:ee:52: be:17:0a:07:84:42:a5:ab:d4:06:39:bc:c3:e6:ee: ce:bf:d3:1e:0c:ba:b0:fa:10:73:e3:fd:41:6d:8d: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:E2:DA:35:5B:CB:83:23:1B:7D:54:BC:5A:05:1E:25:66:48:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/341edec5-b518-3c8f-a902-95c55b0baaa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1a:3c:1f:fb:e6:92:63:00:08:cd:0b:14:74:39:6e:22:1c: df:02:ea:8b:e5:66:a3:46:59:36:9b:8c:4c:8e:ce:fa:be:b4: 35:55:42:3b:6b:68:18:90:16:e4:22:a6:84:af:71:88:69:1d: 2a:37:e7:04:7e:a1:58:12:db:45:9f:4c:f2:8d:5c:d0:da:00: 8f:44:da:d1:e8:65:ec:db:60:0c:eb:49:ad:37:8e:83:39:1b: 71:20:fe:02:f4:4b:5a:4c:cc:ad:dc:13:0e:0b:6f:35:bb:e2: ec:40:14:94:95:b2:07:26:6f:d4:cd:ff:06:fc:d5:61:b0:c9: 65:43:fb:15:fc:d2:1d:3f:c7:3f:d9:5d:7f:05:6f:8d:06:77: b0:03:4c:8b:0d:b3:88:13:76:88:5f:1c:b1:38:d7:a3:d5:3c: 06:00:25:11:7f:de:4a:78:5e:a6:cf:c1:e9:35:70:f6:c1:ec: 94:1e:70:27:18:82:3a:0e:ca:ff:45:b2:ec:65:67:ee:9b:4b: 8d:d5:e2:56:6c:96:d3:52:f0:e1:c7:c5:68:b1:6a:30:08:14: 6d:7e:44:dc:18:95:fe:db:5b:f0:2f:9d:a4:1f:77:6a:a5:ad: 38:5e:6d:54:f1:41:15:be:46:c0:d1:6a:42:42:d4:f9:cf:48: 46:36:56:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX9pVR5VCKNWMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MGM0NWUwZGMtNmJjYi00NDgxLTk0MmEtODFmZmQzNzhlM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg6K7COHosZzISYAPn35qbgBcQ4yH4zK97SN E/pz+5Pqktv0gHWuVNbTvohSz20nQwwqoNC/+N+sUNAvhilhSQDd07aWQjlCgLCh PupGlEcF8xERJPYKv0ck4YlaV0L0FTl92wXPk5PbjQS+fyX54Vo3EIU11KTmSUHD tIa8KqDydGUCb4mz1UmEWTMUbPglnaOeSGN6gtmdlZ4z1EQklEx3hedxMe0O68Vh Dalkqck5+DmTtYP7N1NUqOjrTTDdodo3M5sAm2KYddXusJYmc2HsJspU0y/vAggl Vhsu7lK+FwoHhEKlq9QGObzD5u7Ov9MeDLqw+hBz4/1BbY1kJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeA4to1W8uDIxt9VLxaBR4lZkjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzQxZWRlYzUtYjUxOC0z YzhmLWE5MDItOTVjNTViMGJhYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxryQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEaPB/75pJjAAjNCxR0OW4iHN8C6ovlZqNGWTabjEyOzvq+tDVVQjtr aBiQFuQipoSvcYhpHSo35wR+oVgS20WfTPKNXNDaAI9E2tHoZezbYAzrSa03joM5 G3Eg/gL0S1pMzK3cEw4LbzW74uxAFJSVsgcmb9TN/wb81WGwyWVD+xX80h0/xz/Z XX8Fb40Gd7ADTIsNs4gTdohfHLE416PVPAYAJRF/3kp4XqbPwek1cPbB7JQecCcY gjoOyv9FsuxlZ+6bS43V4lZsltNS8OHHxWixajAIFG1+RNwYlf7bW/AvnaQfd2ql rThebVTxQRW+RsDRakJC1PnPSEY2Vio= -----END CERTIFICATE-----Generated at Mon May 5 02:26:57 2025 by rpki-client