$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa File: 0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa (raw, json) Hash identifier: LdKtzru7U69XbYzxnpooM5fIifCO86ekx+pBysIKD3I= Subject key identifier: E1:E9:AC:33:34:3E:4D:AD:1F:A5:72:63:FD:BD:7E:70:ED:72:AB:57 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849912F2F237B0D7491D6BE7BDC Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 30058 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2f:23:7b:0d:74:91:d6:be:7b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=db5e7ff7-91a2-4e57-89da-d01a617ca6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:81:26:25:27:37:e7:fb:5c:74:a8:04:dd: 01:ed:16:3b:81:98:ad:18:71:fd:d1:e2:50:60:59: e2:e3:b3:79:a5:ab:9c:25:b8:e4:68:10:24:f1:6c: 4e:8f:76:53:6f:b7:f0:32:ca:22:8a:3a:af:c7:a3: 48:54:30:67:fb:a7:42:86:e4:2c:b9:04:7d:77:70: 1c:55:a4:2d:38:9e:f6:9a:7f:77:4a:fa:46:bd:22: 3b:f5:6d:c6:40:7a:42:2d:2a:55:05:f2:d6:40:5f: a1:66:d7:dd:29:f0:8e:95:7d:dc:e0:8b:66:c4:6e: be:10:15:41:70:86:f2:a3:62:58:00:f2:64:f1:81: 4d:d4:e2:1b:6e:e8:8a:84:c6:60:c9:05:02:84:5f: 4e:d6:a3:02:b1:69:ec:40:d3:c1:f3:64:3a:99:0a: 11:e2:6e:80:52:f9:67:7b:31:ed:e5:43:65:f0:3d: 6d:35:9a:bf:58:16:2a:01:f2:18:ff:6b:0d:bf:d7: 6c:95:1a:72:d1:b4:f6:a6:56:05:3a:f8:ba:1e:94: c5:bb:d7:a7:ae:c3:81:63:26:4a:ae:e2:44:49:b1: 4c:b8:3c:d9:37:45:35:0a:1b:08:22:1f:e4:33:d7: 33:cd:7c:b3:6f:05:d4:9a:e4:79:4a:d8:46:1c:e2: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:AC:33:34:3E:4D:AD:1F:A5:72:63:FD:BD:7E:70:ED:72:AB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:12:ec:d7:93:11:e0:99:10:40:1d:2b:c3:a5:ba:e2:96:ae: 3d:1b:5a:05:4f:8e:e4:5d:ac:ac:b2:60:8e:54:b2:31:aa:85: fd:23:1c:36:f7:7c:3e:75:d9:c1:50:81:87:7a:cf:d2:5b:df: 4e:0c:19:3d:20:7c:e3:f4:30:d0:02:79:4c:30:15:f5:82:72: 44:79:4a:42:73:b9:08:ca:61:40:52:12:58:38:5e:cf:39:2f: 19:25:3c:a7:73:70:44:5e:4d:9d:82:fa:c4:aa:05:27:b2:e9: 34:31:6a:09:34:99:a3:7f:c0:a5:f1:c9:32:23:3e:31:ba:6c: a5:b5:27:4e:ce:0f:b4:75:f7:9b:09:f3:63:4b:e3:49:6a:75: 13:28:18:b5:13:e9:81:1e:9a:8f:aa:5e:c2:f8:c6:d1:e6:68: 30:0b:ba:cd:0b:21:59:eb:3a:43:fb:bc:ee:ac:35:1a:bd:f9: bb:a7:4a:25:25:e4:df:16:54:e4:0e:7f:70:96:9f:0a:d2:c1: 03:87:0b:f5:11:d3:be:ef:5a:f4:00:cc:e6:d1:ee:91:71:e4: 77:1b:e1:03:7c:57:e2:cd:0d:02:b1:8c:d6:71:10:e5:d0:86: 45:6a:12:9b:f1:3e:84:fc:09:4c:89:94:88:3b:e4:08:78:be: 31:69:6c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy8jew10kda+e9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZGI1ZTdmZjctOTFhMi00ZTU3LTg5ZGEtZDAxYTYxN2NhNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WBJiUnN+f7XHSoBN0B7RY7gZitGHH90eJQ YFni47N5paucJbjkaBAk8WxOj3ZTb7fwMsoiijqvx6NIVDBn+6dChuQsuQR9d3Ac VaQtOJ72mn93SvpGvSI79W3GQHpCLSpVBfLWQF+hZtfdKfCOlX3c4ItmxG6+EBVB cIbyo2JYAPJk8YFN1OIbbuiKhMZgyQUChF9O1qMCsWnsQNPB82Q6mQoR4m6AUvln ezHt5UNl8D1tNZq/WBYqAfIY/2sNv9dslRpy0bT2plYFOvi6HpTFu9enrsOBYyZK ruJESbFMuDzZN0U1ChsIIh/kM9czzXyzbwXUmuR5SthGHOIuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHprDM0Pk2tH6VyY/29fnDtcqtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGFmZjc4YWUtN2Y3OC0z YmY0LWIwNzktYmQxY2IzN2RhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwS7NeTEeCZEEAdK8OluuKWrj0bWgVPjuRdrKyyYI5UsjGqhf0jHDb3 fD512cFQgYd6z9Jb304MGT0gfOP0MNACeUwwFfWCckR5SkJzuQjKYUBSElg4Xs85 LxklPKdzcEReTZ2C+sSqBSey6TQxagk0maN/wKXxyTIjPjG6bKW1J07OD7R195sJ 82NL40lqdRMoGLUT6YEemo+qXsL4xtHmaDALus0LIVnrOkP7vO6sNRq9+bunSiUl 5N8WVOQOf3CWnwrSwQOHC/UR077vWvQAzObR7pFx5Hcb4QN8V+LNDQKxjNZxEOXQ hkVqEpvxPoT8CUyJlIg75Ah4vjFpbHk= -----END CERTIFICATE-----Generated at Mon May 5 12:24:39 2025 by rpki-client