$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa File: 803f7ede-7615-343b-89d8-ee66fd03b3a9.roa (raw, json) Hash identifier: IMc1oei8h+RfpLSqC0aFFzdZf0bPikGvOPQY2l/mXJg= Subject key identifier: E0:42:72:11:C5:DA:C1:B8:0F:C7:36:A8:20:BB:17:24:DF:D2:32:9D Certificate issuer: /CN=b7707931-9764-48eb-9dbd-a40ef4165c1b Certificate serial: 010D0C9F43285849C20A1FA52D51F7657AF86040 Authority key identifier: 97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 23389 IP address blocks: 198.212.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1f:a5:2d:51:f7:65:7a:f8:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7707931-9764-48eb-9dbd-a40ef4165c1b Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=8d72b222-8215-4d93-9f62-120d4e51cc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:b8:d5:a2:68:41:15:77:03:88:b7:56:5b: 84:58:24:99:b8:78:0f:73:62:67:08:f5:51:0a:14: 8b:13:64:18:18:64:ee:c3:7e:94:6f:c0:00:ef:4b: 90:67:fc:78:6b:52:17:2f:e6:3f:88:9c:6d:de:b5: f6:21:e6:f5:7a:02:a9:6d:71:ef:f2:13:7a:83:be: 46:ee:7a:1d:ee:21:9b:0d:d7:a7:8c:fa:e2:23:34: eb:86:fe:a4:e2:cb:fa:dc:83:a7:ae:f8:4e:3d:73: 92:94:ed:60:b4:1a:49:98:22:8a:56:f6:01:32:fe: c6:dd:b9:c4:1b:cf:ca:98:17:e0:d1:cd:84:b7:48: 4a:c8:8f:29:29:87:8f:2c:06:07:d6:4f:8b:2f:35: ba:92:53:3a:41:d9:41:cb:9e:71:86:24:d1:fc:13: 0a:79:3e:f5:8c:fe:76:e1:33:e5:93:d9:f4:79:64: 5f:04:eb:b9:0b:1c:26:27:61:83:ec:dd:18:26:33: a8:e7:59:d7:a7:7f:b9:eb:e8:77:ec:d5:8c:c5:bb: 4c:4f:ca:c9:72:bd:a3:d9:d7:f9:32:db:00:cc:70: 94:8d:0a:9e:a2:18:de:5e:aa:ef:d1:60:2a:0a:ed: e6:46:48:a9:31:b4:64:84:6d:02:44:78:60:ca:37: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:42:72:11:C5:DA:C1:B8:0F:C7:36:A8:20:BB:17:24:DF:D2:32:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl X509v3 Authority Key Identifier: keyid:97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer sbgp-ipAddrBlock: critical IPv4: 198.212.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7f:7e:29:3b:90:52:fc:7a:d5:1a:97:da:01:ca:2e:ca:73: a3:0f:ca:38:61:08:af:bf:44:3e:fe:51:18:6b:71:79:24:81: 59:c5:ea:3e:bc:48:4b:6a:f6:bc:4f:50:b5:01:88:59:d8:ad: 85:ae:4a:ac:6a:a2:a0:41:bf:fc:5c:bf:f4:b6:c1:fa:bc:21: 46:bf:9a:4e:67:08:a1:14:a9:92:f1:cf:cb:b7:19:ee:3c:4b: 8c:eb:94:12:8c:ff:d1:f9:88:b0:bc:5f:64:ff:a7:83:e7:bf: 57:b3:f6:61:56:e9:d1:91:80:74:86:f7:da:91:d5:70:6b:25: f1:2b:f6:24:8e:96:9e:0c:e5:e1:41:30:1a:ad:e4:2f:7d:4e: 70:56:20:3d:79:6a:ff:b9:66:97:d7:26:07:f1:89:d8:78:49: 2c:49:ad:a2:10:99:c0:8c:29:38:27:3c:10:02:1b:0e:54:80: 76:d4:5b:7d:49:8b:51:cc:05:6a:61:37:58:89:ce:5e:b3:c3: 15:0f:d9:9b:25:11:3d:cb:70:23:63:af:a6:32:af:a2:6d:7b: 11:9c:a0:cb:76:6a:72:73:e1:bb:c7:53:44:24:e9:ce:51:d6: b3:d1:f7:bb:ad:5c:a8:16:8e:4f:ad:81:48:0c:0d:a9:1e:e5: 74:0d:09:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCh+lLVH3ZXr4YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc3MDc5MzEtOTc2NC00OGViLTlkYmQtYTQwZWY0MTY1 YzFiMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OGQ3MmIyMjItODIxNS00ZDkzLTlmNjItMTIwZDRlNTFjYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg641aJoQRV3A4i3VluEWCSZuHgPc2JnCPVR ChSLE2QYGGTuw36Ub8AA70uQZ/x4a1IXL+Y/iJxt3rX2Ieb1egKpbXHv8hN6g75G 7nod7iGbDdenjPriIzTrhv6k4sv63IOnrvhOPXOSlO1gtBpJmCKKVvYBMv7G3bnE G8/KmBfg0c2Et0hKyI8pKYePLAYH1k+LLzW6klM6QdlBy55xhiTR/BMKeT71jP52 4TPlk9n0eWRfBOu5CxwmJ2GD7N0YJjOo51nXp3+56+h37NWMxbtMT8rJcr2j2df5 MtsAzHCUjQqeohjeXqrv0WAqCu3mRkipMbRkhG0CRHhgyjeTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBCchHF2sG4D8c2qCC7FyTf0jKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzcw NzkzMS05NzY0LTQ4ZWItOWRiZC1hNDBlZjQxNjVjMWIvODAzZjdlZGUtNzYxNS0z NDNiLTg5ZDgtZWU2NmZkMDNiM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjc3MDc5MzEtOTc2NC00OGViLTlk YmQtYTQwZWY0MTY1YzFiL2I3NzA3OTMxLTk3NjQtNDhlYi05ZGJkLWE0MGVmNDE2 NWMxYi5jcmwwHwYDVR0jBBgwFoAUl+D10E3FageFpuVgYZy8Q9ypORUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzcwNzkzMS05NzY0LTQ4ZWItOWRiZC1hNDBl ZjQxNjVjMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxtSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl/fik7kFL8etUal9oByi7Kc6MPyjhhCK+/RD7+URhrcXkkgVnF6j68 SEtq9rxPULUBiFnYrYWuSqxqoqBBv/xcv/S2wfq8IUa/mk5nCKEUqZLxz8u3Ge48 S4zrlBKM/9H5iLC8X2T/p4Pnv1ez9mFW6dGRgHSG99qR1XBrJfEr9iSOlp4M5eFB MBqt5C99TnBWID15av+5ZpfXJgfxidh4SSxJraIQmcCMKTgnPBACGw5UgHbUW31J i1HMBWphN1iJzl6zwxUP2ZslET3LcCNjr6Yyr6JtexGcoMt2anJz4bvHU0Qk6c5R 1rPR97utXKgWjk+tgUgMDake5XQNCQE= -----END CERTIFICATE-----Generated at Fri May 9 02:42:22 2025 by rpki-client