$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa File: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (raw, json) Hash identifier: WZ0O0FZ1oJph8cuf+g8Xg20Ss5EB314F1RLmizHgdtE= Subject key identifier: 38:01:E8:5B:16:EE:B3:DC:D6:44:6D:79:16:1E:51:C0:68:A1:67:76 Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F43285849B14A0B04CC940C1CC3BE7480 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 19782 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0b:04:cc:94:0c:1c:c3:be:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=298c7155-b7e5-45a7-aefa-adf40518899c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:77:87:01:5d:6b:fd:5a:7c:70:85:12:6c: 84:5b:db:20:fb:44:5c:85:a7:d9:7c:6d:1b:5f:02: 06:ed:4e:09:e5:d5:5e:4e:0b:a2:da:da:66:bc:79: d0:73:a3:8c:b7:aa:4a:0d:55:6c:10:b4:49:23:28: b1:aa:b3:75:6a:3c:56:b2:ed:5a:c4:45:88:95:53: 27:a5:3d:79:f2:f2:1e:74:1f:a0:e4:f8:1a:09:05: b9:dc:71:3b:c3:4e:40:15:6b:9c:a6:8b:96:b0:52: 96:77:e2:bc:0a:06:c2:bb:ea:f1:a5:73:a7:2f:64: 81:46:36:41:7b:25:45:a2:07:e9:53:86:71:44:4d: f2:b3:6d:32:76:14:ea:bf:1c:5d:3c:ab:a6:7a:46: 66:0a:e4:cb:99:28:0b:00:ff:80:59:8f:a4:9c:03: c2:4f:df:fe:c5:83:92:54:8b:37:bb:7d:7d:5b:1b: ac:5e:83:31:33:14:2a:e1:32:ea:42:31:67:9d:84: 6c:06:f2:39:4f:d7:48:16:a4:39:ca:8a:4b:1c:96: c6:4b:d8:ab:be:ea:56:01:dc:39:a8:9c:82:32:c5: 65:d1:71:f3:f1:f0:2b:c8:45:f7:04:36:56:71:dd: 00:69:dd:4c:85:68:fc:9b:81:ad:02:d6:dc:37:05: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:01:E8:5B:16:EE:B3:DC:D6:44:6D:79:16:1E:51:C0:68:A1:67:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:46:79:aa:34:46:37:53:8c:9b:e0:40:f8:c6:b0:ef:d3:e4: 74:d4:3c:0a:c2:d1:7e:d6:c4:37:00:66:63:15:47:85:76:2b: a2:0a:ef:c4:4a:99:4c:cd:cc:ce:05:18:3a:c7:98:86:55:04: 23:57:a5:22:47:e0:5a:29:a1:01:43:05:54:12:cd:1c:b0:a6: 5e:97:85:5b:c3:05:b1:e2:4f:46:af:5d:79:11:f9:fc:51:56: bb:37:ca:59:c7:6b:e2:3b:80:49:d5:bb:db:bb:97:db:bd:2b: d8:08:4a:83:9a:7e:9c:b0:e1:3d:cd:f9:06:e9:a3:bf:a2:0e: ae:a8:bc:15:83:73:c6:18:f4:19:d1:1c:fa:3d:2b:26:fe:c1: a2:dd:26:f3:75:55:4b:7d:47:d6:f6:d3:a2:1d:3d:76:28:99: 06:9e:37:08:28:11:70:31:bc:c7:47:1b:60:1b:b5:2b:4b:4c: 63:61:43:a7:af:01:f9:e1:43:c9:4c:4c:82:84:d9:5e:30:84: 7c:0e:74:be:c9:21:34:0e:fc:24:64:84:7b:05:7a:c9:41:4f: 59:68:34:66:b0:d8:c1:45:ad:e5:2e:8f:7d:4b:d0:37:24:fb: 0b:a5:77:93:ab:eb:f6:c2:fb:d3:f7:15:6e:cd:91:6b:8e:93: 5b:57:69:76 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmxSgsEzJQMHMO+dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Mjk4YzcxNTUtYjdlNS00NWE3LWFlZmEtYWRmNDA1MTg4OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkp3hwFda/1afHCFEmyEW9sg+0RchafZfG0b XwIG7U4J5dVeTgui2tpmvHnQc6OMt6pKDVVsELRJIyixqrN1ajxWsu1axEWIlVMn pT158vIedB+g5PgaCQW53HE7w05AFWucpouWsFKWd+K8CgbCu+rxpXOnL2SBRjZB eyVFogfpU4ZxRE3ys20ydhTqvxxdPKumekZmCuTLmSgLAP+AWY+knAPCT9/+xYOS VIs3u319WxusXoMxMxQq4TLqQjFnnYRsBvI5T9dIFqQ5yopLHJbGS9irvupWAdw5 qJyCMsVl0XHz8fAryEX3BDZWcd0Aad1MhWj8m4GtAtbcNwVuewIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDgB6FsW7rPc1kRteRYeUcBooWd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNDBjYTNkYTctZDkwNS0z ZGVmLTlmMTktMmUzMmI3ODA1ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHUZ5qjRGN1OMm+BA+Maw79PkdNQ8CsLRftbENwBmYxVH hXYrogrvxEqZTM3MzgUYOseYhlUEI1elIkfgWimhAUMFVBLNHLCmXpeFW8MFseJP Rq9deRH5/FFWuzfKWcdr4juASdW727uX270r2AhKg5p+nLDhPc35Bumjv6IOrqi8 FYNzxhj0GdEc+j0rJv7Bot0m83VVS31H1vbToh09diiZBp43CCgRcDG8x0cbYBu1 K0tMY2FDp68B+eFDyUxMgoTZXjCEfA50vskhNA78JGSEewV6yUFPWWg0ZrDYwUWt 5S6PfUvQNyT7C6V3k6vr9sL70/cVbs2Ra46TW1dpdg== -----END CERTIFICATE-----Generated at Mon May 5 01:22:37 2025 by rpki-client