$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/98fdee74-195a-3eaa-9a63-2a9d1b1b9654.roa File: 98fdee74-195a-3eaa-9a63-2a9d1b1b9654.roa (raw, json) Hash identifier: OokWwhek19Sl0R+kS3I+BDpC6AYh/ho3Gxem1Je+N70= Subject key identifier: 5D:97:F3:6E:79:98:1A:A8:2D:08:44:13:0A:F4:3A:45:27:B8:00:43 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285848E2D1191C5DDCCC57B06D7F80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/98fdee74-195a-3eaa-9a63-2a9d1b1b9654.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 9009 IP address blocks: 173.245.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:19:1c:5d:dc:cc:57:b0:6d:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=7a8b80c0-6e59-4d25-8481-f24379b525c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:74:1b:35:0d:ae:83:b5:5b:ec:17:d9:4c: ca:8c:a2:10:c2:77:55:ac:e1:e2:6f:b6:28:ec:08: c5:5c:85:e1:f1:f4:a2:8b:35:e0:4c:df:03:65:1f: 29:42:d5:ff:54:c8:6d:6c:dc:06:c5:4d:76:e2:89: f2:45:bb:ae:03:c6:a6:f4:0c:87:c4:ff:33:83:f3: 98:09:5f:8a:f9:65:c3:88:02:8b:32:f8:63:a8:31: b6:da:3f:96:25:20:ec:5d:0c:48:bc:88:4f:1a:f7: 08:ef:bf:51:b7:b7:59:ba:13:bc:71:72:73:f1:51: d4:2d:95:ea:b3:88:df:90:ec:3b:27:74:86:0e:0b: b6:47:07:7d:f2:11:a4:ae:10:e1:eb:48:1c:e5:d7: cc:db:6b:af:9f:71:f4:df:8e:0a:f2:f6:37:0b:b2: 0c:22:92:3c:d2:c3:8e:e3:0a:97:04:07:e6:e5:ad: ec:9d:b1:94:f3:9f:2a:ac:ab:f3:4f:85:32:ee:ca: 6a:b8:5d:c2:de:56:84:b1:6c:d5:51:f2:4a:57:db: d7:de:35:d4:39:3f:9f:10:b0:a8:84:39:4e:9c:12: 70:ff:1f:11:2b:a3:1e:1e:fe:f7:93:ba:8d:3a:c0: 5e:20:5a:10:17:53:b3:0f:56:f7:41:28:c3:c7:fa: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:97:F3:6E:79:98:1A:A8:2D:08:44:13:0A:F4:3A:45:27:B8:00:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/98fdee74-195a-3eaa-9a63-2a9d1b1b9654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:84:aa:2f:64:f1:26:6f:4b:98:dc:ad:ad:bc:fc:e6:58:68: 7f:34:c9:fc:98:6e:16:e2:7f:29:16:0f:e0:f0:0f:e4:58:d6: 7c:f3:f0:3a:81:18:c8:e1:e8:b7:8d:50:42:af:86:a0:82:ab: c0:f8:aa:22:11:0f:07:4a:fb:e9:a4:f4:1d:47:a7:a0:19:d0: e2:a7:e0:e9:14:00:a2:a1:8a:12:6d:0c:eb:b3:4d:26:6c:72: 6c:b1:7c:d1:f4:78:fd:13:41:af:ec:76:37:1b:32:4c:59:01: d7:dd:12:55:75:31:04:af:62:7c:d7:cb:6d:30:8c:7f:12:82: 9f:19:7a:8c:35:88:c0:64:b0:69:39:29:85:58:27:0c:80:96: b9:53:e9:18:01:66:c8:17:5f:ee:79:7f:d1:75:c3:7d:95:e7: 36:fc:f4:19:e8:6f:a1:be:c1:62:30:bc:e6:2b:94:d3:0f:aa: b2:09:6d:fd:45:12:77:b9:01:f3:71:fe:39:f3:c2:f9:63:a0: a7:50:c0:15:97:46:e3:be:27:33:15:c7:11:63:5d:1f:0e:0d: 27:e4:8a:bd:21:11:76:6f:8a:6f:3e:be:0a:7a:0c:7f:71:be: 81:36:12:d4:91:22:43:22:b6:62:f5:22:56:f4:d3:d2:e7:f7: 98:b1:ac:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RkcXdzMV7Btf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk N2E4YjgwYzAtNmU1OS00ZDI1LTg0ODEtZjI0Mzc5YjUyNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tN0GzUNroO1W+wX2UzKjKIQwndVrOHib7Yo 7AjFXIXh8fSiizXgTN8DZR8pQtX/VMhtbNwGxU124onyRbuuA8am9AyHxP8zg/OY CV+K+WXDiAKLMvhjqDG22j+WJSDsXQxIvIhPGvcI779Rt7dZuhO8cXJz8VHULZXq s4jfkOw7J3SGDgu2Rwd98hGkrhDh60gc5dfM22uvn3H0344K8vY3C7IMIpI80sOO 4wqXBAfm5a3snbGU858qrKvzT4Uy7spquF3C3laEsWzVUfJKV9vX3jXUOT+fELCo hDlOnBJw/x8RK6MeHv73k7qNOsBeIFoQF1OzD1b3QSjDx/obPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2X8255mBqoLQhEEwr0OkUnuABDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvOThmZGVlNzQtMTk1YS0z ZWFhLTlhNjMtMmE5ZDFiMWI5NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCEqi9k8SZvS5jcra28/OZYaH80yfyYbhbifykWD+DwD+RY1nzz8DqB GMjh6LeNUEKvhqCCq8D4qiIRDwdK++mk9B1Hp6AZ0OKn4OkUAKKhihJtDOuzTSZs cmyxfNH0eP0TQa/sdjcbMkxZAdfdElV1MQSvYnzXy20wjH8Sgp8Zeow1iMBksGk5 KYVYJwyAlrlT6RgBZsgXX+55f9F1w32V5zb89Bnob6G+wWIwvOYrlNMPqrIJbf1F Ene5AfNx/jnzwvljoKdQwBWXRuO+JzMVxxFjXR8ODSfkir0hEXZvim8+vgp6DH9x voE2EtSRIkMitmL1Ilb009Ln95ixrDI= -----END CERTIFICATE-----Generated at Sun Apr 6 11:08:33 2025 by rpki-client