$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/bf721460-a097-3a2a-8ae2-9676f2443383.roa File: bf721460-a097-3a2a-8ae2-9676f2443383.roa (raw, json) Hash identifier: 88pKdQ+MJ+WB072dNgk+W1I/Kdm0mzkinZ5ZBqeYgKo= Subject key identifier: 5E:EE:97:1D:4D:69:64:80:64:F0:17:78:42:F4:08:70:F6:1C:6C:97 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858491ED6D54E0EB5286BA7CB5600 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/bf721460-a097-3a2a-8ae2-9676f2443383.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 212238 IP address blocks: 98.159.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d5:4e:0e:b5:28:6b:a7:cb:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=54b72886-38d4-4edf-a332-ef74845f2c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:00:62:f1:79:a8:1a:75:ea:36:17:56:80: f3:55:75:ff:3d:b0:6c:15:02:ad:c0:d4:e3:de:dd: c1:96:af:75:2f:ba:88:8b:aa:f1:8b:25:56:03:32: 31:18:95:5e:49:41:f6:db:0b:5b:cc:1f:fb:80:56: 6e:48:0c:88:25:dc:6f:95:4d:d7:f4:8d:34:60:0b: 0e:e2:cf:ad:fa:01:9a:df:05:18:5d:83:5f:15:26: 78:9b:42:de:67:b6:89:f7:8c:d7:db:a7:08:07:90: a4:de:2a:64:d2:31:9e:17:5d:f1:2d:a5:8c:7d:fb: 65:1b:27:9c:0f:8c:16:e6:a6:b3:58:69:1d:43:80: 1e:56:cb:9a:2e:80:5f:da:32:b6:b1:36:49:0f:db: 99:f4:63:37:e9:bf:fa:59:87:d1:ce:73:52:30:00: 74:6f:48:76:b9:ba:82:9c:01:96:75:61:c0:e0:1a: 1a:93:79:19:17:68:ec:62:d0:77:85:85:87:81:b7: eb:16:a3:e6:9e:fe:b7:a9:46:c1:68:c8:7b:b5:ee: 46:e9:4e:ed:5d:62:25:81:e5:bb:02:20:aa:11:11: 9f:d9:45:d6:ac:6a:41:78:7e:f9:cf:86:47:d8:55: aa:6f:ee:8e:2a:ee:2a:fe:3c:56:bf:78:32:14:25: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EE:97:1D:4D:69:64:80:64:F0:17:78:42:F4:08:70:F6:1C:6C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/bf721460-a097-3a2a-8ae2-9676f2443383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3e:5d:f6:02:b2:6e:04:08:e9:9e:f3:33:b5:9e:c6:8b:eb: d6:3f:f7:20:31:2b:a1:84:e0:4f:63:c2:35:0d:6a:28:7d:e6: 37:5a:c1:d2:e3:7d:3d:18:63:c1:27:f8:39:11:10:c7:0f:47: a0:88:8e:2a:09:76:b2:d0:d1:6d:25:e2:20:fc:33:69:93:ef: 47:5a:ec:6d:1a:f5:62:c0:8c:a4:5c:15:3d:0a:90:50:cc:50: 42:47:4b:fa:59:83:4a:61:a0:46:52:bc:bf:f8:97:11:89:a4: 99:a3:35:7b:2d:ba:df:da:16:f0:02:d3:aa:c9:0d:79:fa:4e: ed:69:b7:36:9b:8e:00:3c:d4:c0:dc:b4:99:5b:3d:12:00:e1: 12:d0:37:b6:8a:74:75:94:5d:2a:a9:74:d6:eb:ad:5e:0b:03: fb:28:b3:a0:9a:0b:8e:32:eb:e0:43:b8:9b:59:88:aa:d8:37: 8d:74:3e:8e:3e:e1:70:df:0f:39:b3:ba:37:27:57:21:13:f7: 4a:40:b5:6e:94:c8:e7:2a:9e:a9:8b:c9:96:77:7d:6a:48:ae: bb:9d:f9:d7:53:ec:8b:8d:ca:e9:f7:fe:08:cc:99:c4:eb:ea: ec:16:aa:d0:a7:95:a8:b1:48:fe:81:52:d0:4a:85:ca:1e:cf: 71:bf:bb:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tVODrUoa6fLVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTRiNzI4ODYtMzhkNC00ZWRmLWEzMzItZWY3NDg0NWYyYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGIAYvF5qBp16jYXVoDzVXX/PbBsFQKtwNTj 3t3Blq91L7qIi6rxiyVWAzIxGJVeSUH22wtbzB/7gFZuSAyIJdxvlU3X9I00YAsO 4s+t+gGa3wUYXYNfFSZ4m0LeZ7aJ94zX26cIB5Ck3ipk0jGeF13xLaWMfftlGyec D4wW5qazWGkdQ4AeVsuaLoBf2jK2sTZJD9uZ9GM36b/6WYfRznNSMAB0b0h2ubqC nAGWdWHA4Boak3kZF2jsYtB3hYWHgbfrFqPmnv63qUbBaMh7te5G6U7tXWIlgeW7 AiCqERGf2UXWrGpBeH75z4ZH2FWqb+6OKu4q/jxWv3gyFCUJswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7ulx1NaWSAZPAXeEL0CHD2HGyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYmY3MjE0NjAtYTA5Ny0z YTJhLThhZTItOTY3NmYyNDQzMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM+XfYCsm4ECOme8zO1nsaL69Y/9yAxK6GE4E9jwjUNaih95jdawdLj fT0YY8En+DkREMcPR6CIjioJdrLQ0W0l4iD8M2mT70da7G0a9WLAjKRcFT0KkFDM UEJHS/pZg0phoEZSvL/4lxGJpJmjNXstut/aFvAC06rJDXn6Tu1ptzabjgA81MDc tJlbPRIA4RLQN7aKdHWUXSqpdNbrrV4LA/sos6CaC44y6+BDuJtZiKrYN410Po4+ 4XDfDzmzujcnVyET90pAtW6UyOcqnqmLyZZ3fWpIrrud+ddT7IuNyun3/gjMmcTr 6uwWqtCnlaixSP6BUtBKhcoez3G/u30= -----END CERTIFICATE-----Generated at Thu Apr 10 16:52:27 2025 by rpki-client