$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f706efe5-0b21-374f-bf02-2c450dc243a5.roa File: f706efe5-0b21-374f-bf02-2c450dc243a5.roa (raw, json) Hash identifier: XKe7daYRIbBeXX741CvxX10g6kklvzdDMtcnktoHL20= Subject key identifier: B3:92:6D:32:58:B8:53:15:D2:5C:A9:8A:DF:9A:EB:AF:B2:E2:A6:B7 Certificate issuer: /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Certificate serial: 010D0C9F432858491D717876998B04557AC90480 Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f706efe5-0b21-374f-bf02-2c450dc243a5.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 53334 IP address blocks: 172.98.36.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:78:76:99:8b:04:55:7a:c9:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=ad194cbd-cdef-4dcf-8f06-a6a20ba92574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:92:b1:ea:7a:d6:fc:b0:44:33:55:39:fd: e6:00:78:16:b3:b5:f1:74:e5:b9:3f:40:ba:29:ac: cb:86:10:5f:71:70:4e:c2:a1:0a:54:fc:5a:14:e2: cb:5f:2d:33:d1:f6:ab:1f:45:24:da:3b:55:d9:6b: 44:c0:43:bf:4e:5b:14:24:d3:2e:17:88:a9:e8:67: 2a:5d:d1:e8:3b:be:1c:c7:7f:37:89:89:7e:9d:91: ca:41:f4:ba:cb:da:a5:f9:d3:ed:71:33:88:b2:ad: d8:b7:0f:18:78:0a:0c:11:b9:e7:9d:69:91:85:00: 87:4c:ff:ea:db:9a:df:75:3c:bc:44:4d:1a:11:52: b9:93:dd:74:c7:12:2a:30:81:bf:df:72:e4:51:cb: c5:fa:c5:14:05:b4:d8:53:53:f1:14:2a:82:dd:dc: 7a:cb:55:47:b7:ca:bb:f8:46:1e:a3:06:45:36:57: 0c:55:b4:73:af:9d:aa:96:a1:1d:f0:83:4b:fb:70: 94:c7:ee:a2:c8:a3:80:d3:c9:90:d7:65:71:dc:60: 87:28:5c:0c:54:69:7e:d1:c9:31:f3:f1:68:d9:be: aa:83:fd:37:98:8b:86:ac:64:33:7b:8c:5b:b0:c3: 16:57:27:c7:b6:85:f1:13:b5:5d:ad:10:a9:c5:03: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:6D:32:58:B8:53:15:D2:5C:A9:8A:DF:9A:EB:AF:B2:E2:A6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f706efe5-0b21-374f-bf02-2c450dc243a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl X509v3 Authority Key Identifier: keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer sbgp-ipAddrBlock: critical IPv4: 172.98.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e7:c5:ab:e9:f0:c4:e2:5d:8e:68:5c:ba:17:b3:7a:c4:f8: da:d1:af:f1:2f:85:74:0d:1d:6b:ed:45:e1:66:a4:17:94:f4: 4d:a1:c2:60:56:23:67:69:8d:f8:84:c5:4d:08:10:97:8f:70: 0c:b4:d7:e5:82:61:8b:e3:53:f0:b6:c0:a3:5b:6c:4c:b6:3d: c0:bf:91:b1:36:27:97:3c:39:8b:8f:51:ef:66:f7:85:68:cc: 00:cc:2a:67:ba:5c:72:02:b9:5c:8f:cb:87:22:0c:cc:1c:3c: be:37:86:bf:92:09:5f:d6:ec:ae:e2:d3:10:8f:83:74:1e:c4: 56:13:a0:6a:a8:4b:fa:70:a0:6a:e2:ef:55:1c:8f:9f:62:66: a1:44:47:7b:ef:a5:30:f7:db:94:ac:08:4e:30:22:1f:f6:b1: 22:e1:71:14:c9:7c:2b:52:ee:52:28:c1:b6:77:60:82:2f:67: 98:ad:a8:a2:b9:0f:98:c0:d3:e0:32:9c:ec:26:6a:7b:b6:10: 0c:a8:17:cf:7f:0a:dc:c8:16:77:23:d3:6b:9f:a8:2b:99:e7: 29:a1:e1:51:62:7c:d9:d6:a1:e9:3e:73:8b:aa:30:c2:51:a0: ce:39:78:46:44:a7:f0:5c:21:d5:76:f4:9d:e4:6b:e8:15:79: 2a:62:4b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXh2mYsEVXrJBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj OGQ0MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YWQxOTRjYmQtY2RlZi00ZGNmLThmMDYtYTZhMjBiYTkyNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwKSsep61vywRDNVOf3mAHgWs7XxdOW5P0C6 KazLhhBfcXBOwqEKVPxaFOLLXy0z0farH0Uk2jtV2WtEwEO/TlsUJNMuF4ip6Gcq XdHoO74cx383iYl+nZHKQfS6y9ql+dPtcTOIsq3Ytw8YeAoMEbnnnWmRhQCHTP/q 25rfdTy8RE0aEVK5k910xxIqMIG/33LkUcvF+sUUBbTYU1PxFCqC3dx6y1VHt8q7 +EYeowZFNlcMVbRzr52qlqEd8INL+3CUx+6iyKOA08mQ12Vx3GCHKFwMVGl+0ckx 8/Fo2b6qg/03mIuGrGQze4xbsMMWVyfHtoXxE7VdrRCpxQOx+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOSbTJYuFMV0lypit+a66+y4qa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvZjcwNmVmZTUtMGIyMS0z NzRmLWJmMDItMmM0NTBkYzI0M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4 YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0 NGZmOGM4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbnxavp8MTiXY5oXLoXs3rE+NrRr/EvhXQNHWvtReFmpBeU9E2hwmBW I2dpjfiExU0IEJePcAy01+WCYYvjU/C2wKNbbEy2PcC/kbE2J5c8OYuPUe9m94Vo zADMKme6XHICuVyPy4ciDMwcPL43hr+SCV/W7K7i0xCPg3QexFYToGqoS/pwoGri 71Ucj59iZqFER3vvpTD325SsCE4wIh/2sSLhcRTJfCtS7lIowbZ3YIIvZ5itqKK5 D5jA0+AynOwmanu2EAyoF89/CtzIFncj02ufqCuZ5ymh4VFifNnWoek+c4uqMMJR oM45eEZEp/BcIdV29J3ka+gVeSpiS9M= -----END CERTIFICATE-----Generated at Fri Mar 14 08:37:54 2025 by rpki-client