$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/127b112e-de96-3488-960b-f35714a24c3a.roa File: 127b112e-de96-3488-960b-f35714a24c3a.roa (raw, json) Hash identifier: 1rA2i5IDKe6m2PbTt9I3SbEDA/X7UKBzuteHnqQCGMU= Subject key identifier: 94:BB:F2:8D:8E:A3:16:EA:0F:8B:18:26:CF:28:2A:B3:03:0C:AE:94 Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F432858489A3B49C99C66ABFB67B0D030 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/127b112e-de96-3488-960b-f35714a24c3a.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 216050 IP address blocks: 172.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:49:c9:9c:66:ab:fb:67:b0:d0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=6de2024b-f09b-4762-a289-0ec1278a5367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:ba:74:a3:f5:e4:87:0a:de:5c:1b:62:82: 40:df:e6:82:3d:de:b1:f8:d9:5c:20:fd:0b:a7:e3: b6:15:09:0b:30:ee:ba:3a:3c:97:37:b5:90:d0:ab: c8:df:d7:79:9f:a7:af:b4:d4:27:68:40:17:b4:ca: c4:01:4b:ca:3f:2c:01:21:03:c5:a2:b2:1a:50:97: 6d:49:98:5b:26:27:6c:dd:f2:85:c3:1b:50:ae:9b: 03:a8:b8:37:61:a0:53:28:58:3f:04:37:5b:94:fd: a0:e5:e2:2b:b6:e8:5b:c7:5e:75:17:48:ff:1c:26: 2c:cb:58:31:b2:1a:b4:f3:e6:a3:7e:ec:0f:b0:7c: d0:00:e1:d7:a0:6f:de:00:2e:b2:18:49:f8:cb:8c: ce:75:10:e2:9f:26:3f:7a:2a:6d:de:77:af:0a:03: a6:38:c5:53:7a:d4:98:ef:de:5b:68:c7:57:00:c3: 5e:f2:f1:d2:9b:0b:d0:27:b2:f2:bd:c6:b9:93:df: 5c:71:f2:e0:a6:bd:f2:50:d2:75:77:14:f5:99:a0: 0f:7d:25:45:6a:2a:a5:61:d2:38:1c:bd:07:92:6e: 57:2e:64:35:07:db:2a:9b:0b:b4:17:86:c7:38:aa: 02:28:a4:65:5f:08:2d:70:ba:5b:40:e9:6b:4e:04: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BB:F2:8D:8E:A3:16:EA:0F:8B:18:26:CF:28:2A:B3:03:0C:AE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/127b112e-de96-3488-960b-f35714a24c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bb:23:f8:ef:6c:5b:b4:c7:be:44:65:df:80:11:12:82:c8: 44:b9:ac:58:9a:d5:f8:5a:6b:b5:4e:1c:99:74:b7:a1:32:d8: 69:d9:c4:f5:eb:8a:a5:79:4e:6d:ff:f0:9b:35:95:6f:bd:e5: 72:36:85:11:07:f6:ae:ea:ab:e9:5b:3e:59:94:3b:e0:b9:f7: 3b:c4:8d:22:30:03:04:76:81:bf:36:52:b0:12:5d:33:eb:e4: 59:18:4c:0e:ce:bd:19:48:f1:bf:ab:00:0d:31:60:93:b5:a3: b8:4f:1f:a4:eb:7c:5e:cf:b0:e3:45:96:2d:84:cf:f3:84:e8: 66:c4:a8:db:b3:1d:8f:27:fa:90:cc:f5:c9:ac:fc:10:03:dd: 0d:5d:6a:92:81:7f:30:12:a6:74:c7:48:af:89:44:db:d8:a2: 38:06:99:47:a5:87:8b:61:e4:c3:2c:e0:af:31:12:e4:8c:06: 65:c5:20:86:d3:db:b1:a8:fb:94:6d:45:21:f7:99:ce:1e:88: ae:1e:09:cf:04:ea:c8:9f:51:58:eb:34:2f:a0:a5:5a:f5:cf: b5:3c:37:80:a6:b0:ef:37:e8:da:76:83:ca:96:80:1b:9d:70: 1d:ad:7a:c9:2d:b9:ef:22:14:09:29:b9:12:9a:0d:d5:6a:14: 29:7c:44:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0nJnGar+2ew0DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk NmRlMjAyNGItZjA5Yi00NzYyLWEyODktMGVjMTI3OGE1MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY26dKP15IcK3lwbYoJA3+aCPd6x+NlcIP0L p+O2FQkLMO66OjyXN7WQ0KvI39d5n6evtNQnaEAXtMrEAUvKPywBIQPForIaUJdt SZhbJids3fKFwxtQrpsDqLg3YaBTKFg/BDdblP2g5eIrtuhbx151F0j/HCYsy1gx shq08+ajfuwPsHzQAOHXoG/eAC6yGEn4y4zOdRDinyY/eipt3nevCgOmOMVTetSY 795baMdXAMNe8vHSmwvQJ7Lyvca5k99ccfLgpr3yUNJ1dxT1maAPfSVFaiqlYdI4 HL0Hkm5XLmQ1B9sqmwu0F4bHOKoCKKRlXwgtcLpbQOlrTgSCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS78o2OoxbqD4sYJs8oKrMDDK6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvMTI3YjExMmUtZGU5Ni0z NDg4LTk2MGItZjM1NzE0YTI0YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC7I/jvbFu0x75EZd+AERKCyES5rFia1fhaa7VOHJl0t6Ey2GnZxPXr iqV5Tm3/8Js1lW+95XI2hREH9q7qq+lbPlmUO+C59zvEjSIwAwR2gb82UrASXTPr 5FkYTA7OvRlI8b+rAA0xYJO1o7hPH6TrfF7PsONFli2Ez/OE6GbEqNuzHY8n+pDM 9cms/BAD3Q1dapKBfzASpnTHSK+JRNvYojgGmUelh4th5MMs4K8xEuSMBmXFIIbT 27Go+5RtRSH3mc4eiK4eCc8E6sifUVjrNC+gpVr1z7U8N4CmsO836Np2g8qWgBud cB2tesktue8iFAkpuRKaDdVqFCl8RJI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:37 2025 by rpki-client