$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/08b9641a-64e1-390d-86b9-1c40571c09e4.roa File: 08b9641a-64e1-390d-86b9-1c40571c09e4.roa (raw, json) Hash identifier: +rERcJDEaVCTh36WmDVe+QWDXLIP57Wp2Ja8nR5VFbU= Subject key identifier: CE:1D:F8:97:B4:38:27:B5:71:83:5C:58:1C:8C:28:AE:A8:0E:6F:89 Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F43285848BD20E6223FF85B5681398280 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/08b9641a-64e1-390d-86b9-1c40571c09e4.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 137443 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e6:22:3f:f8:5b:56:81:39:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=b9bb9d6c-f625-4a24-b7a8-0e78d73f8772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:b6:16:c1:d9:5d:19:e6:71:87:b3:0f:8a: 12:c7:3c:42:00:10:33:f6:be:42:d2:0f:a6:e1:1f: af:2b:37:e9:95:0e:87:09:8f:6c:7c:50:96:d8:cc: 7e:13:fd:0d:e7:d8:21:96:b2:0b:86:5e:6f:2d:c8: bd:5b:3f:8d:99:3b:ee:46:7c:c3:44:73:c1:c1:dd: 60:e5:18:4a:1a:fb:1c:98:fc:f3:0a:19:cc:23:e4: 05:0e:05:88:b9:fe:6f:3e:3a:7d:19:66:bd:72:d3: 5a:b8:da:69:72:dd:39:78:c8:28:35:60:75:42:00: 78:35:1c:60:37:f0:dd:b7:8d:ec:d6:d6:1e:f7:e5: a7:72:52:c1:09:af:61:25:80:a4:06:85:6b:23:58: 62:1e:31:66:88:da:17:cb:1f:22:73:65:0b:46:c3: 0b:76:7a:44:e8:f8:fc:d2:f9:7b:dc:37:06:a9:04: 28:b2:37:39:6b:7f:44:49:76:20:7f:bd:cd:a4:69: e2:03:ad:ef:15:29:79:1c:88:68:66:77:31:31:8e: 08:7d:01:03:98:8f:a4:fa:63:e0:32:6d:9f:13:d9: d6:45:f5:10:23:d3:fb:08:a5:7e:2e:3d:b1:df:bf: 41:a9:26:fd:eb:6a:6a:15:e7:6e:96:d0:a6:5f:31: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1D:F8:97:B4:38:27:B5:71:83:5C:58:1C:8C:28:AE:A8:0E:6F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/08b9641a-64e1-390d-86b9-1c40571c09e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0d:07:79:99:a3:f9:a3:da:0a:d5:63:f7:01:a4:57:03:92: 1d:91:b9:f5:d5:e1:74:51:23:e1:49:59:69:13:cc:85:fb:9f: f5:5e:0d:0d:b5:cd:27:f7:66:09:b3:de:07:02:ce:e7:46:ce: dc:40:cb:a4:8f:a1:d4:64:60:f2:9f:30:99:ef:38:7a:98:d2: 81:c7:26:26:76:0c:dc:fc:18:47:44:bf:d9:03:5a:fe:b6:d8: 09:6f:8c:b6:b8:7a:b1:aa:b8:dc:79:06:bc:21:88:46:47:56: ba:a2:ee:ce:a3:4a:87:e1:60:56:95:35:b3:6e:68:3a:46:e8: 85:35:b3:ac:6e:8a:64:23:5a:0b:4a:bd:ca:2c:47:63:39:51: 1d:2b:96:6e:51:0e:39:6a:f1:8e:f5:b5:2c:a7:bb:27:78:96: 62:3c:f9:54:fb:c5:66:51:7e:19:38:25:1c:85:3d:63:e8:0a: 89:bf:8e:a1:18:8a:4e:60:9c:48:a8:30:e2:0a:8a:d9:6a:00: 8f:fb:aa:39:27:9f:2b:62:4f:e6:1e:df:d4:c9:92:93:de:f0: bf:6e:60:4f:49:82:dc:28:9f:20:46:24:e6:6c:2c:d5:cc:91: 92:7f:c3:f2:f5:31:a2:0a:95:1f:8a:d9:9c:79:3a:bc:7d:53: 99:f3:24:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOYiP/hbVoE5goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk YjliYjlkNmMtZjYyNS00YTI0LWI3YTgtMGU3OGQ3M2Y4NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHS2FsHZXRnmcYezD4oSxzxCABAz9r5C0g+m 4R+vKzfplQ6HCY9sfFCW2Mx+E/0N59ghlrILhl5vLci9Wz+NmTvuRnzDRHPBwd1g 5RhKGvscmPzzChnMI+QFDgWIuf5vPjp9GWa9ctNauNppct05eMgoNWB1QgB4NRxg N/Ddt43s1tYe9+WnclLBCa9hJYCkBoVrI1hiHjFmiNoXyx8ic2ULRsMLdnpE6Pj8 0vl73DcGqQQosjc5a39ESXYgf73NpGniA63vFSl5HIhoZncxMY4IfQEDmI+k+mPg Mm2fE9nWRfUQI9P7CKV+Lj2x379BqSb962pqFedultCmXzFhdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4d+Je0OCe1cYNcWByMKK6oDm+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvMDhiOTY0MWEtNjRlMS0z OTBkLTg2YjktMWM0MDU3MWMwOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwNB3mZo/mj2grVY/cBpFcDkh2RufXV4XRRI+FJWWkTzIX7n/VeDQ21 zSf3Zgmz3gcCzudGztxAy6SPodRkYPKfMJnvOHqY0oHHJiZ2DNz8GEdEv9kDWv62 2AlvjLa4erGquNx5BrwhiEZHVrqi7s6jSofhYFaVNbNuaDpG6IU1s6xuimQjWgtK vcosR2M5UR0rlm5RDjlq8Y71tSynuyd4lmI8+VT7xWZRfhk4JRyFPWPoCom/jqEY ik5gnEioMOIKitlqAI/7qjknnytiT+Ye39TJkpPe8L9uYE9JgtwonyBGJOZsLNXM kZJ/w/L1MaIKlR+K2Zx5Orx9U5nzJJ0= -----END CERTIFICATE-----Generated at Sat Apr 5 02:27:32 2025 by rpki-client