$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa File: 8d352a99-b26f-325a-8066-4e236b1102a1.roa (raw, json) Hash identifier: 5Rhr/XzUAE4eEWjHxL+ZibAh5P8lqt/7BJYfhQI/ya8= Subject key identifier: E4:3D:83:71:1F:AE:05:17:2A:E7:86:4F:0C:B9:FF:C1:60:99:47:B8 Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F43285848BD20E5180E309CD834590D00 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 134365 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e5:18:0e:30:9c:d8:34:59:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=de131d88-d8ca-4a67-b4b0-07ba1c92a12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:b2:86:6b:86:8a:15:7e:32:8d:1b:86:b7: c7:12:2a:f9:c0:22:f2:b7:7b:e6:79:f5:71:93:cc: b8:dc:7b:03:92:79:99:74:ea:64:21:83:62:45:96: e6:b4:47:73:74:1b:6f:a5:8d:55:cf:00:aa:4b:a6: 1c:0d:2b:03:a7:a1:88:ee:94:a1:ae:42:b8:39:c1: 4a:0d:3f:aa:33:3f:0e:3b:d3:84:bc:00:7e:02:2e: fb:67:c8:44:79:27:61:5b:dc:9f:b1:34:5a:2c:2b: aa:ed:de:c9:49:67:77:69:51:fc:c3:0b:bb:08:f9: e4:0c:9f:b4:0f:c4:03:3b:6c:23:59:12:ae:be:9a: 2d:f1:3f:41:99:a9:bf:6e:03:f7:9a:34:8e:5c:70: 01:de:9b:ed:c9:b7:c8:40:da:85:7c:f8:34:76:fb: 63:3b:10:34:5f:45:3a:43:fb:8d:36:79:1c:8e:51: ae:55:32:31:09:d9:5b:58:fa:ae:66:04:9e:96:b5: 88:f7:8b:23:17:95:91:e6:aa:68:bd:86:5d:03:a9: 75:1e:9b:f7:eb:85:8d:3c:9f:22:6d:d7:00:e5:45: 8e:b9:d1:c5:3f:3d:90:f3:55:38:33:e6:1e:c2:5d: 72:70:c6:6e:38:f4:cf:84:a8:fe:3e:0b:48:78:08: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:83:71:1F:AE:05:17:2A:E7:86:4F:0C:B9:FF:C1:60:99:47:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3e:60:a9:d0:73:35:5c:7c:57:28:a3:81:2d:30:f9:aa:87: 9c:3a:c5:06:52:09:00:a1:c6:a0:c0:66:7d:e3:28:72:a4:fe: a6:d4:6f:92:e2:a5:18:44:15:45:f8:40:30:1d:d8:8c:ec:9e: 12:4a:95:b1:52:0c:88:1b:5c:d6:4c:57:a1:4e:bf:66:9a:cb: d9:6f:4e:d6:ee:98:d9:84:a9:a7:0e:d6:c6:a1:f9:01:4b:11: 1a:60:3f:d5:5c:1a:20:50:4a:17:cd:0c:25:24:6a:24:97:b8: b3:98:18:c9:b3:33:84:8f:83:3e:8d:08:c2:7b:6a:64:98:2d: d3:b6:78:90:b2:31:e5:7b:cf:4f:1f:dc:50:1c:c9:ab:d6:92: 1a:aa:43:d2:f3:ab:e2:86:07:af:1d:96:37:fb:67:35:a7:25: f3:d7:fe:9f:61:2a:97:cd:1f:38:04:20:3b:31:49:f3:96:ee: 7b:17:f1:30:08:63:be:74:46:01:25:8a:5e:89:bd:c7:0e:d2: 42:58:5b:be:6e:f7:28:f5:85:13:df:46:fc:2c:ea:d3:78:b5: c0:30:da:ec:b5:1c:5a:c2:9b:66:b7:24:f7:60:15:7a:93:88: a7:bb:ce:45:aa:9f:59:3e:55:0e:45:64:72:0f:6c:69:3c:1a: 53:73:3f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOUYDjCc2DRZDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZGUxMzFkODgtZDhjYS00YTY3LWI0YjAtMDdiYTFjOTJhMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g+yhmuGihV+Mo0bhrfHEir5wCLyt3vmefVx k8y43HsDknmZdOpkIYNiRZbmtEdzdBtvpY1VzwCqS6YcDSsDp6GI7pShrkK4OcFK DT+qMz8OO9OEvAB+Ai77Z8hEeSdhW9yfsTRaLCuq7d7JSWd3aVH8wwu7CPnkDJ+0 D8QDO2wjWRKuvpot8T9Bmam/bgP3mjSOXHAB3pvtybfIQNqFfPg0dvtjOxA0X0U6 Q/uNNnkcjlGuVTIxCdlbWPquZgSelrWI94sjF5WR5qpovYZdA6l1Hpv364WNPJ8i bdcA5UWOudHFPz2Q81U4M+Yewl1ycMZuOPTPhKj+PgtIeAigSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ9g3EfrgUXKueGTwy5/8FgmUe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvOGQzNTJhOTktYjI2Zi0z MjVhLTgwNjYtNGUyMzZiMTEwMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8+YKnQczVcfFcoo4EtMPmqh5w6xQZSCQChxqDAZn3jKHKk/qbUb5Li pRhEFUX4QDAd2IzsnhJKlbFSDIgbXNZMV6FOv2aay9lvTtbumNmEqacO1sah+QFL ERpgP9VcGiBQShfNDCUkaiSXuLOYGMmzM4SPgz6NCMJ7amSYLdO2eJCyMeV7z08f 3FAcyavWkhqqQ9Lzq+KGB68dljf7ZzWnJfPX/p9hKpfNHzgEIDsxSfOW7nsX8TAI Y750RgElil6JvccO0kJYW75u9yj1hRPfRvws6tN4tcAw2uy1HFrCm2a3JPdgFXqT iKe7zkWqn1k+VQ5FZHIPbGk8GlNzP4c= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:54 2025 by rpki-client