$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c705883-8d29-3c84-b799-060e3ec220bc.roa File: 3c705883-8d29-3c84-b799-060e3ec220bc.roa (raw, json) Hash identifier: pDUknOVOI/+C3Ck6TCJW070/J7apqXqDU2+YdVKKr8c= Subject key identifier: C0:84:B5:1E:CB:84:7D:97:5A:CE:1B:DE:61:60:48:5D:5C:AA:E6:16 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1CEEE3B33668BBE6E2DC0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c705883-8d29-3c84-b799-060e3ec220bc.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20001 IP address blocks: 98.157.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:ce:ee:3b:33:66:8b:be:6e:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=53991a35-f653-477b-b057-70c3c9a388b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:85:94:87:e7:5f:11:07:b2:b4:ed:fe:b7: c7:5a:bd:5c:ef:50:61:97:8c:8e:0f:63:e0:9f:6d: 3f:52:fb:e2:b4:e3:4b:41:45:2c:b7:c6:9c:96:70: 4a:14:32:47:1f:70:e6:c0:95:82:76:2a:8a:5a:1b: 60:4c:25:cb:1b:41:f5:7f:70:14:44:0d:62:ac:42: cd:19:10:ea:1f:45:d3:e1:92:94:ed:06:87:b8:92: 74:bf:5a:3a:2d:29:a8:47:38:51:af:1e:46:01:09: 09:83:16:d4:a7:cb:2d:5e:22:99:98:fd:5b:17:54: c5:db:a9:bc:f2:d1:d1:d3:29:92:2c:41:fc:d2:d4: 72:fa:96:34:6b:64:cf:c0:36:94:29:c6:cd:b3:e5: c4:ba:4c:80:18:07:2e:8a:a0:4e:49:ac:36:7f:8d: 34:cd:a0:b4:ad:d1:30:d2:86:4a:73:3f:a7:7f:fe: f7:0c:d5:e2:7b:a9:ee:d1:ee:8d:05:7c:fa:3b:62: ef:f0:4d:f4:1e:76:34:d5:a7:1d:7e:57:f2:e2:ec: ad:2d:11:4c:d7:ba:32:cf:bf:47:b4:dd:2a:4f:4c: 37:dd:d4:ad:76:1a:af:b7:ac:2b:a8:e2:c8:5b:f2: 46:35:b2:4f:29:22:e7:2d:06:73:5b:f4:f2:af:da: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:84:B5:1E:CB:84:7D:97:5A:CE:1B:DE:61:60:48:5D:5C:AA:E6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c705883-8d29-3c84-b799-060e3ec220bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.157.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:16:4b:d7:5c:a9:3b:0f:f1:87:af:05:84:ca:47:6e:6f:3f: 52:0e:70:69:cf:b6:5a:24:3a:9b:9e:7b:45:9b:0a:06:d5:13: c8:64:8a:14:17:c6:4b:de:86:5a:cf:33:fc:53:16:51:e1:58: 85:b4:66:9d:6a:8e:e1:5d:1f:69:9d:5f:89:43:04:e2:7b:ce: 44:c7:a4:ca:5f:fd:a3:be:8c:95:2a:52:2f:65:9a:3b:fe:14: 1c:5c:5d:cc:48:9d:84:4c:82:46:a3:e3:dd:93:96:a4:f2:65: d0:9f:78:80:99:f0:96:1b:cf:73:bf:fb:db:d5:61:20:7d:2c: 90:a7:50:aa:08:cc:2c:61:89:7c:5b:c0:f7:6b:39:57:ff:81: 31:0f:d2:81:ab:f1:04:6c:c6:8c:b6:48:f6:27:7c:56:d7:6e: 60:29:fd:44:9a:8a:83:a0:e1:7a:ee:16:47:d6:8a:cd:14:3e: dd:10:d1:d1:8a:7a:ff:27:e4:da:f8:97:bc:14:28:ce:14:a9: f1:67:13:42:bb:8f:10:b8:d7:48:36:45:33:9b:ce:a7:a7:91: c1:e5:33:c5:4e:88:9c:91:3a:19:a5:f5:55:24:3e:54:52:4e: fa:a2:1d:1d:86:1b:42:54:bd:52:9c:c0:06:68:84:c5:52:dd: 9e:fd:02:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0c7uOzNmi75uLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NTM5OTFhMzUtZjY1My00NzdiLWIwNTctNzBjM2M5YTM4OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthyFlIfnXxEHsrTt/rfHWr1c71Bhl4yOD2Pg n20/UvvitONLQUUst8aclnBKFDJHH3DmwJWCdiqKWhtgTCXLG0H1f3AURA1irELN GRDqH0XT4ZKU7QaHuJJ0v1o6LSmoRzhRrx5GAQkJgxbUp8stXiKZmP1bF1TF26m8 8tHR0ymSLEH80tRy+pY0a2TPwDaUKcbNs+XEukyAGAcuiqBOSaw2f400zaC0rdEw 0oZKcz+nf/73DNXie6nu0e6NBXz6O2Lv8E30HnY01acdflfy4uytLRFM17oyz79H tN0qT0w33dStdhqvt6wrqOLIW/JGNbJPKSLnLQZzW/Tyr9p39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCEtR7LhH2XWs4b3mFgSF1cquYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2M3MDU4ODMtOGQyOS0z Yzg0LWI3OTktMDYwZTNlYzIyMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIWS9dcqTsP8YevBYTKR25vP1IOcGnPtlokOpuee0WbCgbVE8hkihQX xkvehlrPM/xTFlHhWIW0Zp1qjuFdH2mdX4lDBOJ7zkTHpMpf/aO+jJUqUi9lmjv+ FBxcXcxInYRMgkaj492TlqTyZdCfeICZ8JYbz3O/+9vVYSB9LJCnUKoIzCxhiXxb wPdrOVf/gTEP0oGr8QRsxoy2SPYnfFbXbmAp/USaioOg4XruFkfWis0UPt0Q0dGK ev8n5Nr4l7wUKM4UqfFnE0K7jxC410g2RTObzqenkcHlM8VOiJyROhml9VUkPlRS TvqiHR2GG0JUvVKcwAZohMVS3Z79Aqo= -----END CERTIFICATE-----Generated at Sat Apr 5 22:44:46 2025 by rpki-client