$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b9ca719-96f1-3639-a28d-e270aed7df0d.roa File: 9b9ca719-96f1-3639-a28d-e270aed7df0d.roa (raw, json) Hash identifier: hgytld3ctASkjpZ0jZJ58ffJQVFkFdEYfKBKjJGmNDc= Subject key identifier: C9:6E:7D:17:FC:96:02:16:58:AB:A6:C7:C9:E5:E7:73:2C:73:FC:DD Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849011AE3441112D52C76992200 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b9ca719-96f1-3639-a28d-e270aed7df0d.roa Signing time: Tue 25 Feb 2025 22:23:49 +0000 ROA not before: Tue 25 Feb 2025 22:23:49 +0000 ROA not after: Mon 26 May 2025 21:23:49 +0000 asID: 20001 IP address blocks: 98.147.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:1a:e3:44:11:12:d5:2c:76:99:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 25 22:23:49 2025 GMT Not After : May 26 21:23:49 2025 GMT Subject: CN=02a5d60b-3a8d-47ba-80ee-39b9f4cef875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:e6:96:54:ad:38:b9:6f:d9:88:7c:d5:b7: 76:22:fb:02:f1:c7:55:46:a9:07:18:37:a2:dc:e2: 26:95:1c:8d:dd:e9:65:de:23:c5:92:6d:98:5c:30: 39:1c:79:21:94:a2:6f:c1:9a:67:ac:ef:b6:86:01: ad:af:e5:0b:85:5b:1e:df:2b:ea:a8:8f:df:12:81: b0:b7:15:e1:78:04:30:5d:35:7b:92:2c:8d:ba:12: 1a:c1:df:7c:9a:50:4a:01:01:81:83:d3:e9:1b:1a: d2:50:da:2a:dc:f2:7b:87:d0:9f:00:cf:f5:82:7b: 01:a1:bc:37:ea:f6:c8:5a:39:7e:91:03:d2:66:a9: 6f:82:ee:cb:ce:81:f8:c2:a3:02:4e:14:8d:06:af: c3:68:3f:ee:cd:4f:31:2b:ba:13:70:a1:8e:6b:20: e5:77:06:7c:de:0e:c1:0c:4b:5c:18:e7:34:38:99: e9:18:df:5f:d3:c8:fe:ae:9f:c0:d7:1c:51:79:58: f6:76:2b:3b:60:30:87:9b:3e:f9:10:e8:49:18:8a: 99:69:73:7e:cb:1b:31:6f:00:34:68:96:b8:32:04: 0c:c5:79:de:75:ea:de:59:f9:c6:37:17:d3:bc:96: d6:63:a6:cf:ac:d5:f4:e9:7f:9c:1b:a4:14:4f:38: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:7D:17:FC:96:02:16:58:AB:A6:C7:C9:E5:E7:73:2C:73:FC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b9ca719-96f1-3639-a28d-e270aed7df0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.147.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4c:2c:6a:1d:d4:08:1e:41:b2:b8:4b:8f:c1:43:76:d3:83: 8a:53:2e:79:45:6d:df:49:b5:de:6a:ac:ef:95:92:46:b3:bc: 3d:97:ca:d3:43:34:2e:ea:11:69:3f:a4:4d:62:59:4e:80:09: bd:8d:08:71:42:e0:18:cc:a6:59:81:10:00:0c:63:81:35:8f: 74:6a:92:1e:12:7c:f8:b6:0a:3e:72:66:a4:40:0b:bf:86:30: a1:7e:73:f5:d9:97:f1:76:f3:b9:60:2c:ff:3b:f1:9c:52:c9: cf:85:f2:2a:c3:ce:e8:81:8b:ae:42:c5:14:a6:c5:8b:24:aa: 58:28:bf:05:c3:e8:28:a6:01:4d:07:f0:12:2e:c2:e7:00:8a: d6:e5:88:ba:84:7a:c2:bc:94:24:db:24:1c:bb:81:4e:4d:d2: 89:dd:c5:5c:30:96:4b:7f:98:87:93:5e:c0:af:9e:9c:30:05: 08:a2:8d:f3:a4:ea:ab:62:c2:a9:2f:15:1c:6f:5e:28:ce:9e: b8:94:a2:6c:b5:52:7c:dc:cb:15:de:f2:17:e6:f8:2c:27:a1: 8b:50:32:5d:bf:4b:4a:70:31:63:7d:a9:31:37:1a:a1:20:b3: 65:94:f3:f5:ec:c7:63:46:72:32:15:92:bb:1c:d8:3b:96:12: 9f:ff:ea:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkBGuNEERLVLHaZIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIyNTIyMjM0OVoXDTI1MDUyNjIxMjM0OVowLzEtMCsGA1UEAxMk MDJhNWQ2MGItM2E4ZC00N2JhLTgwZWUtMzliOWY0Y2VmODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmDmllStOLlv2Yh81bd2IvsC8cdVRqkHGDei 3OImlRyN3ell3iPFkm2YXDA5HHkhlKJvwZpnrO+2hgGtr+ULhVse3yvqqI/fEoGw txXheAQwXTV7kiyNuhIawd98mlBKAQGBg9PpGxrSUNoq3PJ7h9CfAM/1gnsBobw3 6vbIWjl+kQPSZqlvgu7LzoH4wqMCThSNBq/DaD/uzU8xK7oTcKGOayDldwZ83g7B DEtcGOc0OJnpGN9f08j+rp/A1xxReVj2dis7YDCHmz75EOhJGIqZaXN+yxsxbwA0 aJa4MgQMxXnedereWfnGNxfTvJbWY6bPrNX06X+cG6QUTzjuuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlufRf8lgIWWKumx8nl53Msc/zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOWI5Y2E3MTktOTZmMS0z NjM5LWEyOGQtZTI3MGFlZDdkZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYpN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5MLGod1AgeQbK4S4/BQ3bTg4pTLnlFbd9Jtd5qrO+VkkazvD2XytND NC7qEWk/pE1iWU6ACb2NCHFC4BjMplmBEAAMY4E1j3Rqkh4SfPi2Cj5yZqRAC7+G MKF+c/XZl/F287lgLP878ZxSyc+F8irDzuiBi65CxRSmxYskqlgovwXD6CimAU0H 8BIuwucAitbliLqEesK8lCTbJBy7gU5N0ondxVwwlkt/mIeTXsCvnpwwBQiijfOk 6qtiwqkvFRxvXijOnriUomy1UnzcyxXe8hfm+CwnoYtQMl2/S0pwMWN9qTE3GqEg s2WU8/Xsx2NGcjIVkrsc2DuWEp//6mI= -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:10 2025 by rpki-client