$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa File: 6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa (raw, json) Hash identifier: x8DI3ylZYo1Ya9EdeUTlE61ArsV7MSbeEQWn67CLF8c= Subject key identifier: E0:54:2B:09:67:61:81:6D:48:7A:64:42:A9:43:1A:9A:FD:F6:C4:7C Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F432858491246AE89051DB96549F37320 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 206092 IP address blocks: 172.98.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ae:89:05:1d:b9:65:49:f3:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1833cd82-319a-4187-96be-a9f547c71bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:4d:cb:ea:75:db:5c:34:97:b6:03:b6:fc: 1b:a6:35:e1:28:f8:54:46:10:f0:19:6d:7f:5d:bd: 69:fd:75:bb:ea:4b:f0:a4:2e:5c:eb:91:70:da:c5: 5a:74:db:d4:cc:7c:01:c6:93:14:a5:76:e8:65:35: c3:e9:07:a1:09:15:cb:93:e8:f6:6d:a6:37:12:35: cc:7f:09:2d:6b:87:63:c1:7a:7b:91:08:30:a2:17: b0:36:58:a9:47:b8:9f:1d:36:1b:f9:c8:30:46:4b: 80:f0:44:a7:f5:8d:0d:c7:3e:28:df:54:61:5e:13: f5:d6:e6:ac:1c:64:9d:e4:bf:83:49:fd:cb:7b:2a: bc:20:7a:29:ce:80:6a:84:ee:94:3e:2e:63:2c:ce: 4a:89:96:5d:2e:a4:b6:77:ba:79:6f:0a:9f:ea:90: a8:ae:ae:7b:d9:70:48:20:df:59:66:63:06:99:9c: a4:ac:81:8f:91:f6:1f:c5:25:8f:d1:b6:48:e3:a4: 4b:59:47:17:d9:be:e8:d4:8f:ae:4f:98:a1:62:ab: c7:0c:05:22:2e:53:52:54:62:f1:30:e4:34:3a:3f: 3f:85:42:41:31:47:4c:be:e1:88:07:9b:b5:77:46: 5b:46:57:84:e4:5e:c5:d9:30:75:7e:38:af:b9:e6: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:54:2B:09:67:61:81:6D:48:7A:64:42:A9:43:1A:9A:FD:F6:C4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c8:bf:d3:f5:13:52:3c:f2:5a:df:96:3a:e9:18:87:63:1d: 1a:55:50:32:fb:55:81:41:d7:e1:3d:ad:68:ab:17:13:1f:7e: 47:9e:c2:1a:a9:11:90:0e:0f:27:ed:ce:fb:f0:44:42:7c:d0: 4f:ef:ba:74:29:d7:7e:a9:d7:b6:bc:8c:27:2d:83:58:8d:f3: 12:bf:23:0b:17:eb:b8:09:d4:43:0e:04:0b:94:19:d8:8c:fa: 43:92:b7:22:ee:c9:a8:dc:f9:71:b2:3d:11:60:40:eb:af:f7: c3:f5:47:5b:1e:91:45:47:1a:21:d0:59:f6:90:73:2f:3f:28: 2b:58:91:58:f1:22:b6:52:fe:d0:ed:ee:d3:35:b6:fa:70:76: 0c:38:29:08:a3:b3:55:94:c0:d3:7f:ae:48:a2:be:50:43:66: 00:09:59:46:1c:c6:79:a6:64:ec:3a:01:ea:5b:77:55:ff:0f: c5:06:8c:86:2e:be:5c:48:0c:d7:a2:d8:cd:1a:e9:55:a7:df: d0:bf:1d:cc:96:99:d2:49:b8:c6:98:b4:15:54:ab:1a:96:1d: 9d:5f:29:26:9d:dc:ca:6e:39:32:46:40:87:e1:07:cf:87:12: 3a:4f:9f:98:cc:f9:d3:ac:4c:0d:3e:79:5f:ad:a4:6e:a1:1e: 60:8a:25:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq6JBR25ZUnzcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTgzM2NkODItMzE5YS00MTg3LTk2YmUtYTlmNTQ3YzcxYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmxNy+p121w0l7YDtvwbpjXhKPhURhDwGW1/ Xb1p/XW76kvwpC5c65Fw2sVadNvUzHwBxpMUpXboZTXD6QehCRXLk+j2baY3EjXM fwkta4djwXp7kQgwohewNlipR7ifHTYb+cgwRkuA8ESn9Y0Nxz4o31RhXhP11uas HGSd5L+DSf3Leyq8IHopzoBqhO6UPi5jLM5KiZZdLqS2d7p5bwqf6pCorq572XBI IN9ZZmMGmZykrIGPkfYfxSWP0bZI46RLWUcX2b7o1I+uT5ihYqvHDAUiLlNSVGLx MOQ0Oj8/hUJBMUdMvuGIB5u1d0ZbRleE5F7F2TB1fjivuebh1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBUKwlnYYFtSHpkQqlDGpr99sR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNmQyNWE4YWItZjdkMS0z NTFmLThlMmUtYmQ1YzYwODZmZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDIv9P1E1I88lrfljrpGIdjHRpVUDL7VYFB1+E9rWirFxMffkeewhqp EZAODyftzvvwREJ80E/vunQp136p17a8jCctg1iN8xK/IwsX67gJ1EMOBAuUGdiM +kOStyLuyajc+XGyPRFgQOuv98P1R1sekUVHGiHQWfaQcy8/KCtYkVjxIrZS/tDt 7tM1tvpwdgw4KQijs1WUwNN/rkiivlBDZgAJWUYcxnmmZOw6Aepbd1X/D8UGjIYu vlxIDNei2M0a6VWn39C/HcyWmdJJuMaYtBVUqxqWHZ1fKSad3MpuOTJGQIfhB8+H EjpPn5jM+dOsTA0+eV+tpG6hHmCKJSk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:37 2025 by rpki-client