$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa File: 78d25783-4242-3135-bbff-5e8d4fe93a38.roa (raw, json) Hash identifier: oafNRJJouKswvgf8ngkxPQneDxUhuvWL3pG8NM9uj/Y= Subject key identifier: D9:23:07:20:F7:F6:9B:8A:5B:D2:4A:B7:FE:5B:70:55:D5:C1:9E:56 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F432858491246AE783532C1455BC5E450 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 396356 IP address blocks: 172.98.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ae:78:35:32:c1:45:5b:c5:e4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=dc7c25d2-c65c-4adb-8bb2-deb805ac821a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:6a:cd:ba:33:a3:d5:25:d2:8a:53:73:33: c7:bd:ae:63:11:36:23:c2:5b:31:67:87:59:82:24: 3a:16:58:1f:57:28:6d:49:5f:5d:5f:0c:99:1e:36: be:13:12:f0:2a:35:63:a0:d7:6b:0c:47:29:f7:f3: 2f:23:f0:3d:5b:bd:6e:b4:24:4c:c1:70:f9:9f:8a: b3:f2:21:97:41:f2:9e:b9:84:d8:11:17:64:c0:68: 34:3d:f4:ef:1d:43:39:24:49:2e:93:0c:43:3b:33: 26:f7:27:4e:1b:d7:40:08:c7:c6:44:4d:1d:92:49: ef:87:ff:11:3a:b8:05:14:f4:ef:c9:bf:c4:2f:3f: c8:83:e4:28:80:6c:6e:e3:5f:64:f2:3b:a5:8e:c3: 00:10:cc:af:d8:3c:20:63:fa:57:61:88:66:02:7c: 5a:0b:88:c9:e3:3a:a7:c8:40:ff:31:d1:0b:3c:7a: cd:04:2c:ea:e2:22:ae:57:21:8a:5b:42:28:ce:96: 11:ed:bf:24:6a:89:b4:76:80:7a:92:1a:b3:bd:29: 25:6c:27:83:dd:6a:9e:67:cb:1e:0e:46:dd:44:19: b5:c6:e9:27:4e:37:a6:fb:dc:0b:19:81:ca:c7:0d: 84:99:73:6c:74:5f:15:4c:13:f2:45:53:ea:c4:d4: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:07:20:F7:F6:9B:8A:5B:D2:4A:B7:FE:5B:70:55:D5:C1:9E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ab:d1:85:b7:c0:64:e0:5a:4b:7b:6a:7c:37:9e:f8:cb:72: d8:57:d7:a8:29:b3:0c:8e:b4:42:19:6f:01:a1:83:d9:dc:48: 4d:11:48:d9:bb:99:ab:6e:c7:4e:1b:29:0a:5b:d6:67:13:bf: d9:d1:1c:0a:e4:81:b3:6e:a7:bb:44:90:99:df:bf:9d:f2:c6: 35:3b:22:00:b7:ba:77:bc:b4:cb:62:54:66:af:ad:c7:d5:40: 70:69:80:25:fb:1e:b8:6b:d6:c8:07:19:23:4e:9f:63:a8:44: bb:5f:e0:28:8a:7f:a9:6c:6f:37:e1:63:27:04:e5:87:11:65: 71:c4:2d:aa:5c:91:9e:41:1e:2a:ea:6c:bc:4f:b6:d0:08:83: f7:d2:15:34:ba:df:e1:d0:9b:53:1d:40:20:92:a6:86:7d:8f: 6f:3e:66:35:82:33:c7:a0:b0:17:a2:d0:93:63:3f:41:8e:c2: c5:14:c9:18:74:e7:71:6f:5b:f1:a2:16:2b:31:41:05:66:39: ba:33:b7:6b:55:a1:00:aa:d6:6f:67:a4:da:42:41:09:4b:d1: 16:d6:67:29:1c:ce:17:78:87:6d:83:d1:a8:89:e4:d0:22:ad: 49:d8:07:bc:96:d0:1b:59:99:21:00:13:f5:b4:58:28:bd:92: bf:bb:65:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq54NTLBRVvF5FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGM3YzI1ZDItYzY1Yy00YWRiLThiYjItZGViODA1YWM4MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPFqzbozo9Ul0opTczPHva5jETYjwlsxZ4dZ giQ6FlgfVyhtSV9dXwyZHja+ExLwKjVjoNdrDEcp9/MvI/A9W71utCRMwXD5n4qz 8iGXQfKeuYTYERdkwGg0PfTvHUM5JEkukwxDOzMm9ydOG9dACMfGRE0dkknvh/8R OrgFFPTvyb/ELz/Ig+QogGxu419k8juljsMAEMyv2DwgY/pXYYhmAnxaC4jJ4zqn yED/MdELPHrNBCzq4iKuVyGKW0IozpYR7b8kaom0doB6khqzvSklbCeD3WqeZ8se DkbdRBm1xuknTjem+9wLGYHKxw2EmXNsdF8VTBPyRVPqxNTesQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkjByD39puKW9JKt/5bcFXVwZ5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNzhkMjU3ODMtNDI0Mi0z MTM1LWJiZmYtNWU4ZDRmZTkzYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAar0YW3wGTgWkt7anw3nvjLcthX16gpswyOtEIZbwGhg9ncSE0RSNm7 matux04bKQpb1mcTv9nRHArkgbNup7tEkJnfv53yxjU7IgC3une8tMtiVGavrcfV QHBpgCX7Hrhr1sgHGSNOn2OoRLtf4CiKf6lsbzfhYycE5YcRZXHELapckZ5BHirq bLxPttAIg/fSFTS63+HQm1MdQCCSpoZ9j28+ZjWCM8egsBei0JNjP0GOwsUUyRh0 53FvW/GiFisxQQVmObozt2tVoQCq1m9npNpCQQlL0RbWZykczhd4h22D0aiJ5NAi rUnYB7yW0BtZmSEAE/W0WCi9kr+7ZcY= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:51 2025 by rpki-client