$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa File: 78d25783-4242-3135-bbff-5e8d4fe93a38.roa (raw, json) Hash identifier: /7TR5acFDLCqCgusVbk8ZKNU30Kt8IL+KNbICXJ6Mrc= Subject key identifier: A1:01:06:3E:A7:7F:E1:2C:5E:BE:93:F6:64:8C:0D:52:F6:0A:BA:10 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584832F02D56F056FD0515F0DDC0 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 396356 IP address blocks: 172.98.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:2d:56:f0:56:fd:05:15:f0:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=1a8cd601-3995-478d-89fa-bacc1b037f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:55:93:8a:1d:47:2f:db:d9:6d:7a:4a:ad: bb:48:e5:40:7f:c9:ae:ed:0c:df:45:35:89:5f:da: 24:4c:16:6a:79:8f:e6:7d:0a:77:1c:77:42:7d:a4: fa:ff:93:0f:06:d8:6d:46:df:f1:d1:23:78:53:74: b4:97:36:10:41:20:e2:60:eb:13:94:d5:3b:27:eb: 35:6b:5e:80:e7:15:af:6e:34:8a:0f:e4:68:2a:b5: 3a:1e:39:cc:69:89:0d:28:82:a2:e7:9d:4f:4c:7d: 6d:4e:6b:54:28:dd:4e:de:a6:45:ef:48:69:e2:6f: 6d:9c:c4:d3:d2:26:2b:f2:ac:5a:eb:a2:e0:0b:24: 72:28:cd:2f:7b:f1:e5:e3:59:bf:76:d5:bc:41:3f: 21:65:1a:76:29:75:c2:f9:dd:7c:05:df:0d:15:2d: 2a:cb:53:bd:36:52:0e:65:93:89:43:ad:27:97:61: 90:a3:e2:fe:c3:09:57:34:e0:f5:30:07:ff:57:ef: 92:37:14:5f:49:a7:1f:31:14:04:3c:51:9e:47:14: 8e:a7:58:ec:c7:ac:9e:4b:e4:75:15:a2:a1:a5:4a: e3:5a:8d:dd:e4:da:27:6f:b8:0d:59:bf:db:5a:e3: a4:76:d5:e8:ea:f8:79:63:ff:be:41:66:40:67:42: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:01:06:3E:A7:7F:E1:2C:5E:BE:93:F6:64:8C:0D:52:F6:0A:BA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:48:e1:85:6d:67:c8:a2:c6:6c:9a:e9:76:cd:11:26:cb:67: cb:39:b9:4a:32:67:d7:ca:a6:9b:f3:08:aa:f0:94:37:db:cd: 5a:26:e9:40:15:b0:0e:16:3d:eb:ae:44:c6:58:30:ca:70:a8: fb:fa:71:96:e6:24:95:6a:d1:69:6f:d2:2b:17:98:f5:de:38: 93:45:ac:32:23:b6:e9:04:b8:dc:ed:4b:d5:6a:b1:34:a3:16: 12:70:2a:9f:26:fb:a2:da:12:6f:bd:26:36:10:51:d3:07:60: 48:a2:d8:4b:d8:a2:dc:e6:fe:fb:84:62:0d:cf:87:c6:e3:0c: 71:7a:c6:2a:a6:15:3d:61:24:dd:01:9e:c2:22:01:00:1c:6f: b4:40:6f:af:45:3b:d8:a8:2b:3f:2a:be:64:f8:a3:67:79:9a: 8b:93:88:ee:43:67:45:03:a4:3f:a2:7f:23:f5:8a:fc:17:2a: 0c:34:6c:66:f6:d1:28:c6:26:79:d4:62:2b:d1:47:64:ab:5c: 1f:b8:01:ef:61:ba:eb:fd:e8:f4:f4:bd:15:52:25:28:9a:ae: 11:47:a0:0b:c3:47:d4:c9:02:ef:1e:14:5b:d7:44:fc:2b:85: 61:33:71:f8:b9:8c:6a:a8:15:54:42:36:80:79:56:4b:b4:07: ab:2d:35:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8C1W8Fb9BRXw3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk MWE4Y2Q2MDEtMzk5NS00NzhkLTg5ZmEtYmFjYzFiMDM3ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGtVk4odRy/b2W16Sq27SOVAf8mu7QzfRTWJ X9okTBZqeY/mfQp3HHdCfaT6/5MPBthtRt/x0SN4U3S0lzYQQSDiYOsTlNU7J+s1 a16A5xWvbjSKD+RoKrU6HjnMaYkNKIKi551PTH1tTmtUKN1O3qZF70hp4m9tnMTT 0iYr8qxa66LgCyRyKM0ve/Hl41m/dtW8QT8hZRp2KXXC+d18Bd8NFS0qy1O9NlIO ZZOJQ60nl2GQo+L+wwlXNOD1MAf/V++SNxRfSacfMRQEPFGeRxSOp1jsx6yeS+R1 FaKhpUrjWo3d5Nonb7gNWb/bWuOkdtXo6vh5Y/++QWZAZ0IqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEBBj6nf+EsXr6T9mSMDVL2CroQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNzhkMjU3ODMtNDI0Mi0z MTM1LWJiZmYtNWU4ZDRmZTkzYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZI4YVtZ8iixmya6XbNESbLZ8s5uUoyZ9fKppvzCKrwlDfbzVom6UAV sA4WPeuuRMZYMMpwqPv6cZbmJJVq0Wlv0isXmPXeOJNFrDIjtukEuNztS9VqsTSj FhJwKp8m+6LaEm+9JjYQUdMHYEii2EvYotzm/vuEYg3Ph8bjDHF6xiqmFT1hJN0B nsIiAQAcb7RAb69FO9ioKz8qvmT4o2d5mouTiO5DZ0UDpD+ifyP1ivwXKgw0bGb2 0SjGJnnUYivRR2SrXB+4Ae9huuv96PT0vRVSJSiarhFHoAvDR9TJAu8eFFvXRPwr hWEzcfi5jGqoFVRCNoB5Vku0B6stNeY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:45 2025 by rpki-client