$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa File: 78d25783-4242-3135-bbff-5e8d4fe93a38.roa (raw, json) Hash identifier: Z6rbbJ78KEo7yAEtssmmlq9/aoOU/JJpxCsH/AKHpW0= Subject key identifier: 7C:78:EE:E4:66:EB:83:33:6D:8D:45:5F:5E:54:67:11:C5:E3:66:8C Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F43285849F17FB856DC82E534BEAE66C0 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 396356 IP address blocks: 172.98.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b8:56:dc:82:e5:34:be:ae:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=40c2d1b2-6954-4d57-95d2-8a2a7fa9d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:7a:60:97:57:4e:41:df:ab:23:31:c9:ed: 1a:dc:72:0f:d8:e9:06:ae:1c:45:36:c2:d7:33:5a: 47:84:f8:06:48:14:24:61:c9:66:81:d7:15:9c:85: 4f:b8:8b:0a:c9:1b:4a:c9:04:5c:dd:df:7a:fb:f6: b3:d1:a5:6a:0a:dd:40:05:5b:4b:06:0c:8f:ea:99: 02:f8:30:8a:16:bf:b3:40:c4:a8:0c:92:26:cf:ad: 65:7b:bc:56:7a:ed:76:d7:0d:4d:89:19:e4:5e:04: 39:5f:ca:82:6e:56:3a:28:39:4e:ac:16:f2:db:01: 4e:d7:54:76:52:44:d7:12:ab:a8:64:f9:0f:29:f5: 57:24:f5:71:24:95:d6:bf:67:50:b9:24:95:2c:b5: 83:db:34:a3:f0:dd:0d:7c:54:26:e7:8b:03:c2:b7: 6d:da:fb:ac:b7:cd:a6:11:5d:1f:30:65:b7:36:bb: 77:c0:6a:69:6f:02:1e:32:7c:77:1e:46:bf:5a:b0: 3e:d7:31:dd:28:03:29:55:70:96:9b:c7:7e:73:b7: 39:e1:36:05:e1:d3:7a:8d:4d:39:f0:76:5a:d7:d6: ca:94:d1:5d:95:73:d3:14:74:0a:25:e2:72:59:24: fc:7f:c0:77:fe:07:69:e9:e0:3a:e6:6d:10:07:71: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:EE:E4:66:EB:83:33:6D:8D:45:5F:5E:54:67:11:C5:E3:66:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ef:3e:b4:77:30:11:74:96:4a:5f:40:1a:be:9c:d8:34:b2: 23:25:85:6b:ec:61:53:bf:30:03:01:4c:f9:87:e1:46:99:77: b9:46:31:9f:a2:f7:7e:22:a6:83:f9:85:10:ea:1f:2c:f9:ce: 17:9f:30:bb:b2:be:9c:dd:e7:4c:29:47:e2:98:7b:6e:e1:10: cd:1e:8b:15:be:94:e9:97:5e:c2:0f:81:c9:f0:77:0d:36:72: a9:ff:5c:0d:0d:bd:c7:5d:9a:ca:da:58:d0:87:00:12:f8:62: da:d0:29:ad:f1:eb:23:f1:13:1c:2d:63:04:cb:b7:24:75:77: f3:96:5e:ea:89:4a:2d:af:db:de:cf:b4:ec:32:3f:67:f6:04: 0f:7d:fe:a0:fe:82:8d:b5:5e:ed:db:eb:a3:b4:84:fe:d6:d4: db:5b:1b:0d:1d:4d:c2:84:e0:20:d6:67:ae:d6:47:15:d7:a9: b3:45:0d:c5:dc:95:56:48:47:1d:8c:9d:01:28:d7:b3:38:f3: ac:11:02:6f:1f:62:ba:4c:b1:24:66:84:fa:d4:56:60:78:77: cc:a5:cf:03:f2:a0:56:db:ba:34:52:4c:fb:62:63:56:c5:df: c8:23:a1:24:c7:5b:84:13:8a:6f:94:47:94:cd:09:d4:9f:c7: 9e:8f:1e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7hW3ILlNL6uZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDBjMmQxYjItNjk1NC00ZDU3LTk1ZDItOGEyYTdmYTlkMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbh6YJdXTkHfqyMxye0a3HIP2OkGrhxFNsLX M1pHhPgGSBQkYclmgdcVnIVPuIsKyRtKyQRc3d96+/az0aVqCt1ABVtLBgyP6pkC +DCKFr+zQMSoDJImz61le7xWeu121w1NiRnkXgQ5X8qCblY6KDlOrBby2wFO11R2 UkTXEquoZPkPKfVXJPVxJJXWv2dQuSSVLLWD2zSj8N0NfFQm54sDwrdt2vust82m EV0fMGW3Nrt3wGppbwIeMnx3Hka/WrA+1zHdKAMpVXCWm8d+c7c54TYF4dN6jU05 8HZa19bKlNFdlXPTFHQKJeJyWST8f8B3/gdp6eA65m0QB3FNZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx47uRm64MzbY1FX15UZxHF42aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNzhkMjU3ODMtNDI0Mi0z MTM1LWJiZmYtNWU4ZDRmZTkzYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXvPrR3MBF0lkpfQBq+nNg0siMlhWvsYVO/MAMBTPmH4UaZd7lGMZ+i 934ipoP5hRDqHyz5zhefMLuyvpzd50wpR+KYe27hEM0eixW+lOmXXsIPgcnwdw02 cqn/XA0NvcddmsraWNCHABL4YtrQKa3x6yPxExwtYwTLtyR1d/OWXuqJSi2v297P tOwyP2f2BA99/qD+go21Xu3b66O0hP7W1NtbGw0dTcKE4CDWZ67WRxXXqbNFDcXc lVZIRx2MnQEo17M486wRAm8fYrpMsSRmhPrUVmB4d8ylzwPyoFbbujRSTPtiY1bF 38gjoSTHW4QTim+UR5TNCdSfx56PHls= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:54 2025 by rpki-client