$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json) Hash identifier: /QxpCWoEIoFwpUHgCEuX/cPzUeqB6rEbe4Z+4u7C458= Subject key identifier: 13:2D:83:38:02:64:CD:2E:A0:87:9E:CC:A3:87:6D:F4:CE:8B:B7:63 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F43285848F926B07A37EC9E37A765B9E0 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 6206 IP address blocks: 172.98.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b0:7a:37:ec:9e:37:a7:65:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=1e89862a-82ca-4596-8747-4cc870143e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:3d:9e:70:9a:83:cb:b9:24:09:bf:c6:53: d5:9d:1d:ce:23:d2:38:04:5d:88:cf:d0:1d:b3:9b: 3e:67:4f:71:27:d4:50:1b:dd:64:37:63:12:e0:55: c7:5e:f5:16:ab:d4:0a:01:5a:b0:76:a0:c2:da:f9: 4e:b5:42:85:8d:a3:6d:1f:3f:1f:fa:5a:19:dd:ac: 27:20:b1:5f:0a:0a:58:7c:ba:dc:48:a2:20:c3:e4: 30:01:bb:aa:cc:90:e0:34:60:6a:25:62:c8:7a:f2: 15:8e:84:ff:a0:61:90:7e:ca:9d:7e:dd:78:75:4e: b3:ff:8b:67:d6:32:84:22:11:6a:14:91:58:3f:e0: a4:5f:84:12:30:9b:34:07:0b:0e:03:5f:1b:c4:70: e9:35:af:06:22:82:ec:f4:42:f0:6f:5b:23:75:ac: de:4e:25:3c:24:53:70:b5:2c:90:dc:26:f7:94:25: 44:e4:0c:33:19:84:83:8e:f8:1f:7d:8d:f3:68:51: 30:49:f4:f0:ee:03:54:45:53:57:d7:71:15:3a:2a: 85:b9:32:fc:94:0a:53:aa:3c:4b:60:55:69:eb:31: 73:52:ce:1f:19:f1:2b:8f:a7:48:8c:47:99:fe:cf: 8f:b0:03:b3:39:8b:c8:13:a7:35:d2:aa:82:4e:9b: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:83:38:02:64:CD:2E:A0:87:9E:CC:A3:87:6D:F4:CE:8B:B7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:52:0c:e3:3d:67:a7:38:f8:c7:8a:96:b9:14:d2:f2:01:4c: b2:e8:b7:14:d9:e4:91:f9:59:37:00:7a:b6:8d:2e:cf:0d:31: 3a:e7:4b:b5:8c:f2:32:0f:df:2d:70:43:9c:b5:4e:9b:8c:87: 38:3a:45:d8:56:a2:9b:25:8b:55:8f:f6:99:ce:65:5b:d5:f4: d8:2d:e0:74:42:bd:8c:13:30:1e:af:c0:20:58:f4:e1:5c:7a: fb:3b:4a:c2:e9:63:91:17:f6:7c:6f:33:11:52:de:42:be:f5: 29:a2:8f:8b:ba:df:6a:9a:66:53:9a:19:71:6a:4a:f3:02:62: 25:2f:f2:4a:ef:15:6b:ff:10:6a:b1:e2:4f:34:ff:38:77:96: 1a:04:1d:c2:6a:28:4b:57:65:24:06:6d:bc:1f:2d:8f:93:78: 5c:b3:42:c7:cd:73:92:72:27:21:5d:4d:df:95:77:05:5f:2c: fc:97:6c:91:73:fe:36:11:98:fe:5c:42:97:c9:90:03:7f:0a: cb:de:bb:d6:e8:50:77:99:15:7f:d2:d9:26:fa:f7:f0:1e:4b: c2:bf:80:46:11:9d:78:cf:59:27:38:e7:71:a6:ca:0f:8a:d8: d0:3a:9c:8f:9f:a2:55:10:75:0c:39:a0:35:44:73:0f:44:7f: e1:99:d3:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrB6N+yeN6dlueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MWU4OTg2MmEtODJjYS00NTk2LTg3NDctNGNjODcwMTQzZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6I9nnCag8u5JAm/xlPVnR3OI9I4BF2Iz9Ad s5s+Z09xJ9RQG91kN2MS4FXHXvUWq9QKAVqwdqDC2vlOtUKFjaNtHz8f+loZ3awn ILFfCgpYfLrcSKIgw+QwAbuqzJDgNGBqJWLIevIVjoT/oGGQfsqdft14dU6z/4tn 1jKEIhFqFJFYP+CkX4QSMJs0BwsOA18bxHDpNa8GIoLs9ELwb1sjdazeTiU8JFNw tSyQ3Cb3lCVE5AwzGYSDjvgffY3zaFEwSfTw7gNURVNX13EVOiqFuTL8lApTqjxL YFVp6zFzUs4fGfErj6dIjEeZ/s+PsAOzOYvIE6c10qqCTpvAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMtgzgCZM0uoIeezKOHbfTOi7djMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvYTVhMjQ0NzYtYTM2Yi0z ZWJjLWEwNzAtODVkNTdhMmEwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJSDOM9Z6c4+MeKlrkU0vIBTLLotxTZ5JH5WTcAeraNLs8NMTrnS7WM 8jIP3y1wQ5y1TpuMhzg6RdhWopsli1WP9pnOZVvV9Ngt4HRCvYwTMB6vwCBY9OFc evs7SsLpY5EX9nxvMxFS3kK+9Smij4u632qaZlOaGXFqSvMCYiUv8krvFWv/EGqx 4k80/zh3lhoEHcJqKEtXZSQGbbwfLY+TeFyzQsfNc5JyJyFdTd+VdwVfLPyXbJFz /jYRmP5cQpfJkAN/Csveu9boUHeZFX/S2Sb69/AeS8K/gEYRnXjPWSc453Gmyg+K 2NA6nI+folUQdQw5oDVEcw9Ef+GZ05w= -----END CERTIFICATE-----Generated at Tue Apr 8 14:45:18 2025 by rpki-client