$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa File: d182f315-ad79-3ce1-af87-7b51558a1546.roa (raw, json) Hash identifier: DKe++WZNNmNvEmNSz84EEsLNt8Q5I70QKc/Jh0f3zxU= Subject key identifier: 7A:16:71:62:31:37:1F:1A:A5:39:E0:61:A2:D2:1E:38:34:C2:82:B8 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F43285849088168ACD6D459844403D400 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 11425 IP address blocks: 98.143.32.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:68:ac:d6:d4:59:84:44:03:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=384c708d-5718-4250-8882-931f3998939b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:f7:4e:e6:50:f3:04:74:11:76:a7:9b:24: 20:3d:de:39:02:51:95:72:ae:50:af:67:6d:0a:6b: b0:61:ea:d2:b6:b5:8b:a0:18:11:91:eb:36:e5:43: eb:ca:3d:c8:5c:4c:04:87:05:ac:93:37:8e:36:9d: ab:7f:e0:b6:af:4d:2d:09:2d:af:39:83:2b:f3:c1: 2c:6f:83:b9:1e:6a:f6:e1:12:61:83:d2:c1:14:10: e2:47:80:9b:cc:17:44:e5:ec:f9:83:51:41:ca:d4: cb:dc:2e:38:49:9e:87:c4:b1:64:c7:4f:9f:28:23: 19:a2:1c:5c:f6:37:5f:70:6b:ee:ba:95:e8:fb:28: 37:85:e2:4f:5b:1d:5e:83:23:44:0c:1b:f9:e4:0e: ae:df:d7:9e:ca:83:4d:3a:72:08:79:f9:e0:ee:6a: eb:83:ee:8c:5d:dc:78:f4:e5:4c:82:40:08:93:34: 41:04:da:fb:43:a7:df:70:63:79:b6:2e:6a:70:3f: bf:5a:66:ac:64:ea:36:14:da:71:41:fe:55:a2:ed: 29:b8:ef:d7:22:2e:0f:f7:84:db:d2:97:21:fd:ed: 1f:da:a5:46:06:d3:ba:ff:c5:dd:5d:09:9e:88:68: 68:63:43:c2:ae:ac:a4:57:78:6b:84:48:0f:6e:5e: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:16:71:62:31:37:1F:1A:A5:39:E0:61:A2:D2:1E:38:34:C2:82:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 98.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:70:85:51:c8:08:9d:0f:f0:0f:12:e9:e9:81:39:3d:4d:60: 01:6e:9e:02:cc:a5:87:4d:d8:4e:55:f0:5e:54:67:66:a4:01: c7:7f:99:a6:46:5f:45:0a:47:e0:44:d7:d6:b5:77:63:c1:22: dc:f7:bf:25:8d:1a:c0:3b:3d:ce:83:43:ce:cb:3a:24:2a:08: d8:de:4f:20:2d:bd:42:e5:cf:17:9d:e0:8c:4f:7f:e9:86:84: be:1c:61:da:17:61:23:b8:3f:87:fd:81:9e:a9:24:7d:a0:df: 2a:c0:bb:19:96:8e:b6:08:9e:67:1c:1f:7f:98:c3:d6:6c:09: 58:a4:6d:1b:3f:6a:58:30:f8:34:13:b3:8c:a2:f6:be:14:55: 05:e6:cc:22:74:65:01:c5:03:3e:70:e7:a4:b9:af:51:36:d9: 9b:4e:f7:ae:8e:82:cc:04:73:be:42:d3:e9:ff:de:f2:ea:83: 75:80:40:01:f0:f0:67:7d:76:47:55:1f:4c:b4:8a:d4:7f:d4: e0:00:49:97:c0:53:9b:a6:6f:03:96:2d:d8:dc:1c:90:e0:2d: 75:17:d4:ff:ba:bc:71:99:8f:76:18:7c:f8:f7:cf:88:bc:f3: a2:a1:2d:54:94:35:90:37:9e:97:58:69:0d:26:be:83:fb:c8: e0:de:7e:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWis1tRZhEQD1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk Mzg0YzcwOGQtNTcxOC00MjUwLTg4ODItOTMxZjM5OTg5MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonD3TuZQ8wR0EXanmyQgPd45AlGVcq5Qr2dt CmuwYerStrWLoBgRkes25UPryj3IXEwEhwWskzeONp2rf+C2r00tCS2vOYMr88Es b4O5Hmr24RJhg9LBFBDiR4CbzBdE5ez5g1FBytTL3C44SZ6HxLFkx0+fKCMZohxc 9jdfcGvuupXo+yg3heJPWx1egyNEDBv55A6u39eeyoNNOnIIefng7mrrg+6MXdx4 9OVMgkAIkzRBBNr7Q6ffcGN5ti5qcD+/WmasZOo2FNpxQf5Vou0puO/XIi4P94Tb 0pch/e0f2qVGBtO6/8XdXQmeiGhoY0PCrqykV3hrhEgPbl6VbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoWcWIxNx8apTngYaLSHjg0woK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZDE4MmYzMTUtYWQ3OS0z Y2UxLWFmODctN2I1MTU1OGExNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERwhVHICJ0P8A8S6emBOT1NYAFungLMpYdN2E5V8F5UZ2akAcd/maZG X0UKR+BE19a1d2PBItz3vyWNGsA7Pc6DQ87LOiQqCNjeTyAtvULlzxed4IxPf+mG hL4cYdoXYSO4P4f9gZ6pJH2g3yrAuxmWjrYInmccH3+Yw9ZsCVikbRs/algw+DQT s4yi9r4UVQXmzCJ0ZQHFAz5w56S5r1E22ZtO966OgswEc75C0+n/3vLqg3WAQAHw 8Gd9dkdVH0y0itR/1OAASZfAU5umbwOWLdjcHJDgLXUX1P+6vHGZj3YYfPj3z4i8 86KhLVSUNZA3npdYaQ0mvoP7yODefh4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:27 2025 by rpki-client