$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa File: 4928227b-a919-3b1e-8651-e3b58bf2abca.roa (raw, json) Hash identifier: A051+jHXDt4i1qxhDnavsFxT6HOhyvfvZDqhUhFuRj0= Subject key identifier: 8E:A2:FE:B8:40:3F:23:C6:96:CF:A4:6C:4E:2F:B7:88:E7:31:51:F9 Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Certificate serial: 010D0C9F43285848A9962CDB0EF608EB366ED5A0 Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 399899 IP address blocks: 172.98.52.0/23 maxlen: 23 172.98.52.0/24 maxlen: 24 172.98.53.0/24 maxlen: 24 2602:fbb7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2c:db:0e:f6:08:eb:36:6e:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=b9123640-1fae-42ad-a335-92180365c9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:1c:ef:ff:93:0c:89:46:8f:2c:81:a6:80: d6:15:3b:66:90:64:5e:79:35:93:fb:b4:d4:a8:d6: 38:98:c0:88:46:46:4a:a1:d0:22:79:8c:3b:84:85: eb:d3:0a:bb:be:93:38:df:96:99:c1:d8:0d:f7:22: f3:c7:56:7b:c4:6c:90:e4:5b:8c:12:0c:57:3a:a3: c6:7e:67:d3:89:8b:83:e8:42:be:34:6e:2a:35:bb: cb:b3:6d:66:28:91:0d:91:05:02:78:d7:ac:a8:43: 86:52:5c:95:0e:6d:73:0b:da:43:1f:72:52:42:7c: eb:65:9c:ba:eb:24:42:74:4c:7b:31:60:06:f7:95: 2a:08:61:9d:39:21:30:44:f0:6b:2e:c4:70:ef:3e: 51:c3:5f:32:c4:7c:f6:35:8b:b4:1e:74:13:57:6c: f3:c9:ab:4d:e4:99:35:73:7d:ee:69:b2:2a:6f:5c: 46:01:b1:4b:36:05:d4:3a:77:5b:4e:29:2b:f0:69: 02:bf:ef:1d:4a:06:08:3b:06:aa:ef:01:65:99:ac: a5:04:c1:8d:8b:6c:db:37:dd:66:b3:e3:b9:67:05: 21:7d:1b:91:82:f5:9e:2e:30:c8:85:66:87:23:62: ba:27:16:69:43:25:d0:77:d6:e1:11:f5:c1:38:db: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A2:FE:B8:40:3F:23:C6:96:CF:A4:6C:4E:2F:B7:88:E7:31:51:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl X509v3 Authority Key Identifier: keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer sbgp-ipAddrBlock: critical IPv4: 172.98.52.0/23 IPv6: 2602:fbb7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9a:df:0f:76:56:12:4b:01:8e:a5:44:cf:72:73:e2:ae:17: 0f:86:e7:cb:f9:00:9b:7f:8c:17:a4:9f:f7:e0:86:45:dc:21: 79:d1:7b:cb:f0:36:e6:df:6a:45:66:c4:82:50:af:50:c1:1b: ef:a8:52:e0:d5:5a:58:61:16:2e:d5:4a:c5:28:5f:e7:21:84: 90:1c:a0:5f:5b:32:8e:b3:29:54:17:c7:a1:c3:53:08:d7:5b: 0e:b0:d7:26:ed:45:b2:7b:95:79:4f:96:dc:52:a8:3f:1c:cd: ae:6c:26:1f:4c:9d:cb:4e:21:f1:22:c4:6b:da:c7:46:b3:d1: 38:ab:a0:d4:eb:03:3a:60:ca:99:71:db:26:e2:8d:00:b1:b9: 68:55:6a:2f:95:1f:b3:9d:97:18:13:ef:50:c5:a9:2e:82:cd: ff:a2:41:5c:55:35:cb:ff:79:c7:e0:81:30:7d:d7:53:40:71: 53:fb:8e:40:0d:fc:15:25:4d:47:30:88:ae:a0:35:3a:0d:2d: 5e:88:e0:20:6b:a7:18:ff:af:85:c3:97:a2:21:72:56:ad:f2: db:6a:7f:46:45:c6:dc:7f:62:98:1c:bd:ab:7b:a5:9f:2e:b0: 57:76:28:b6:96:c5:01:40:5c:1a:a2:64:c0:cd:d7:2d:23:37: 08:74:27:7e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiplizbDvYI6zZu1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM3Yzg1M2QtZjYxNC00MTdhLTg3ZDktZmVkOWNmOWI2 ZTRhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjkxMjM2NDAtMWZhZS00MmFkLWEzMzUtOTIxODAzNjVjOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkYc7/+TDIlGjyyBpoDWFTtmkGReeTWT+7TU qNY4mMCIRkZKodAieYw7hIXr0wq7vpM435aZwdgN9yLzx1Z7xGyQ5FuMEgxXOqPG fmfTiYuD6EK+NG4qNbvLs21mKJENkQUCeNesqEOGUlyVDm1zC9pDH3JSQnzrZZy6 6yRCdEx7MWAG95UqCGGdOSEwRPBrLsRw7z5Rw18yxHz2NYu0HnQTV2zzyatN5Jk1 c33uabIqb1xGAbFLNgXUOndbTikr8GkCv+8dSgYIOwaq7wFlmaylBMGNi2zbN91m s+O5ZwUhfRuRgvWeLjDIhWaHI2K6JxZpQyXQd9bhEfXBONvZcwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI6i/rhAPyPGls+kbE4vt4jnMVH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdj ODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5Y2Y5YjZlNGEvNDkyODIyN2ItYTkxOS0z YjFlLTg2NTEtZTNiNThiZjJhYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjM3Yzg1M2QtZjYxNC00MTdhLTg3 ZDktZmVkOWNmOWI2ZTRhL2IzN2M4NTNkLWY2MTQtNDE3YS04N2Q5LWZlZDljZjli NmU0YS5jcmwwHwYDVR0jBBgwFoAUPqf5ASNhrB95WSP0kVHBkLMAaaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzdjODUzZC1mNjE0LTQxN2EtODdkOS1mZWQ5 Y2Y5YjZlNGEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBrGI0MA4E AgACMAgDBgQmAvu3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgmt8PdlYSSwGOpUTPcnPirhcPhufL+QCb f4wXpJ/34IZF3CF50XvL8Dbm32pFZsSCUK9QwRvvqFLg1VpYYRYu1UrFKF/nIYSQ HKBfWzKOsylUF8ehw1MI11sOsNcm7UWye5V5T5bcUqg/HM2ubCYfTJ3LTiHxIsRr 2sdGs9E4q6DU6wM6YMqZcdsm4o0AsbloVWovlR+znZcYE+9Qxakugs3/okFcVTXL /3nH4IEwfddTQHFT+45ADfwVJU1HMIiuoDU6DS1eiOAga6cY/6+Fw5eiIXJWrfLb an9GRcbcf2KYHL2re6WfLrBXdii2lsUBQFwaomTAzdctIzcIdCd+ -----END CERTIFICATE-----Generated at Sat Apr 12 11:20:06 2025 by rpki-client