$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/98cae6c8-5483-3e9e-ac85-2d6195bd4263.roa File: 98cae6c8-5483-3e9e-ac85-2d6195bd4263.roa (raw, json) Hash identifier: rVzt4OJunCyVa9vJP2TfyAugCcNG7ZYtYivCIrOV2SU= Subject key identifier: 9A:6E:E0:93:85:C5:FD:6C:8D:6D:86:5D:6B:1B:B3:82:3C:D6:3D:FA Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6424A2143C5DD89AEDEDC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/98cae6c8-5483-3e9e-ac85-2d6195bd4263.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 162.248.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:24:a2:14:3c:5d:d8:9a:ed:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=0d8ad810-f301-40f6-ab71-f94891f5c1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:8b:e3:41:bb:b2:d1:93:55:4f:c2:72:46: c9:d3:a8:fc:bc:3c:87:90:2b:fa:76:c9:6f:38:43: f2:c8:c1:79:3c:3d:ef:bb:19:07:b9:0d:06:f3:63: 80:36:fb:6a:4d:96:50:15:cf:2f:ce:a6:a3:ba:e1: 6c:4b:1f:1e:65:61:58:24:ec:b5:70:a3:87:c8:98: 7a:82:94:2e:5a:bb:4d:29:54:c9:65:0b:8a:72:91: d0:dd:6c:49:20:b1:47:b8:32:17:f7:fb:a5:ef:66: 49:09:5d:0a:4f:73:34:05:c5:05:ec:6a:1d:d6:7b: 48:c5:28:26:ee:46:59:98:92:7f:2a:a5:31:27:f5: 87:b0:0d:d0:d3:44:c6:8a:8b:29:ea:61:97:e8:95: 9e:99:8a:da:22:39:b2:09:0a:21:38:19:b0:d1:8c: 04:01:04:93:c0:48:e2:7b:d0:18:e8:15:53:56:65: a2:34:e0:fa:b8:a8:2b:09:16:33:3c:69:0d:4f:73: e4:76:7b:f4:67:03:b7:4b:5c:0a:a2:83:3e:86:18: c1:a6:3c:90:3f:f2:97:15:cb:64:52:91:d4:fa:e7: a3:5f:69:cd:8c:6a:e3:54:4d:1f:32:7c:07:e9:d9: 5d:76:f5:f0:6d:ba:d3:65:76:58:46:7b:e0:35:64: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:E0:93:85:C5:FD:6C:8D:6D:86:5D:6B:1B:B3:82:3C:D6:3D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/98cae6c8-5483-3e9e-ac85-2d6195bd4263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.248.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:65:f5:11:c8:20:73:31:00:c7:c2:e8:d2:ca:1b:d4:a1:6a: de:a2:47:af:2b:0c:f4:51:3c:20:44:af:5e:b4:5b:98:2b:1d: 14:94:a9:19:d1:0e:9b:aa:13:5a:9a:b4:89:b3:9d:a9:2c:d3: 2a:9f:7e:b2:de:c8:d8:df:0b:f8:81:5b:b4:62:8f:55:d8:5f: 98:fb:d1:0d:d2:89:ad:33:79:e1:7a:30:56:ab:14:92:7f:fc: e0:d1:89:77:dc:07:10:65:c1:6b:69:94:fd:07:8a:db:c4:ed: 4c:95:0b:ed:11:9a:4d:2a:d7:1a:54:a6:ab:b2:fb:ed:f7:62: f3:d9:f2:93:ae:3a:4a:f7:be:fc:23:5d:9f:82:bc:a4:bc:ba: 8f:95:c4:95:34:ae:5e:3a:7e:bb:d5:8f:2e:7d:6d:e9:d1:b8: 47:48:03:8b:aa:1a:65:34:a5:d3:77:cd:25:1b:34:32:eb:43: 5b:33:03:7c:4e:58:21:20:ac:bf:67:2a:8e:c3:22:2f:26:1e: 72:bf:ec:77:2e:5e:43:c7:71:1c:e2:1e:a5:fe:db:d6:77:88: b6:a0:2c:fb:9a:06:82:40:69:67:b7:50:6c:37:4d:77:0d:b3: 0c:3a:8f:75:0f:df:01:4b:4d:f8:7d:6e:61:5d:2d:ff:05:dc: c5:fd:c5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCSiFDxd2Jrt7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MGQ4YWQ4MTAtZjMwMS00MGY2LWFiNzEtZjk0ODkxZjVjMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWiL40G7stGTVU/CckbJ06j8vDyHkCv6dslv OEPyyMF5PD3vuxkHuQ0G82OANvtqTZZQFc8vzqajuuFsSx8eZWFYJOy1cKOHyJh6 gpQuWrtNKVTJZQuKcpHQ3WxJILFHuDIX9/ul72ZJCV0KT3M0BcUF7God1ntIxSgm 7kZZmJJ/KqUxJ/WHsA3Q00TGiosp6mGX6JWemYraIjmyCQohOBmw0YwEAQSTwEji e9AY6BVTVmWiNOD6uKgrCRYzPGkNT3Pkdnv0ZwO3S1wKooM+hhjBpjyQP/KXFctk UpHU+uejX2nNjGrjVE0fMnwH6dlddvXwbbrTZXZYRnvgNWSp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpu4JOFxf1sjW2GXWsbs4I81j36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOThjYWU2YzgtNTQ4My0z ZTllLWFjODUtMmQ2MTk1YmQ0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtl9RHIIHMxAMfC6NLKG9Shat6iR68rDPRRPCBEr160W5grHRSUqRnR DpuqE1qatImznaks0yqffrLeyNjfC/iBW7Rij1XYX5j70Q3Sia0zeeF6MFarFJJ/ /ODRiXfcBxBlwWtplP0HitvE7UyVC+0Rmk0q1xpUpquy++33YvPZ8pOuOkr3vvwj XZ+CvKS8uo+VxJU0rl46frvVjy59benRuEdIA4uqGmU0pdN3zSUbNDLrQ1szA3xO WCEgrL9nKo7DIi8mHnK/7HcuXkPHcRziHqX+29Z3iLagLPuaBoJAaWe3UGw3TXcN sww6j3UP3wFLTfh9bmFdLf8F3MX9xcM= -----END CERTIFICATE-----Generated at Sun Apr 13 03:00:19 2025 by rpki-client