$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa File: 1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa (raw, json) Hash identifier: u6wCMKTKAJt221Z2+RR3G1i2HAm8I0BhdQCFvq3d4c4= Subject key identifier: DB:72:0F:F7:3F:9E:59:FE:DA:6A:0D:9E:8E:9B:1E:48:F6:A5:7B:53 Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F43285848D641098A9D5F06CD45C45600 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 55244 IP address blocks: 209.35.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:09:8a:9d:5f:06:cd:45:c4:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=3b8481b0-2e70-49f1-97b5-4c42523f755b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:ff:3f:65:dc:de:2f:cf:c0:be:f8:39:75: 88:04:fe:29:5f:35:25:eb:98:9a:17:c7:ef:eb:3c: 6c:23:0f:7e:58:90:71:24:da:5b:ae:06:1c:4c:8a: 89:83:32:55:19:b3:28:3a:5b:6d:db:58:d1:2e:26: 6f:12:7e:b6:a8:00:fd:e7:5a:70:2a:21:90:50:ce: 63:f0:14:3b:fa:a3:cc:3d:a7:91:6d:01:4c:1f:70: ae:c3:34:c9:c2:d1:d7:39:04:58:1a:8e:06:24:fb: 05:1d:e6:e5:25:9f:2a:2e:8f:7b:ae:f4:2b:22:e5: 61:09:07:94:30:eb:be:77:db:97:db:5f:d1:18:64: ea:c9:01:7b:71:a6:19:f9:6a:d9:72:44:95:13:cb: c1:ec:1c:4a:26:b6:98:fe:8a:cb:99:9e:33:dc:43: a0:a8:58:77:c5:13:15:17:65:5b:87:52:ce:c4:c1: 02:1c:16:db:60:47:ea:3b:80:28:1f:4e:39:90:fd: 7f:ec:ac:59:26:30:c1:f8:79:38:af:cd:f6:6e:35: 50:93:20:5c:be:a1:01:77:fb:ae:d8:18:04:78:c7: ac:4c:8d:85:d9:e1:1b:3a:4b:07:6b:10:a8:1f:b4: 47:b3:c5:cb:9d:1b:9e:42:5f:93:ac:aa:89:35:15: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:0F:F7:3F:9E:59:FE:DA:6A:0D:9E:8E:9B:1E:48:F6:A5:7B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/1eb235fb-e91d-3df9-9b93-db32a4bbf0d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 209.35.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e5:c5:25:b8:ad:1a:c0:cf:88:4d:07:b0:c6:d3:ac:dd:c8: cf:78:2b:7d:f6:7a:1c:fb:18:0e:4c:7a:24:53:f9:ed:e9:21: 8f:e7:bd:a8:a3:c8:13:cf:01:df:dd:4e:bc:d8:86:49:6f:87: 1a:4b:3a:48:1c:9f:25:a4:c4:53:de:1d:58:df:99:13:10:f0: 5f:25:76:4b:45:d4:db:4e:c8:2f:5a:77:d5:ff:d4:6f:c3:21: 9f:25:ea:48:a3:8a:26:a8:c7:78:0f:0f:d8:16:e4:b2:80:6d: 47:a3:b7:75:7a:65:c5:4b:21:e3:1f:2a:b5:0c:3f:8b:46:4e: 5a:62:86:04:9b:9b:79:3d:38:4d:28:c3:0f:01:7c:97:1a:55: 57:1e:e7:23:3c:b3:eb:c5:b3:f1:ee:70:6c:ea:af:cf:93:09: 52:6c:b3:4b:75:98:4b:81:a7:17:eb:95:95:83:b5:07:d0:9f: c0:c4:15:35:d5:c5:f7:03:d5:44:69:82:85:9c:ed:0a:c0:79: 8b:24:32:e7:ae:ed:ea:af:f8:ff:c5:72:70:1e:e8:6c:61:d6: 93:f6:d8:e6:f8:0c:6e:b7:8a:ae:d9:0c:17:6c:6a:cb:b6:fb: 07:7c:ff:bf:7e:89:46:81:ea:f2:a0:b1:8b:48:19:9f:24:64: 19:db:d5:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQmKnV8GzUXEVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2I4NDgxYjAtMmU3MC00OWYxLTk3YjUtNGM0MjUyM2Y3NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojX/P2Xc3i/PwL74OXWIBP4pXzUl65iaF8fv 6zxsIw9+WJBxJNpbrgYcTIqJgzJVGbMoOltt21jRLiZvEn62qAD951pwKiGQUM5j 8BQ7+qPMPaeRbQFMH3CuwzTJwtHXOQRYGo4GJPsFHeblJZ8qLo97rvQrIuVhCQeU MOu+d9uX21/RGGTqyQF7caYZ+WrZckSVE8vB7BxKJraY/orLmZ4z3EOgqFh3xRMV F2Vbh1LOxMECHBbbYEfqO4AoH045kP1/7KxZJjDB+Hk4r832bjVQkyBcvqEBd/uu 2BgEeMesTI2F2eEbOksHaxCoH7RHs8XLnRueQl+TrKqJNRUkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtyD/c/nln+2moNno6bHkj2pXtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvMWViMjM1ZmItZTkxZC0z ZGY5LTliOTMtZGIzMmE0YmJmMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLlxSW4rRrAz4hNB7DG06zdyM94K332ehz7GA5MeiRT+e3pIY/nvaij yBPPAd/dTrzYhklvhxpLOkgcnyWkxFPeHVjfmRMQ8F8ldktF1NtOyC9ad9X/1G/D IZ8l6kijiiaox3gPD9gW5LKAbUejt3V6ZcVLIeMfKrUMP4tGTlpihgSbm3k9OE0o ww8BfJcaVVce5yM8s+vFs/HucGzqr8+TCVJss0t1mEuBpxfrlZWDtQfQn8DEFTXV xfcD1URpgoWc7QrAeYskMueu7eqv+P/FcnAe6Gxh1pP22Ob4DG63iq7ZDBdsasu2 +wd8/79+iUaB6vKgsYtIGZ8kZBnb1ZQ= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:11 2025 by rpki-client