$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cd77722-b280-3018-a1e3-3a8837c0435e.roa File: 2cd77722-b280-3018-a1e3-3a8837c0435e.roa (raw, json) Hash identifier: 77Q6fK/2HSuFKP3CwwbQcJBAXpo8BBvYRlfA+Lkk/VA= Subject key identifier: 39:77:8B:DF:76:4C:EE:A0:0E:8E:5C:5E:B8:18:12:D6:33:62:05:7B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F61251F34FBA7A99CC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cd77722-b280-3018-a1e3-3a8837c0435e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 98.118.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f6:12:51:f3:4f:ba:7a:99:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1913cf4d-da4b-4006-8eca-8f98d65a0ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:73:5d:66:6b:c8:ce:a8:57:5f:b6:79:82:97: d8:1f:79:22:05:6e:5e:7b:55:c1:3e:68:f2:27:1e: bb:2b:4a:5f:39:ef:bf:28:af:24:8c:6f:31:81:73: f4:15:a3:e3:dc:18:0a:f7:fc:ac:66:3f:e5:e8:5f: f6:c4:a0:a8:46:0b:0e:00:28:0e:70:ab:c6:04:99: 17:df:ab:34:90:9e:12:fa:3e:cb:3f:45:8c:84:ad: 80:e6:b0:b1:83:29:a3:59:40:0f:48:9c:40:9c:62: 0d:97:bc:22:7c:53:81:3a:f1:3e:ea:bc:a4:d2:ba: bc:8e:c3:28:e8:e5:9b:1d:4a:0a:5e:18:fe:48:77: a3:57:31:f9:e0:72:69:47:19:4f:e6:f6:18:b0:40: 10:41:f6:68:ca:8e:1c:6e:81:ba:59:d2:c1:cf:7a: 13:bb:c1:f0:ea:1e:8a:54:29:bd:6b:be:60:d2:ac: 44:0f:62:3a:83:28:cc:8e:79:5a:12:2c:7d:4c:3f: 50:43:9a:a4:bf:a4:a4:b1:a2:14:70:f5:c5:a5:fe: 4b:bc:65:95:71:51:03:60:f5:80:f6:14:14:fe:08: 85:1a:c5:58:c3:f4:2a:41:94:01:83:d2:ee:b8:4c: e1:aa:dc:62:45:4d:81:02:f4:0a:08:1d:04:7a:17: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:77:8B:DF:76:4C:EE:A0:0E:8E:5C:5E:B8:18:12:D6:33:62:05:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cd77722-b280-3018-a1e3-3a8837c0435e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.118.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a0:25:5f:80:08:5e:02:06:71:b9:32:db:7c:86:6a:bc:d6: dc:cb:50:b9:9b:41:5f:28:42:55:30:dd:e9:77:72:39:87:e8: e7:20:45:d2:15:f0:1e:99:e9:59:a3:f5:83:3d:6a:fb:91:a9: ed:29:0d:4d:e4:c1:91:4f:f0:df:bf:44:a0:43:42:79:ac:58: 01:db:f0:09:0e:8a:9b:11:c4:3e:d0:d6:64:35:d2:97:33:29: 04:8a:ea:73:8f:4b:c9:a8:aa:4f:e4:f8:88:7d:3f:7a:16:e5: 45:15:46:84:c3:3b:0b:f5:39:5b:a0:1c:1d:1d:23:f6:77:ea: 13:c4:4c:d5:86:23:52:c9:e0:00:83:b0:4c:f9:14:5e:07:21: b7:6c:d6:0c:c2:b7:b0:60:7e:94:74:0f:0c:cc:fe:aa:c1:06: 1c:6e:b0:49:6c:b2:fe:fe:29:9b:ee:06:7a:b4:cb:19:3e:57: fe:fd:94:0d:32:72:8f:aa:5a:6e:f3:e0:68:63:bc:29:98:93: 35:1a:50:4c:d6:a3:17:73:dc:38:a3:44:57:13:27:16:39:59: 34:1f:8b:64:37:c9:cc:89:90:c1:09:fb:9b:2f:f4:0d:27:28: ea:a4:b5:b1:26:e3:93:4e:bc:4d:c3:b6:9a:0e:77:df:40:dd: 43:97:64:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvYSUfNPunqZzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTkxM2NmNGQtZGE0Yi00MDA2LThlY2EtOGY5OGQ2NWEwZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinNdZmvIzqhXX7Z5gpfYH3kiBW5ee1XBPmjy Jx67K0pfOe+/KK8kjG8xgXP0FaPj3BgK9/ysZj/l6F/2xKCoRgsOACgOcKvGBJkX 36s0kJ4S+j7LP0WMhK2A5rCxgymjWUAPSJxAnGINl7wifFOBOvE+6ryk0rq8jsMo 6OWbHUoKXhj+SHejVzH54HJpRxlP5vYYsEAQQfZoyo4cboG6WdLBz3oTu8Hw6h6K VCm9a75g0qxED2I6gyjMjnlaEix9TD9QQ5qkv6SksaIUcPXFpf5LvGWVcVEDYPWA 9hQU/giFGsVYw/QqQZQBg9LuuEzhqtxiRU2BAvQKCB0Eehc5MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl3i992TO6gDo5cXrgYEtYzYgV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmNkNzc3MjItYjI4MC0z MDE4LWExZTMtM2E4ODM3YzA0MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYnaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWgJV+ACF4CBnG5Mtt8hmq81tzLULmbQV8oQlUw3el3cjmH6OcgRdIV 8B6Z6Vmj9YM9avuRqe0pDU3kwZFP8N+/RKBDQnmsWAHb8AkOipsRxD7Q1mQ10pcz KQSK6nOPS8moqk/k+Ih9P3oW5UUVRoTDOwv1OVugHB0dI/Z36hPETNWGI1LJ4ACD sEz5FF4HIbds1gzCt7BgfpR0DwzM/qrBBhxusElssv7+KZvuBnq0yxk+V/79lA0y co+qWm7z4GhjvCmYkzUaUEzWoxdz3DijRFcTJxY5WTQfi2Q3ycyJkMEJ+5sv9A0n KOqktbEm45NOvE3DtpoOd99A3UOXZFQ= -----END CERTIFICATE-----Generated at Sun Apr 6 03:41:48 2025 by rpki-client