$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d50b5c24-a9d2-3807-b5bd-8c498fbece87.roa File: d50b5c24-a9d2-3807-b5bd-8c498fbece87.roa (raw, json) Hash identifier: FN424885esJTSX7ns8LdnCoLDOPiv+9VLqJwnym0iLs= Subject key identifier: 89:08:3B:D9:B0:D2:72:84:B5:91:2F:6F:E1:37:67:86:CE:7B:D8:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F604B7CF63AAB81C6B30 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d50b5c24-a9d2-3807-b5bd-8c498fbece87.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 98.111.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f6:04:b7:cf:63:aa:b8:1c:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a1f9831c-c1e4-4bf5-9ee9-8879c26a1e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:32:86:5b:63:85:34:96:3d:8d:2b:4f:46: d0:91:c7:7e:ce:5c:c7:d3:ee:fb:b6:d2:bd:cc:d0: dc:21:57:0c:78:db:0c:e6:e3:6c:31:af:ee:46:01: e9:4f:95:ba:7d:ae:2b:86:77:d6:36:f9:ec:80:e5: 6e:61:6b:f8:0d:20:b5:b8:4e:f6:17:68:36:11:a0: 5e:4f:26:15:82:a1:96:08:53:53:7f:0d:82:85:41: 5a:c1:ca:8e:bb:f2:a3:6b:7e:d5:00:7f:48:c2:71: a3:7f:38:5f:1c:14:39:aa:18:e1:f3:8a:85:b3:33: 09:0f:3d:77:7a:bf:76:83:94:95:90:2e:c2:04:b6: 78:67:8f:eb:14:c3:7f:de:4f:22:4c:c9:8b:77:47: 11:6c:d0:e4:eb:dd:f5:fa:67:42:42:c5:72:73:8d: ed:77:1b:18:74:36:c5:8b:98:72:13:6d:2f:ea:38: 1c:a8:a4:c6:45:fd:80:1e:8b:1e:96:2e:d4:1a:f3: 79:ed:29:40:52:3b:db:c4:84:1b:64:ef:86:fa:c6: 3e:a7:ed:08:62:ee:3b:2e:71:0a:a6:d1:24:27:18: b8:88:eb:c8:af:a7:f3:99:15:16:70:8c:4e:da:21: 24:3c:67:47:11:47:43:1d:57:a0:87:ea:11:94:09: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:3B:D9:B0:D2:72:84:B5:91:2F:6F:E1:37:67:86:CE:7B:D8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d50b5c24-a9d2-3807-b5bd-8c498fbece87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.111.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7d:11:ee:5f:9d:d6:26:72:8b:98:bc:e1:06:43:f6:72:94: f3:bc:98:0a:2d:a1:36:22:39:42:52:b6:cd:cb:e9:42:9b:97: 46:50:39:2c:0f:e2:dc:d3:ca:ad:ac:c3:a9:3d:cb:87:59:91: ef:ab:c6:5b:f0:dd:22:37:b1:1f:dc:a9:c6:c6:87:70:e6:54: a0:d6:b2:d5:29:49:6b:62:a6:af:bb:57:05:a8:5b:1c:e2:fd: 7a:a4:28:ad:3e:c9:23:36:a9:2a:6d:7d:5c:25:5a:4c:1c:be: 71:56:bb:3f:58:1c:52:42:3d:88:36:53:89:11:86:23:9a:5f: 6f:45:19:fd:39:f0:3c:f9:55:23:67:ff:10:4d:e5:29:0b:49: 6e:3f:e6:17:d7:a5:2c:ef:f5:de:41:8d:df:9e:76:fb:68:9f: 59:2e:e6:75:b1:22:c1:49:c5:b9:80:48:56:23:68:c3:3f:0a: 96:f1:a6:70:1e:0c:7f:04:74:f4:b7:fd:01:fc:a3:fe:60:a0: 0a:3e:61:bc:2e:d7:ff:e0:36:b3:5e:07:3e:32:bb:c5:82:86: 63:15:95:55:09:75:50:2c:43:3d:e7:47:20:f4:8a:97:10:b3: 4d:f2:76:0c:79:f1:84:d3:e2:da:9e:da:88:d3:ed:1e:6c:e2: 96:cd:18:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvYEt89jqrgcazAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTFmOTgzMWMtYzFlNC00YmY1LTllZTktODg3OWMyNmExZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS4yhltjhTSWPY0rT0bQkcd+zlzH0+77ttK9 zNDcIVcMeNsM5uNsMa/uRgHpT5W6fa4rhnfWNvnsgOVuYWv4DSC1uE72F2g2EaBe TyYVgqGWCFNTfw2ChUFawcqOu/Kja37VAH9IwnGjfzhfHBQ5qhjh84qFszMJDz13 er92g5SVkC7CBLZ4Z4/rFMN/3k8iTMmLd0cRbNDk6931+mdCQsVyc43tdxsYdDbF i5hyE20v6jgcqKTGRf2AHoseli7UGvN57SlAUjvbxIQbZO+G+sY+p+0IYu47LnEK ptEkJxi4iOvIr6fzmRUWcIxO2iEkPGdHEUdDHVegh+oRlAnNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkIO9mw0nKEtZEvb+E3Z4bOe9hmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUwYjVjMjQtYTlkMi0z ODA3LWI1YmQtOGM0OThmYmVjZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYm/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN9Ee5fndYmcouYvOEGQ/ZylPO8mAotoTYiOUJSts3L6UKbl0ZQOSwP 4tzTyq2sw6k9y4dZke+rxlvw3SI3sR/cqcbGh3DmVKDWstUpSWtipq+7VwWoWxzi /XqkKK0+ySM2qSptfVwlWkwcvnFWuz9YHFJCPYg2U4kRhiOaX29FGf058Dz5VSNn /xBN5SkLSW4/5hfXpSzv9d5Bjd+edvton1ku5nWxIsFJxbmASFYjaMM/CpbxpnAe DH8EdPS3/QH8o/5goAo+Ybwu1//gNrNeBz4yu8WChmMVlVUJdVAsQz3nRyD0ipcQ s03ydgx58YTT4tqe2ojT7R5s4pbNGAI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:57 2025 by rpki-client