$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa File: d98a63f5-e0de-35bf-ac2d-d4c829125068.roa (raw, json) Hash identifier: BjLf0ffTjm0clEKmYDxTXEa0QqET9iiMRHbk2XLVWSY= Subject key identifier: BE:C8:32:78:44:55:8B:90:0B:D9:0C:72:68:16:7A:47:CF:A8:21:35 Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F4328584957F3F35A02CC39E2FFF19C00 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 397085 IP address blocks: 208.91.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f3:5a:02:cc:39:e2:ff:f1:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=d27ffde1-d2b5-4f5e-a62b-d0d0af746b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:7f:73:f9:53:26:d8:88:20:27:05:32:31: 04:02:d4:1c:3e:33:a1:6f:e0:c6:c5:3b:3e:69:cb: 2e:47:89:49:30:e0:f2:c7:fe:8c:05:42:da:28:06: e7:e1:79:19:d4:6d:24:0a:4b:bf:6c:52:fc:f3:75: a3:65:82:ce:70:29:0c:4d:8a:1e:8f:5c:c2:40:37: 33:d9:bd:4f:1e:30:a9:ab:60:59:06:a1:50:15:e1: 09:80:2f:b7:27:45:57:16:3d:f9:70:66:71:21:c3: ba:2f:73:92:9f:fe:ad:04:fb:f5:0d:4e:b2:bf:49: 0e:a1:27:38:e1:d0:1d:1a:29:7a:52:0c:6b:4d:a5: ad:57:ca:6c:e6:dc:6c:27:c7:99:d1:b9:af:7b:ba: f5:60:a2:8f:3a:4e:8c:9d:4a:cf:4a:65:c4:96:4f: ca:be:af:77:61:13:4f:cc:81:6f:e2:64:18:9e:f2: 22:ec:57:cc:1b:2b:1d:dc:62:10:9f:2a:6f:15:80: b9:0a:86:0a:3c:0f:7c:2f:1d:c0:3e:a9:11:77:cc: 5c:ac:3b:7e:7f:a2:97:07:b2:c2:8e:d3:30:74:06: b9:95:66:6e:25:e6:a0:4e:bc:66:38:7f:73:3c:ae: 4a:09:01:96:5f:9d:27:eb:be:d4:b4:29:43:94:c2: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C8:32:78:44:55:8B:90:0B:D9:0C:72:68:16:7A:47:CF:A8:21:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv4: 208.91.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:96:1b:d5:ce:1d:c2:9b:c4:01:66:02:af:83:8c:aa:84:3d: 4d:25:1a:94:b8:9e:18:96:d8:4d:23:19:ab:bf:75:6a:a5:72: c5:46:8b:f6:fd:23:78:10:a0:6c:dc:36:e5:25:a7:e3:84:1d: a8:59:31:b0:ba:50:d9:1e:38:c0:f6:05:67:43:47:29:01:fd: 8c:a7:87:0d:cc:34:32:18:a6:0b:68:49:10:0e:f6:9c:fd:41: 56:59:3f:ce:99:77:c6:e7:89:e8:3d:ea:75:a0:a9:84:3c:a0: 84:8c:54:37:c3:28:2f:f6:21:eb:a5:bd:a2:ba:ea:c9:c3:29: 62:81:1f:21:a3:7d:98:7e:79:ff:9c:5e:c5:2d:12:ed:1c:13: b1:91:d2:30:ae:e2:26:a1:05:09:6f:f6:2e:c7:2b:e6:fe:d8: 80:f5:62:df:65:f8:50:1b:8b:67:ad:72:64:e6:0b:57:e5:72: 5d:6e:af:0f:73:5d:db:49:42:11:53:26:14:cb:93:6b:7e:06: 10:ab:9d:dc:59:52:f5:d9:48:6a:6c:20:75:26:4e:06:f2:c2: 7c:7a:74:02:23:9f:a0:ad:d8:b9:c9:95:15:7f:72:e2:af:eb: a3:ac:0c:ff:5b:15:e6:50:4a:08:10:7d:d6:b3:42:d3:f4:6b: 56:cf:15:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/NaAsw54v/xnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZDI3ZmZkZTEtZDJiNS00ZjVlLWE2MmItZDBkMGFmNzQ2YjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypJ/c/lTJtiIICcFMjEEAtQcPjOhb+DGxTs+ acsuR4lJMODyx/6MBULaKAbn4XkZ1G0kCku/bFL883WjZYLOcCkMTYoej1zCQDcz 2b1PHjCpq2BZBqFQFeEJgC+3J0VXFj35cGZxIcO6L3OSn/6tBPv1DU6yv0kOoSc4 4dAdGil6UgxrTaWtV8ps5txsJ8eZ0bmve7r1YKKPOk6MnUrPSmXElk/Kvq93YRNP zIFv4mQYnvIi7FfMGysd3GIQnypvFYC5CoYKPA98Lx3APqkRd8xcrDt+f6KXB7LC jtMwdAa5lWZuJeagTrxmOH9zPK5KCQGWX50n677UtClDlMKt4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7IMnhEVYuQC9kMcmgWekfPqCE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvZDk4YTYzZjUtZTBkZS0z NWJmLWFjMmQtZDRjODI5MTI1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmWG9XOHcKbxAFmAq+DjKqEPU0lGpS4nhiW2E0jGau/dWqlcsVGi/b9 I3gQoGzcNuUlp+OEHahZMbC6UNkeOMD2BWdDRykB/Yynhw3MNDIYpgtoSRAO9pz9 QVZZP86Zd8bnieg96nWgqYQ8oISMVDfDKC/2IeulvaK66snDKWKBHyGjfZh+ef+c XsUtEu0cE7GR0jCu4iahBQlv9i7HK+b+2ID1Yt9l+FAbi2etcmTmC1flcl1urw9z XdtJQhFTJhTLk2t+BhCrndxZUvXZSGpsIHUmTgbywnx6dAIjn6Ct2LnJlRV/cuKv 66OsDP9bFeZQSggQfdazQtP0a1bPFR0= -----END CERTIFICATE-----Generated at Sat Apr 19 16:34:13 2025 by rpki-client