$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa File: db3cba64-f46e-3705-bc34-06bef8b2191d.roa (raw, json) Hash identifier: 989f89eJOj1nptLYZ37tI9Q6JzxxT+5e/9f5MbvncDE= Subject key identifier: 1D:2D:86:F7:1F:A2:AA:30:7F:34:FC:2B:B3:3D:08:04:F0:A5:C5:BA Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849D85FA2DE96B33595C361FC00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 25899 IP address blocks: 98.142.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a2:de:96:b3:35:95:c3:61:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=abb72bf6-d7db-496d-8216-ae5031286825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:65:98:ac:e5:2a:a6:ee:47:0c:47:5d:63: 52:b7:95:ad:55:70:9f:5e:3c:da:b7:11:6c:d7:78: 95:33:56:56:14:48:43:c4:5e:8e:77:06:64:d8:e7: 70:c5:fe:1c:30:ac:db:07:0a:10:24:95:e0:76:f8: 33:1e:68:eb:31:aa:ba:79:30:ab:db:95:f8:d4:4b: d1:20:d4:95:bd:77:0e:7b:d3:46:0f:29:f6:36:b8: 80:08:b1:d0:d3:05:3b:19:9a:a1:01:64:b6:1a:f4: df:d2:32:99:ab:a4:75:a8:eb:e1:b6:ba:eb:c1:c7: d0:f4:26:f2:6b:84:67:81:80:63:6a:26:42:da:1e: da:93:6e:51:dd:81:55:c6:24:cb:f7:a7:11:47:5c: 1c:78:3d:cf:25:41:13:c4:4f:74:f3:17:35:1d:41: 48:e0:d5:75:f6:87:82:8d:c5:81:d3:12:75:e4:76: a8:59:ba:93:98:b1:59:86:78:46:60:f6:4a:51:13: 25:55:08:cf:9a:da:cf:8c:17:05:6f:26:89:bf:d3: 87:4f:bb:80:d4:ff:6b:84:56:81:42:8d:64:8c:25: 47:ee:72:b6:95:07:74:05:41:b3:37:34:53:59:dc: 6a:82:b6:9b:01:cd:1b:89:b1:3a:97:91:86:a6:64: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2D:86:F7:1F:A2:AA:30:7F:34:FC:2B:B3:3D:08:04:F0:A5:C5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 98.142.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ea:ac:7d:49:9d:60:53:d5:04:af:0f:a6:75:4f:e7:8d:ad: fa:f8:81:14:b0:15:40:7e:4d:d5:e4:9d:55:40:65:bb:7d:52: 5b:f8:a5:3d:af:96:85:3c:27:2c:92:8c:87:db:66:a3:8d:92: 31:28:21:eb:07:05:6e:be:36:49:00:cb:7a:3a:d0:c4:fb:86: 5b:6f:7a:6f:9a:fa:46:3b:b5:10:73:51:e9:8e:4f:58:3a:09: 05:eb:90:df:bb:7d:30:9d:47:30:81:78:92:ae:45:1d:dc:ec: 7b:96:76:3b:fe:9c:ef:74:b6:1b:df:91:d3:9a:40:5f:af:ce: a9:5f:fa:eb:4f:30:81:d9:7b:28:8e:bf:09:f6:99:a4:69:37: e9:69:99:1b:d8:72:a1:3f:b2:ce:71:69:f4:8e:84:66:f1:18: eb:0f:9a:70:68:e6:5e:04:dc:64:c2:1e:e4:3d:98:ea:45:84: 6f:c0:49:d8:07:2f:08:97:03:d4:98:45:31:e6:45:d5:0d:a6: 61:c3:eb:df:9d:86:ca:33:e2:05:55:82:4e:61:8a:0c:32:e7: 9f:39:6c:c4:bd:68:39:56:70:e3:79:32:ba:ff:d3:72:dc:91: 54:2c:4d:51:8a:e4:36:48:23:f1:dc:c9:15:69:77:71:d2:24: 6a:e4:cc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6LelrM1lcNh/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWJiNzJiZjYtZDdkYi00OTZkLTgyMTYtYWU1MDMxMjg2ODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEhlmKzlKqbuRwxHXWNSt5WtVXCfXjzatxFs 13iVM1ZWFEhDxF6OdwZk2Odwxf4cMKzbBwoQJJXgdvgzHmjrMaq6eTCr25X41EvR INSVvXcOe9NGDyn2NriACLHQ0wU7GZqhAWS2GvTf0jKZq6R1qOvhtrrrwcfQ9Cby a4RngYBjaiZC2h7ak25R3YFVxiTL96cRR1wceD3PJUETxE908xc1HUFI4NV19oeC jcWB0xJ15HaoWbqTmLFZhnhGYPZKURMlVQjPmtrPjBcFbyaJv9OHT7uA1P9rhFaB Qo1kjCVH7nK2lQd0BUGzNzRTWdxqgrabAc0bibE6l5GGpmR6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0thvcfoqowfzT8K7M9CATwpcW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGIzY2JhNjQtZjQ2ZS0z NzA1LWJjMzQtMDZiZWY4YjIxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLqrH1JnWBT1QSvD6Z1T+eNrfr4gRSwFUB+TdXknVVAZbt9Ulv4pT2v loU8JyySjIfbZqONkjEoIesHBW6+NkkAy3o60MT7hltvem+a+kY7tRBzUemOT1g6 CQXrkN+7fTCdRzCBeJKuRR3c7HuWdjv+nO90thvfkdOaQF+vzqlf+utPMIHZeyiO vwn2maRpN+lpmRvYcqE/ss5xafSOhGbxGOsPmnBo5l4E3GTCHuQ9mOpFhG/ASdgH LwiXA9SYRTHmRdUNpmHD69+dhsoz4gVVgk5higwy5585bMS9aDlWcON5Mrr/03Lc kVQsTVGK5DZII/HcyRVpd3HSJGrkzLY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:30 2025 by rpki-client