$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa File: 8688f611-6998-3489-95fe-612bf6872077.roa (raw, json) Hash identifier: vapEBcuL6YqWc0AR3G7CZ9eLkbzBH6xwui1jwz+LDUI= Subject key identifier: 20:47:9A:CB:28:FA:F2:3C:5A:47:82:55:B0:EE:F3:CC:84:39:1D:61 Certificate issuer: /CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919 Certificate serial: 010D0C9F43285849CE9A6C9AF82E0D4990EA28C0 Authority key identifier: FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 63023 IP address blocks: 98.159.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6c:9a:f8:2e:0d:49:90:ea:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f9a3020e-3482-4c9e-bbab-442cb5e186f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:01:af:c4:25:8c:dd:2c:eb:5c:3c:19:c3:97: f1:af:b7:4a:08:fb:a6:98:a8:09:24:80:e0:cd:18: 86:ee:61:78:45:31:1f:0e:83:b0:12:c6:b8:fe:03: 3f:37:d3:1f:55:d0:4e:e0:56:ec:a0:9e:15:1d:5f: dc:c9:79:96:a7:37:ba:72:80:81:c2:65:01:9e:d3: ce:19:c8:62:4e:9c:7b:64:47:cb:20:6e:0d:ab:8f: a9:74:79:ca:d5:53:ce:23:43:9d:2d:a3:54:7a:9d: 21:c3:2e:c8:6c:50:bb:5a:35:9f:ed:aa:8f:1b:7b: 58:7d:b1:18:2f:0c:3f:64:78:a0:e7:99:3c:e0:34: 08:b8:8a:aa:1a:96:bf:31:8f:c1:01:d4:03:f0:47: 03:8b:41:69:c7:fa:2c:1d:ec:f3:10:7d:f4:09:c8: 98:b0:d6:db:f2:5c:f8:e0:3d:42:87:a2:87:15:13: 5a:a8:11:ad:10:20:66:c3:7f:b7:36:37:24:26:3f: e6:50:4a:5b:29:5d:25:97:f2:e2:10:1e:8b:21:ac: 7f:d6:e6:15:01:b6:23:25:43:32:f6:a3:93:2a:ff: 42:9d:d9:6c:5a:6b:4f:84:1a:dd:3a:0a:55:54:78: 53:0b:b7:28:80:3d:22:a4:ac:4c:53:67:2e:e3:42: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:9A:CB:28:FA:F2:3C:5A:47:82:55:B0:EE:F3:CC:84:39:1D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl X509v3 Authority Key Identifier: keyid:FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer sbgp-ipAddrBlock: critical IPv4: 98.159.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ec:5f:f5:ae:96:8f:92:66:53:e2:0e:f4:f6:3f:a5:ef:59: 4c:2c:0c:2a:05:bc:6b:21:82:ba:bb:61:25:c7:e2:3e:aa:4f: 2c:36:dc:71:6e:9b:5f:e0:78:ad:6f:3d:00:92:f9:ed:2e:2a: 10:c5:9b:46:23:8d:36:76:a7:e5:b4:e8:cc:d2:c0:cd:1e:8e: 0c:ff:cd:87:63:c2:5d:95:ac:1c:f6:d8:03:b8:26:3f:93:8c: 58:03:b8:72:26:73:65:88:b3:c0:35:3a:f2:18:c6:78:02:93: 94:e9:27:ab:b4:55:16:3e:a1:19:9f:c2:48:f0:8a:3e:1b:39: 43:1a:71:f6:bb:e9:43:92:3b:e9:ac:76:0b:55:3f:1d:56:30: b4:19:d2:4e:67:e4:f1:d2:fb:a7:e4:94:0a:4c:49:63:90:24: e3:93:03:d1:84:cc:22:72:3f:b0:16:bc:08:f9:46:37:1d:4a: 2a:bf:a0:0f:38:4f:ac:d0:93:25:e5:f8:37:c4:10:00:6a:ff: 2b:3b:20:9e:7b:08:4f:48:29:96:41:5a:22:0c:c0:75:0e:f2: e5:fe:59:a8:36:91:75:36:bd:f5:24:52:4f:93:a6:98:75:aa: 04:ac:77:e4:5b:1f:94:a1:79:2c:af:15:b5:cd:71:83:03:2c: 24:0e:ba:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmya+C4NSZDqKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQwMTM4ODktYTYwYS00YTJjLWEwZGQtZWI4ZThkMzEw OTE5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZjlhMzAyMGUtMzQ4Mi00YzllLWJiYWItNDQyY2I1ZTE4NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggGvxCWM3SzrXDwZw5fxr7dKCPummKgJJIDg zRiG7mF4RTEfDoOwEsa4/gM/N9MfVdBO4FbsoJ4VHV/cyXmWpze6coCBwmUBntPO GchiTpx7ZEfLIG4Nq4+pdHnK1VPOI0OdLaNUep0hwy7IbFC7WjWf7aqPG3tYfbEY Lww/ZHig55k84DQIuIqqGpa/MY/BAdQD8EcDi0Fpx/osHezzEH30CciYsNbb8lz4 4D1Ch6KHFRNaqBGtECBmw3+3NjckJj/mUEpbKV0ll/LiEB6LIax/1uYVAbYjJUMy 9qOTKv9CndlsWmtPhBrdOgpVVHhTC7cogD0ipKxMU2cu40LbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBHmsso+vI8WkeCVbDu88yEOR1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZDAx Mzg4OS1hNjBhLTRhMmMtYTBkZC1lYjhlOGQzMTA5MTkvODY4OGY2MTEtNjk5OC0z NDg5LTk1ZmUtNjEyYmY2ODcyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWQwMTM4ODktYTYwYS00YTJjLWEw ZGQtZWI4ZThkMzEwOTE5L2FkMDEzODg5LWE2MGEtNGEyYy1hMGRkLWViOGU4ZDMx MDkxOS5jcmwwHwYDVR0jBBgwFoAU+rCVNFwx0X6fFN1dLZKgzBh7l7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZDAxMzg4OS1hNjBhLTRhMmMtYTBkZC1lYjhl OGQzMTA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7sX/Wulo+SZlPiDvT2P6XvWUwsDCoFvGshgrq7YSXH4j6qTyw23HFu m1/geK1vPQCS+e0uKhDFm0YjjTZ2p+W06MzSwM0ejgz/zYdjwl2VrBz22AO4Jj+T jFgDuHImc2WIs8A1OvIYxngCk5TpJ6u0VRY+oRmfwkjwij4bOUMacfa76UOSO+ms dgtVPx1WMLQZ0k5n5PHS+6fklApMSWOQJOOTA9GEzCJyP7AWvAj5RjcdSiq/oA84 T6zQkyXl+DfEEABq/ys7IJ57CE9IKZZBWiIMwHUO8uX+Wag2kXU2vfUkUk+Tpph1 qgSsd+RbH5SheSyvFbXNcYMDLCQOuv4= -----END CERTIFICATE-----Generated at Sun May 11 12:43:22 2025 by rpki-client