$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/08b9641a-64e1-390d-86b9-1c40571c09e4.roa File: 08b9641a-64e1-390d-86b9-1c40571c09e4.roa (raw, json) Hash identifier: lGd2R3xAjdm2Harqnvy84TyKo5iqYGX72Rz7f3TRWJY= Subject key identifier: B0:BC:92:BF:F0:62:59:8E:97:8C:96:FF:1F:D1:54:4E:AE:56:BA:76 Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F432858499C59E7D56F3B94C502D0AA00 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/08b9641a-64e1-390d-86b9-1c40571c09e4.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 137443 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e7:d5:6f:3b:94:c5:02:d0:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=01f8bd99-bfbc-4a8f-94bd-c1205831ddbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:c7:85:da:b7:8f:1f:67:7d:72:36:fe:9c: 6f:c0:eb:32:97:12:68:f0:c0:c1:df:fb:90:17:d0: 95:90:e3:9c:86:7a:e7:a4:72:80:e0:37:30:d2:4a: fb:ec:c3:ec:e7:b2:b9:92:1f:60:58:b3:74:ca:6d: 9b:74:a3:d0:b8:89:e4:54:90:eb:0e:66:b6:21:60: 1d:c5:8d:49:cf:12:72:aa:9a:61:b1:bb:dd:a1:9e: cd:91:85:31:b0:46:14:4a:1a:8f:f2:fe:1f:6e:e9: a4:fc:bb:72:95:6c:95:b5:3a:77:f1:9f:a7:dd:28: 5c:14:48:ef:b3:ae:b2:38:98:2e:0a:8a:54:f7:2c: 20:3f:55:68:c1:1a:ea:d5:22:c6:ed:e9:54:8c:b7: 4c:9d:74:07:96:35:8a:e5:91:1c:e9:52:de:49:94: 6e:7e:44:aa:fb:40:25:96:94:1e:14:6a:6c:8d:e6: 31:61:eb:15:86:4c:d0:10:1d:3c:db:2c:d5:58:b2: 81:00:3d:4c:75:1b:ee:33:82:72:eb:35:a0:f3:38: b2:4e:21:f0:cd:17:21:17:8b:8f:03:c5:09:9e:b9: 69:73:6f:72:3f:b0:ff:da:f1:49:c8:42:9f:5d:99: 5e:ec:35:57:31:6f:5d:d7:36:ce:48:6b:ba:42:38: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:92:BF:F0:62:59:8E:97:8C:96:FF:1F:D1:54:4E:AE:56:BA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/08b9641a-64e1-390d-86b9-1c40571c09e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:d3:b8:06:91:eb:22:70:6f:87:df:59:38:0b:c9:e2:f0:6f: 67:78:d3:a3:2b:b7:40:9d:76:64:9d:a4:a2:62:b7:8b:1c:57: a9:e2:8d:29:98:7e:f3:63:c9:90:fc:ec:33:98:71:9c:15:7e: be:c2:b3:47:c5:0c:f2:bb:3f:ec:6b:8a:2a:b1:76:1a:f5:7d: fc:17:09:da:30:42:9e:69:85:52:9b:20:77:20:b9:e8:7a:6a: e9:b5:e1:db:f1:ed:d4:94:6c:05:fe:22:97:76:1e:49:9c:fb: 35:e6:69:30:3b:7b:a5:a1:3e:aa:32:51:8a:5d:4e:0f:e7:93: 49:82:4c:b0:9e:08:16:5b:64:d2:f7:ca:76:02:93:0c:0a:8d: 49:e8:94:8b:db:dc:aa:fd:78:f0:41:c8:0c:19:45:08:fa:97: e9:9b:e1:30:8a:17:b7:94:72:73:b2:8d:b5:ef:9d:12:8d:0d: 47:db:01:89:f3:38:ae:c0:e5:4a:e8:69:26:d3:84:a0:1b:2f: 2e:9c:fe:c4:77:26:fc:4a:39:98:75:fc:98:8c:fe:b9:36:4c: a0:0f:69:7e:e5:a1:21:98:e8:cd:09:0d:1d:71:03:8a:4d:49: 9b:ec:5e:54:bd:df:68:e6:9b:44:88:07:46:49:1a:a7:d5:99: 15:b4:dc:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWefVbzuUxQLQqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MDFmOGJkOTktYmZiYy00YThmLTk0YmQtYzEyMDU4MzFkZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjHhdq3jx9nfXI2/pxvwOsylxJo8MDB3/uQ F9CVkOOchnrnpHKA4Dcw0kr77MPs57K5kh9gWLN0ym2bdKPQuInkVJDrDma2IWAd xY1JzxJyqpphsbvdoZ7NkYUxsEYUShqP8v4fbumk/LtylWyVtTp38Z+n3ShcFEjv s66yOJguCopU9ywgP1VowRrq1SLG7elUjLdMnXQHljWK5ZEc6VLeSZRufkSq+0Al lpQeFGpsjeYxYesVhkzQEB082yzVWLKBAD1MdRvuM4Jy6zWg8ziyTiHwzRchF4uP A8UJnrlpc29yP7D/2vFJyEKfXZle7DVXMW9d1zbOSGu6QjjSdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC8kr/wYlmOl4yW/x/RVE6uVrp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvMDhiOTY0MWEtNjRlMS0z OTBkLTg2YjktMWM0MDU3MWMwOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXTuAaR6yJwb4ffWTgLyeLwb2d406Mrt0CddmSdpKJit4scV6nijSmY fvNjyZD87DOYcZwVfr7Cs0fFDPK7P+xriiqxdhr1ffwXCdowQp5phVKbIHcgueh6 aum14dvx7dSUbAX+Ipd2Hkmc+zXmaTA7e6WhPqoyUYpdTg/nk0mCTLCeCBZbZNL3 ynYCkwwKjUnolIvb3Kr9ePBByAwZRQj6l+mb4TCKF7eUcnOyjbXvnRKNDUfbAYnz OK7A5UroaSbThKAbLy6c/sR3JvxKOZh1/JiM/rk2TKAPaX7loSGY6M0JDR1xA4pN SZvsXlS932jmm0SIB0ZJGqfVmRW03OE= -----END CERTIFICATE-----Generated at Wed May 7 03:08:21 2025 by rpki-client