$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa File: 8d352a99-b26f-325a-8066-4e236b1102a1.roa (raw, json) Hash identifier: F+xkJvPJa42qpSHpOW+9c0vjBblXFGYtFXwXZbhm7m0= Subject key identifier: 31:C1:F6:02:99:84:C6:E6:81:FC:76:7F:44:45:90:74:23:BE:32:0C Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F432858499C59E5E4DE8F07DC56704100 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 134365 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e5:e4:de:8f:07:dc:56:70:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=d687e153-9045-424a-9eab-0f4c05792f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:47:fd:51:f8:41:00:08:04:67:5c:d0:1f: f7:dc:35:43:65:b3:e8:26:98:69:30:59:97:35:e5: 06:86:ed:87:99:eb:f0:1f:94:65:04:b8:6f:6c:0d: 93:3e:f8:ea:cc:5f:df:0d:cf:a3:1a:ae:de:c8:be: 3a:da:ca:77:76:97:52:15:70:ba:3e:59:1e:2f:02: d9:3a:08:d1:ea:65:8b:0f:c2:36:43:d2:04:4f:d2: b8:34:f1:38:73:fe:ca:68:e3:37:6f:3b:e2:76:f0: 2a:d4:4b:aa:11:eb:3b:d3:df:1b:71:14:44:64:52: b7:0d:92:f2:57:55:20:8f:e7:7b:5b:74:4c:8e:89: 2d:d3:e7:3b:51:f2:5f:01:b5:a7:9a:99:ed:b9:b1: 8b:d8:68:d3:f9:e1:50:ef:78:8f:ff:c4:5a:c9:18: 24:20:41:b7:ec:ed:8c:36:5d:ed:54:17:a5:c0:cd: 8a:af:34:7d:da:be:91:b8:12:89:e9:26:da:bb:36: d4:15:e7:9c:82:9d:c4:51:ae:a1:f3:c0:a5:b8:a4: 8f:e0:46:ee:99:79:9a:2c:1b:41:9c:85:fe:aa:ba: 51:15:9c:b5:40:7a:3c:9e:09:46:92:e7:2f:d6:14: b6:df:1d:60:d4:78:51:a5:6d:91:a8:01:38:b1:3a: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C1:F6:02:99:84:C6:E6:81:FC:76:7F:44:45:90:74:23:BE:32:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1a:ab:d7:e4:49:d4:a0:74:db:c9:25:76:07:2c:8c:37:97: 71:c2:69:74:9e:b3:5f:14:37:fc:20:66:5b:b4:69:8a:03:d5: f2:9a:7b:1b:ed:46:84:4a:bd:47:1a:f0:9f:50:bd:89:1c:51: 28:e2:6f:77:cf:4e:37:55:46:f7:50:c3:1b:fa:51:db:f7:b3: 85:0f:18:47:cc:6d:6b:f3:e2:60:c9:5d:94:f0:fb:c1:16:a0: 83:37:9c:7b:bb:5f:6a:63:ea:c6:49:ea:97:ff:89:66:51:00: f6:02:3d:eb:64:13:1e:39:9a:01:13:5e:e0:ab:1c:f4:4a:7a: 69:23:fd:f1:02:d5:d8:77:65:4f:40:33:fa:47:86:9f:b2:5b: 95:77:61:8b:fe:b0:f8:8e:7a:dd:04:89:99:3e:fd:52:f1:87: 16:e8:d8:9f:57:5e:fe:2b:87:c4:63:7a:60:2f:2c:ac:6c:bf: 78:6d:bb:38:00:98:e8:c9:5c:2b:28:06:f7:4e:b4:cd:35:a1: 61:10:82:42:5d:b4:52:95:a8:ad:de:51:15:77:f7:b9:b8:0a: fa:cc:94:e9:64:b2:cc:1e:5f:85:7c:80:b6:f7:e7:44:a2:8e: eb:4d:45:9f:66:4a:e3:aa:86:54:14:b5:20:57:68:18:b4:a8: c0:c8:6b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeXk3o8H3FZwQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZDY4N2UxNTMtOTA0NS00MjRhLTllYWItMGY0YzA1NzkyZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXRH/VH4QQAIBGdc0B/33DVDZbPoJphpMFmX NeUGhu2HmevwH5RlBLhvbA2TPvjqzF/fDc+jGq7eyL462sp3dpdSFXC6PlkeLwLZ OgjR6mWLD8I2Q9IET9K4NPE4c/7KaOM3bzvidvAq1EuqEes7098bcRREZFK3DZLy V1Ugj+d7W3RMjokt0+c7UfJfAbWnmpntubGL2GjT+eFQ73iP/8RayRgkIEG37O2M Nl3tVBelwM2KrzR92r6RuBKJ6SbauzbUFeecgp3EUa6h88CluKSP4EbumXmaLBtB nIX+qrpRFZy1QHo8nglGkucv1hS23x1g1HhRpW2RqAE4sTpOswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHB9gKZhMbmgfx2f0RFkHQjvjIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvOGQzNTJhOTktYjI2Zi0z MjVhLTgwNjYtNGUyMzZiMTEwMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsaq9fkSdSgdNvJJXYHLIw3l3HCaXSes18UN/wgZlu0aYoD1fKaexvt RoRKvUca8J9QvYkcUSjib3fPTjdVRvdQwxv6Udv3s4UPGEfMbWvz4mDJXZTw+8EW oIM3nHu7X2pj6sZJ6pf/iWZRAPYCPetkEx45mgETXuCrHPRKemkj/fEC1dh3ZU9A M/pHhp+yW5V3YYv+sPiOet0EiZk+/VLxhxbo2J9XXv4rh8RjemAvLKxsv3htuzgA mOjJXCsoBvdOtM01oWEQgkJdtFKVqK3eURV397m4CvrMlOlkssweX4V8gLb350Si jutNRZ9mSuOqhlQUtSBXaBi0qMDIa+s= -----END CERTIFICATE-----Generated at Wed May 7 13:02:47 2025 by rpki-client