$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json) Hash identifier: PzPlQ74PLNTpDEbhwAkcC95apK0gZzKKMy/Y9REBQa0= Subject key identifier: 46:6B:3B:64:90:2B:8A:AB:09:93:95:BC:71:D4:0B:09:EA:A9:17:E8 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F43285849D85FA9B73681F7517A842800 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 6206 IP address blocks: 172.98.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a9:b7:36:81:f7:51:7a:84:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0da80d0e-0b96-422e-8f5a-eda3ecc9b7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:70:92:ef:e8:86:64:24:5d:5a:dc:c9:f6: c1:4b:96:0a:96:8f:06:ab:e2:d2:43:d8:80:8b:9f: 52:f1:e8:3f:a2:a4:01:50:46:b4:b4:83:bd:35:4b: bb:7f:56:db:d8:a7:5b:d6:5d:1f:a0:9d:12:91:d6: b2:a5:e6:0f:c6:ff:eb:9d:a4:0e:c4:2d:70:77:e9: 27:6a:4d:c3:bb:d4:a8:65:02:fe:01:37:11:92:b6: 7b:43:92:6b:dd:bf:80:7c:a6:02:8c:d1:c2:86:7e: 36:a5:ad:67:68:05:f3:6e:35:9a:8e:7b:48:9b:68: e8:ba:09:7a:64:c2:51:42:69:78:c7:18:71:67:4d: 54:44:bf:8f:c9:7a:41:26:9a:8a:68:37:06:7c:de: 2a:af:a2:f7:80:54:44:06:f9:c4:06:41:60:e2:89: 48:06:67:e1:df:43:17:5c:48:4e:ca:ac:fb:b3:05: 3f:41:ed:6d:6c:93:b6:3e:2e:a6:ba:5a:8d:79:54: 99:ce:de:67:fb:aa:85:fa:eb:ca:25:a5:63:65:a4: 18:f7:46:2f:b6:06:ae:5a:c4:48:3f:17:88:50:cd: 56:69:a9:dd:43:a1:2a:68:fc:5d:9b:53:4a:1f:a2: d9:7b:33:1e:a8:ae:fd:77:74:e8:61:03:36:ef:8c: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6B:3B:64:90:2B:8A:AB:09:93:95:BC:71:D4:0B:09:EA:A9:17:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:63:c6:91:56:43:92:63:96:e5:1a:59:a5:d5:76:03:a7:53: 0f:eb:e9:4f:6f:8e:13:c7:0c:e6:d4:a6:72:c4:15:28:3c:03: 63:fc:22:92:db:75:0b:44:7b:26:58:ff:d6:07:56:6a:cc:db: c8:96:3f:11:2c:a6:cc:9d:b4:9f:c5:fc:01:bb:6f:5b:52:18: 85:fa:0b:6d:b2:b7:ef:e8:69:ae:df:a9:3e:1d:72:9e:42:65: 9b:27:ec:6d:10:a4:06:9e:8d:aa:56:5e:29:4a:a0:a2:5c:9e: 44:58:e9:5a:1f:30:f7:62:e8:bb:b6:fc:3e:19:04:34:2f:b7: 94:ac:03:cd:5f:6f:0c:cb:63:f5:b0:3d:1a:16:76:28:bc:f6: 1c:0b:77:b9:87:59:24:ca:fb:13:d1:15:3b:70:ca:c4:95:a2: 97:7e:d1:36:b1:e1:e3:4e:55:f5:20:16:f0:61:d4:57:d3:00: 89:b3:ad:96:b5:20:7c:8d:0d:bd:4d:ba:2e:ba:84:d9:72:90: 3e:d1:af:13:86:09:81:f3:57:f5:21:a6:8b:e6:88:cd:ca:7b: 61:40:82:b2:5d:d1:42:19:fb:c0:16:82:fb:17:f2:5b:47:7a: cc:93:35:db:ce:b0:10:98:b0:25:44:43:8b:82:03:c2:3a:14: e5:7d:93:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6m3NoH3UXqEKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGRhODBkMGUtMGI5Ni00MjJlLThmNWEtZWRhM2VjYzliN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Fwku/ohmQkXVrcyfbBS5YKlo8Gq+LSQ9iA i59S8eg/oqQBUEa0tIO9NUu7f1bb2Kdb1l0foJ0SkdaypeYPxv/rnaQOxC1wd+kn ak3Du9SoZQL+ATcRkrZ7Q5Jr3b+AfKYCjNHChn42pa1naAXzbjWajntIm2jougl6 ZMJRQml4xxhxZ01URL+PyXpBJpqKaDcGfN4qr6L3gFREBvnEBkFg4olIBmfh30MX XEhOyqz7swU/Qe1tbJO2Pi6mulqNeVSZzt5n+6qF+uvKJaVjZaQY90YvtgauWsRI PxeIUM1WaandQ6EqaPxdm1NKH6LZezMeqK79d3ToYQM274zaFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZrO2SQK4qrCZOVvHHUCwnqqRfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvYTVhMjQ0NzYtYTM2Yi0z ZWJjLWEwNzAtODVkNTdhMmEwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9jxpFWQ5JjluUaWaXVdgOnUw/r6U9vjhPHDObUpnLEFSg8A2P8IpLb dQtEeyZY/9YHVmrM28iWPxEspsydtJ/F/AG7b1tSGIX6C22yt+/oaa7fqT4dcp5C ZZsn7G0QpAaejapWXilKoKJcnkRY6VofMPdi6Lu2/D4ZBDQvt5SsA81fbwzLY/Ww PRoWdii89hwLd7mHWSTK+xPRFTtwysSVopd+0Tax4eNOVfUgFvBh1FfTAImzrZa1 IHyNDb1Nui66hNlykD7RrxOGCYHzV/UhpovmiM3Ke2FAgrJd0UIZ+8AWgvsX8ltH esyTNdvOsBCYsCVEQ4uCA8I6FOV9k4Q= -----END CERTIFICATE-----Generated at Sun Jun 29 04:13:30 2025 by rpki-client