$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa File: 8af32f4b-3d49-34a7-907b-43985f15f53e.roa (raw, json) Hash identifier: 0k/ZBJy5oDTFYZbNDPMxnwSmsKLLVwlEa1PmwDhfZ9U= Subject key identifier: 71:A4:6E:A6:5C:65:81:08:70:BD:7B:D5:DB:6F:55:00:B8:37:F4:61 Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Certificate serial: 010D0C9F43285849ABB49BF24D62356B574FF2A0 Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 98.142.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9b:f2:4d:62:35:6b:57:4f:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a0acc88f-2b12-4b75-a311-2c883071b346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:91:72:f0:ed:40:af:3f:07:5b:18:42:25: d2:9f:2e:86:c3:34:87:32:86:58:7d:35:72:1e:41: af:65:4d:22:03:e9:93:78:7e:87:4c:56:3f:53:35: 17:0f:12:be:b2:36:b7:b1:61:4d:66:9a:c7:dc:97: 9c:7c:76:8b:ba:a5:e9:55:4c:dc:17:b5:f5:ad:dc: 66:64:f4:24:33:12:66:b5:c2:48:64:2d:6a:38:37: 2a:3e:ce:1c:ba:9b:01:83:a7:5c:7f:56:46:07:9b: 15:7e:2f:13:5a:bb:6b:39:f3:3b:73:99:66:65:0b: 4c:74:35:83:d8:fc:22:3e:fb:e9:18:b4:7f:e7:df: f8:26:a2:a3:b1:ad:2b:dc:41:ea:92:3e:a4:17:19: 42:06:b6:6b:4d:d5:68:59:25:f2:22:f1:8c:68:a7: 23:b8:3a:ea:4d:5c:08:7a:4a:e0:af:83:6d:2d:70: eb:c5:d1:ad:db:83:c2:66:ca:72:00:f2:64:8e:9f: e7:ec:21:fd:e3:b3:73:09:a7:60:4e:51:18:1b:96: 7a:35:11:4f:64:90:4e:00:e2:99:2b:f7:8a:86:44: 1f:05:f8:f9:0b:ed:a6:68:75:1d:db:e6:97:24:4d: ed:9e:7d:6a:55:b8:34:1b:b4:71:92:ba:12:43:98: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:6E:A6:5C:65:81:08:70:BD:7B:D5:DB:6F:55:00:B8:37:F4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl X509v3 Authority Key Identifier: keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer sbgp-ipAddrBlock: critical IPv4: 98.142.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b6:14:1c:53:42:66:84:e5:34:e5:4b:c2:38:b2:a3:de:3a: 29:2d:12:28:80:07:8d:c9:18:e8:d0:f1:1f:13:42:4c:62:a7: 76:66:eb:91:69:30:99:31:b5:e5:b6:07:24:f8:22:ad:ae:52: 60:ee:07:08:43:44:90:b2:99:f7:90:5f:1b:c5:c9:ff:d7:9a: c9:ca:c3:cd:56:49:14:ac:77:11:8c:43:d6:e7:9d:d2:2f:b8: bb:ae:4d:10:7b:e6:75:3d:9c:57:7d:25:05:e8:76:ab:8d:ba: 20:d2:8d:1d:b5:22:6d:cb:7a:28:70:8a:f0:cc:95:d9:5f:9c: f6:22:3d:e5:d2:14:a1:d9:bc:d6:b3:e1:83:c1:c6:c7:b1:9e: c4:0a:5f:43:cd:1a:4f:2e:b5:0e:ba:fe:fc:ef:5c:40:5d:a6: 43:ca:78:c2:0e:a5:55:a2:e8:38:7d:d6:a7:93:46:e8:31:7d: 4e:6d:40:f1:63:53:83:32:ba:3b:c2:b1:61:47:a9:a1:f4:e5: c9:10:89:9f:5a:a2:ac:c7:f5:04:e4:db:0c:78:4f:84:35:bd: 32:3b:c8:af:96:e6:dd:df:c9:75:57:26:30:04:2e:bc:1b:68: 62:2b:da:a8:20:43:4d:f4:a7:09:a0:80:89:b7:11:23:65:21: 67:48:9a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJvyTWI1a1dP8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3 N2YwMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTBhY2M4OGYtMmIxMi00Yjc1LWEzMTEtMmM4ODMwNzFiMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/KRcvDtQK8/B1sYQiXSny6GwzSHMoZYfTVy HkGvZU0iA+mTeH6HTFY/UzUXDxK+sja3sWFNZprH3JecfHaLuqXpVUzcF7X1rdxm ZPQkMxJmtcJIZC1qODcqPs4cupsBg6dcf1ZGB5sVfi8TWrtrOfM7c5lmZQtMdDWD 2PwiPvvpGLR/59/4JqKjsa0r3EHqkj6kFxlCBrZrTdVoWSXyIvGMaKcjuDrqTVwI ekrgr4NtLXDrxdGt24PCZspyAPJkjp/n7CH947NzCadgTlEYG5Z6NRFPZJBOAOKZ K/eKhkQfBfj5C+2maHUd2+aXJE3tnn1qVbg0G7RxkroSQ5h/xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGkbqZcZYEIcL171dtvVQC4N/RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvOGFmMzJmNGItM2Q0OS0z NGE3LTkwN2ItNDM5ODVmMTVmNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh YTMxMTc3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF62FBxTQmaE5TTlS8I4sqPeOiktEiiAB43JGOjQ8R8TQkxip3Zm65Fp MJkxteW2ByT4Iq2uUmDuBwhDRJCymfeQXxvFyf/XmsnKw81WSRSsdxGMQ9bnndIv uLuuTRB75nU9nFd9JQXodquNuiDSjR21Im3LeihwivDMldlfnPYiPeXSFKHZvNaz 4YPBxsexnsQKX0PNGk8utQ66/vzvXEBdpkPKeMIOpVWi6Dh91qeTRugxfU5tQPFj U4MyujvCsWFHqaH05ckQiZ9aoqzH9QTk2wx4T4Q1vTI7yK+W5t3fyXVXJjAELrwb aGIr2qggQ030pwmggIm3ESNlIWdImr0= -----END CERTIFICATE-----Generated at Mon May 5 15:54:46 2025 by rpki-client