$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/9374fc80-4a9f-3748-ae59-aa2669358128.roa File: 9374fc80-4a9f-3748-ae59-aa2669358128.roa (raw, json) Hash identifier: 24lDCON0QgoIqrsAla5egDqircMCsbf6YnNTqkUq8xs= Subject key identifier: A6:63:C8:AC:71:01:58:C4:0A:D3:88:92:02:0B:53:60:A8:32:9C:B6 Certificate issuer: /CN=98c27bef-79eb-4153-b064-e68d263b6ae3 Certificate serial: 010D0C9F432858492A9F02C4D7C7F25C5F87F840 Authority key identifier: A1:93:B3:16:A4:B7:75:34:E9:B0:F2:5B:7C:D6:96:E5:10:64:C3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/9374fc80-4a9f-3748-ae59-aa2669358128.roa Signing time: Wed 12 Mar 2025 19:18:10 +0000 ROA not before: Wed 12 Mar 2025 19:18:10 +0000 ROA not after: Tue 10 Jun 2025 19:18:10 +0000 asID: 400288 IP address blocks: 128.254.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/98c27bef-79eb-4153-b064-e68d263b6ae3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/98c27bef-79eb-4153-b064-e68d263b6ae3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:9f:02:c4:d7:c7:f2:5c:5f:87:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c27bef-79eb-4153-b064-e68d263b6ae3 Validity Not Before: Mar 12 19:18:10 2025 GMT Not After : Jun 10 19:18:10 2025 GMT Subject: CN=a1720cc8-df46-4304-8d6c-de9d4f941517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:5a:8d:d1:b8:b4:d0:e1:48:de:a4:4a:c6: aa:03:0f:99:37:fe:39:8b:bc:6a:7e:ef:60:91:d3: ba:a3:45:8d:d4:06:0d:7a:0f:f9:2d:84:e8:59:cc: 8e:9c:2c:fd:c9:db:5e:59:b7:ac:54:70:2c:11:94: 21:d5:ab:86:8b:e6:2c:fd:0f:94:cb:a9:a9:87:72: 42:57:00:86:e1:30:d7:09:ce:ce:1e:d1:e4:08:93: 11:a2:65:23:09:04:a9:f7:2e:96:cc:b3:86:f9:39: a9:04:8e:67:f1:e8:b4:3d:e6:fb:64:15:f2:49:94: f4:e4:41:88:5f:c8:d5:e3:74:d8:ae:44:51:de:f4: 02:85:8c:83:ac:5d:67:46:2c:2a:3c:b1:79:2a:9e: 2b:80:9f:6d:69:a6:83:22:cd:f6:c0:a6:19:56:d8: ee:e0:e0:66:98:a7:6f:21:61:b6:0d:76:d2:9f:59: ec:95:6e:bb:28:0c:e8:d0:2e:43:8f:1e:8a:1a:8a: d8:24:08:25:4b:75:0d:5d:06:6a:a7:82:ad:b5:19: 5b:67:19:34:e5:fd:3d:79:70:a6:63:82:30:80:9f: 5e:b5:12:6f:a1:47:d1:00:51:7f:ae:6e:1c:bf:fd: 32:07:a2:7b:5b:04:dd:64:5c:fa:ac:19:a7:a0:74: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:63:C8:AC:71:01:58:C4:0A:D3:88:92:02:0B:53:60:A8:32:9C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/9374fc80-4a9f-3748-ae59-aa2669358128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3/98c27bef-79eb-4153-b064-e68d263b6ae3.crl X509v3 Authority Key Identifier: keyid:A1:93:B3:16:A4:B7:75:34:E9:B0:F2:5B:7C:D6:96:E5:10:64:C3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98c27bef-79eb-4153-b064-e68d263b6ae3.cer sbgp-ipAddrBlock: critical IPv4: 128.254.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:99:c0:18:8a:e1:dd:e9:d9:fd:3d:e3:c1:83:86:fa:5c:eb: 11:59:06:f6:d7:09:f8:48:13:c6:d5:c8:ed:f1:02:12:26:b0: 3f:09:da:ca:91:3a:82:47:1f:d8:07:f9:83:ad:4e:5b:d1:7f: d5:c5:83:df:03:4d:90:7f:69:8e:95:d1:ba:37:39:6b:43:8f: 01:15:08:fc:40:d0:86:16:de:e9:7b:bc:97:eb:86:75:9e:35: 5a:3a:84:13:64:ef:97:00:45:b5:e3:66:4a:f7:56:25:e6:f5: df:89:d9:90:ca:94:55:de:15:c3:2f:84:45:e0:13:1d:d4:f3: 06:a0:6a:8e:9e:74:70:b6:43:da:3e:bd:ff:89:60:38:28:9e: 94:2c:39:d4:80:9b:b9:a6:5d:01:60:e1:2b:2d:ad:35:e1:57: d3:8d:cd:dd:99:bd:99:df:08:f9:8a:5f:2c:0a:70:d5:b3:ed: 45:e1:a6:38:ad:94:e9:fb:2e:9a:dc:6d:50:ab:b2:08:e6:8b: 56:69:5c:32:73:30:86:39:ae:8c:75:91:f5:83:fe:bc:33:2b: c1:57:4d:0c:7f:47:da:e0:1f:ca:a3:46:57:5c:f8:f5:4d:0d: 8d:9d:dd:14:fc:99:90:59:7b:a0:47:dc:5d:7c:64:61:fc:e9: 5b:c9:47:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkqnwLE18fyXF+H+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjMjdiZWYtNzllYi00MTUzLWIwNjQtZTY4ZDI2M2I2 YWUzMB4XDTI1MDMxMjE5MTgxMFoXDTI1MDYxMDE5MTgxMFowLzEtMCsGA1UEAxMk YTE3MjBjYzgtZGY0Ni00MzA0LThkNmMtZGU5ZDRmOTQxNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uNajdG4tNDhSN6kSsaqAw+ZN/45i7xqfu9g kdO6o0WN1AYNeg/5LYToWcyOnCz9ydteWbesVHAsEZQh1auGi+Ys/Q+Uy6mph3JC VwCG4TDXCc7OHtHkCJMRomUjCQSp9y6WzLOG+TmpBI5n8ei0Peb7ZBXySZT05EGI X8jV43TYrkRR3vQChYyDrF1nRiwqPLF5Kp4rgJ9taaaDIs32wKYZVtju4OBmmKdv IWG2DXbSn1nslW67KAzo0C5Djx6KGorYJAglS3UNXQZqp4KttRlbZxk05f09eXCm Y4IwgJ9etRJvoUfRAFF/rm4cv/0yB6J7WwTdZFz6rBmnoHQXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZjyKxxAVjECtOIkgILU2CoMpy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OGMy N2JlZi03OWViLTQxNTMtYjA2NC1lNjhkMjYzYjZhZTMvOTM3NGZjODAtNGE5Zi0z NzQ4LWFlNTktYWEyNjY5MzU4MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOThjMjdiZWYtNzllYi00MTUzLWIw NjQtZTY4ZDI2M2I2YWUzLzk4YzI3YmVmLTc5ZWItNDE1My1iMDY0LWU2OGQyNjNi NmFlMy5jcmwwHwYDVR0jBBgwFoAUoZOzFqS3dTTpsPJbfNaW5RBkw8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OGMyN2JlZi03OWViLTQxNTMtYjA2NC1lNjhk MjYzYjZhZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaZwBiK4d3p2f0948GDhvpc6xFZBvbXCfhIE8bVyO3xAhImsD8J2sqR OoJHH9gH+YOtTlvRf9XFg98DTZB/aY6V0bo3OWtDjwEVCPxA0IYW3ul7vJfrhnWe NVo6hBNk75cARbXjZkr3ViXm9d+J2ZDKlFXeFcMvhEXgEx3U8wagao6edHC2Q9o+ vf+JYDgonpQsOdSAm7mmXQFg4SstrTXhV9ONzd2ZvZnfCPmKXywKcNWz7UXhpjit lOn7LprcbVCrsgjmi1ZpXDJzMIY5rox1kfWD/rwzK8FXTQx/R9rgH8qjRldc+PVN DY2d3RT8mZBZe6BH3F18ZGH86VvJR28= -----END CERTIFICATE-----Generated at Sat May 10 10:32:19 2025 by rpki-client