$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa File: 56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa (raw, json) Hash identifier: 3rGhNGfw928rzf/EUdlaVIJRJ1KiEZmiw1krlj0V4TI= Subject key identifier: 35:C3:4C:37:04:F1:6D:31:32:C7:5B:B4:5D:B0:8D:E6:66:32:DD:51 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584960541AEFA143AF471C196B40 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 212238 IP address blocks: 98.159.40.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1a:ef:a1:43:af:47:1c:19:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=3cf306ad-18c3-4303-9b24-1bd70403a2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:53:c2:d0:34:04:e1:26:bd:0f:de:98:60: c7:29:3a:ee:5b:65:0b:b7:c2:10:be:d9:de:58:3f: 6f:3e:6f:1e:dd:bc:e7:7c:71:7d:9b:77:68:52:b6: ef:50:50:60:e4:9a:ff:ae:00:a3:fa:3e:72:0e:54: 6d:b3:ae:5f:5a:9a:e3:91:fe:60:bf:4f:da:25:0e: 67:94:cb:4d:60:9e:f4:18:a2:a0:a5:c2:b3:4a:bd: e0:cc:bd:62:6f:62:49:1b:16:20:dd:78:1f:57:b9: 29:02:66:3b:f6:bf:62:4b:f6:02:24:c3:ce:f7:80: 4e:dd:0f:f9:65:91:e0:93:b2:aa:b1:b5:92:b8:6a: 97:d8:4f:a3:14:b9:72:6f:80:6f:e9:13:7a:a5:9b: 0a:f1:1e:00:11:2e:ca:e5:70:a2:2c:82:aa:8b:16: 99:7f:4a:b0:3b:b9:b8:6c:59:f4:35:ee:68:6f:df: 7e:77:e3:55:bc:72:71:d2:e1:6b:ad:0c:af:bc:bd: 6f:fa:71:55:d2:81:b0:82:2e:ab:b6:df:d1:da:d9: 20:d3:ae:2a:5b:5e:e7:29:00:32:6e:62:51:ad:7d: d8:16:38:a3:54:79:2b:74:e4:ad:48:30:68:15:62: 0f:4d:2a:37:ed:82:95:95:b2:31:79:f8:e3:8f:7d: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:4C:37:04:F1:6D:31:32:C7:5B:B4:5D:B0:8D:E6:66:32:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.40.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ba:5a:23:32:87:7e:4a:26:45:5f:02:f2:3f:56:c0:d9:d6: ec:88:93:01:4e:92:85:ed:a2:01:93:be:36:04:b8:7e:89:ee: cb:2f:a3:c6:91:ea:a6:aa:6f:0d:46:76:f0:34:69:f3:82:33: c4:50:db:45:31:c8:f0:de:a4:ae:5a:2b:3c:f4:f1:e8:83:60: 50:d7:2f:39:33:47:69:30:4d:d4:b7:8c:6c:63:a8:ea:fc:1c: fb:65:38:4d:92:11:78:74:b6:f0:81:be:7c:19:c3:19:c0:3f: 85:35:39:60:89:3a:1e:04:74:0c:bc:82:c0:65:34:7d:29:d9: cd:ba:67:33:71:72:03:b6:c0:36:20:34:18:1d:a3:73:d0:b4: 03:36:f2:90:6f:3c:d4:02:55:c9:fc:50:b3:f4:0e:31:09:a7: 0e:dc:b7:d6:5d:45:ef:82:7c:64:68:b8:32:46:70:22:44:c1: 5e:6f:70:0e:bc:11:13:f4:7d:68:c3:96:1a:0d:26:74:d7:0c: 98:ee:e5:7a:e7:38:de:e2:b6:77:67:33:c0:b0:66:26:57:b0: b8:90:24:f9:6f:6d:bc:95:d9:3a:0d:fa:14:27:18:e8:2e:c7: c5:84:96:ef:12:8e:fc:61:15:a9:9a:09:10:6e:07:93:cc:e0: ed:e4:07:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElgVBrvoUOvRxwZa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk M2NmMzA2YWQtMThjMy00MzAzLTliMjQtMWJkNzA0MDNhMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoURTwtA0BOEmvQ/emGDHKTruW2ULt8IQvtne WD9vPm8e3bznfHF9m3doUrbvUFBg5Jr/rgCj+j5yDlRts65fWprjkf5gv0/aJQ5n lMtNYJ70GKKgpcKzSr3gzL1ib2JJGxYg3XgfV7kpAmY79r9iS/YCJMPO94BO3Q/5 ZZHgk7KqsbWSuGqX2E+jFLlyb4Bv6RN6pZsK8R4AES7K5XCiLIKqixaZf0qwO7m4 bFn0Ne5ob99+d+NVvHJx0uFrrQyvvL1v+nFV0oGwgi6rtt/R2tkg064qW17nKQAy bmJRrX3YFjijVHkrdOStSDBoFWIPTSo37YKVlbIxefjjj33hmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDXDTDcE8W0xMsdbtF2wjeZmMt1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNTZlMmNiNGYtOTM3ZS0z ZmYxLTliMDEtOWVlNjFmMTRlMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHYp8ogDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8ulojMod+SiZFXwLyP1bA2dbsiJMBTpKF7aIBk742BLh+ie7LL6PG keqmqm8NRnbwNGnzgjPEUNtFMcjw3qSuWis89PHog2BQ1y85M0dpME3Ut4xsY6jq /Bz7ZThNkhF4dLbwgb58GcMZwD+FNTlgiToeBHQMvILAZTR9KdnNumczcXIDtsA2 IDQYHaNz0LQDNvKQbzzUAlXJ/FCz9A4xCacO3LfWXUXvgnxkaLgyRnAiRMFeb3AO vBET9H1ow5YaDSZ01wyY7uV65zje4rZ3ZzPAsGYmV7C4kCT5b228ldk6DfoUJxjo LsfFhJbvEo78YRWpmgkQbgeTzODt5AdY -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:30 2025 by rpki-client