$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa File: 2d0e13e5-4120-3298-b17e-67e7af5580bd.roa (raw, json) Hash identifier: ltkAn5vJypmhtpBYqFAvWSvbKkVHcXBscQbfuj3UtKk= Subject key identifier: BF:03:A0:C5:BD:BD:07:99:26:2E:38:DF:51:F4:D7:24:EA:58:9C:0E Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584902EC2C1721677C4607176300 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 399728 IP address blocks: 172.98.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2c:17:21:67:7c:46:07:17:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bad8e5c3-9784-450d-b845-cdf73d355de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:84:0e:c5:2c:a7:2e:68:34:85:b7:a1:b5: a0:56:e2:16:39:6f:df:59:b9:68:23:0f:ae:fb:83: 8a:03:8c:0b:01:b4:f4:17:2b:34:00:55:4b:b5:57: 66:31:1f:81:e5:d7:6b:97:64:c4:2a:af:97:ef:c2: 9c:b9:5d:e6:5a:10:b6:9d:b7:80:c1:3a:f6:07:c3: 9d:07:5d:63:21:47:ca:f1:1b:1a:7f:d4:c5:c4:58: f0:f3:c1:9a:c4:77:4b:1e:9e:c1:e2:96:ff:14:ec: 6a:53:fd:55:b6:0b:19:c4:e9:6c:05:d0:80:97:eb: 6a:ec:3f:8a:2e:ea:eb:10:4f:b3:da:f1:db:41:53: df:d8:c7:6a:e0:2f:de:32:b4:ff:e2:74:a1:b3:47: 02:52:b3:2f:c8:1e:2e:b9:e8:57:42:b1:6e:ae:ac: 1c:f3:d7:fc:a6:1e:ce:3d:0d:7d:84:e0:f9:b1:23: e3:d6:9c:d3:09:34:5e:bc:b1:e3:66:95:c4:ac:8f: f8:bf:c1:c2:db:a6:08:86:8f:2a:53:3e:4d:04:3c: 95:e8:88:70:51:6f:6d:20:da:d5:19:fe:a8:77:84: 36:ca:28:b7:4d:3c:ae:59:9f:0b:75:13:ae:86:a8: 2f:82:20:79:ac:8e:11:86:3a:84:1c:3d:c9:68:78: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:03:A0:C5:BD:BD:07:99:26:2E:38:DF:51:F4:D7:24:EA:58:9C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv4: 172.98.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:41:b7:38:ee:05:fd:4d:89:22:37:e4:37:04:95:60:8e:e0: ac:b2:74:07:45:73:a9:9c:3e:c0:f8:0e:2c:a1:82:1d:b9:4d: f6:f4:94:8d:70:37:f0:51:dc:ce:30:76:2c:2e:9f:a2:ea:ff: d2:95:cf:74:2f:8a:51:11:4f:11:aa:1e:5e:84:74:6e:1e:84: bf:3c:cf:62:7e:88:39:72:e9:47:f5:f2:dc:78:b5:77:49:ff: cc:96:0c:ce:fa:ea:90:eb:68:77:65:86:65:a2:7d:03:a9:0e: 3f:2a:24:0a:9b:3c:87:c1:db:a1:c6:e3:31:d1:e3:0d:03:a0: 0d:0a:8e:5f:5b:d3:23:c2:8f:36:92:c1:64:e1:b6:fc:c2:9f: 0c:5e:42:79:df:98:bb:23:57:35:1b:f6:4a:8f:db:17:bd:01: 62:4e:53:e0:0c:37:1c:ad:a2:a3:f1:8c:53:c7:a9:ff:6e:15: 05:b3:33:9f:c1:50:0a:93:7c:7e:f8:35:7b:a0:c1:a1:b0:1e: f9:dc:57:20:bd:25:d2:bf:d9:52:9e:b4:80:54:1a:bc:42:50: 9f:29:da:19:94:d2:a2:10:b7:b7:84:41:52:1f:84:dd:17:b8: 5c:89:36:79:e7:ad:69:92:e8:8d:eb:19:4e:f6:9d:2e:ea:03: 3d:19:d9:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CwXIWd8RgcXYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmFkOGU1YzMtOTc4NC00NTBkLWI4NDUtY2RmNzNkMzU1ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKWEDsUspy5oNIW3obWgVuIWOW/fWbloIw+u +4OKA4wLAbT0Fys0AFVLtVdmMR+B5ddrl2TEKq+X78KcuV3mWhC2nbeAwTr2B8Od B11jIUfK8Rsaf9TFxFjw88GaxHdLHp7B4pb/FOxqU/1VtgsZxOlsBdCAl+tq7D+K LurrEE+z2vHbQVPf2Mdq4C/eMrT/4nShs0cCUrMvyB4uuehXQrFurqwc89f8ph7O PQ19hOD5sSPj1pzTCTRevLHjZpXErI/4v8HC26YIho8qUz5NBDyV6IhwUW9tINrV Gf6od4Q2yii3TTyuWZ8LdROuhqgvgiB5rI4RhjqEHD3JaHhLZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8DoMW9vQeZJi4431H01yTqWJwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvMmQwZTEzZTUtNDEyMC0z Mjk4LWIxN2UtNjdlN2FmNTU4MGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRBtzjuBf1NiSI35DcElWCO4KyydAdFc6mcPsD4Diyhgh25Tfb0lI1w N/BR3M4wdiwun6Lq/9KVz3QvilERTxGqHl6EdG4ehL88z2J+iDly6Uf18tx4tXdJ /8yWDM766pDraHdlhmWifQOpDj8qJAqbPIfB26HG4zHR4w0DoA0Kjl9b0yPCjzaS wWThtvzCnwxeQnnfmLsjVzUb9kqP2xe9AWJOU+AMNxytoqPxjFPHqf9uFQWzM5/B UAqTfH74NXugwaGwHvncVyC9JdK/2VKetIBUGrxCUJ8p2hmU0qIQt7eEQVIfhN0X uFyJNnnnrWmS6I3rGU72nS7qAz0Z2ew= -----END CERTIFICATE-----Generated at Tue Apr 29 13:24:46 2025 by rpki-client