$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/59385aef-4766-3cb7-9758-592d31f34e09.roa File: 59385aef-4766-3cb7-9758-592d31f34e09.roa (raw, json) Hash identifier: +HkP1e+TUDPh8iyU+9JkVl2iLKHQChVPpP6BuoUa9fM= Subject key identifier: 85:AD:BC:11:DC:87:AD:72:97:88:04:AA:4D:31:AF:12:D6:12:12:62 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F43285849E7BA76B42E97BAE1EA969B80 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/59385aef-4766-3cb7-9758-592d31f34e09.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 399728 IP address blocks: 172.98.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:76:b4:2e:97:ba:e1:ea:96:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=48b626ba-ae07-4b87-83b2-27fbc6333e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:9e:d7:38:c3:0c:c3:26:7d:79:7e:e0:75: 7f:5a:1d:51:a1:12:30:83:ad:ca:24:0f:ad:d9:67: f1:75:38:4f:40:5b:ae:91:74:c9:e6:53:17:6e:6d: e3:9b:40:76:e2:d1:9c:ff:dc:05:04:77:50:a2:3d: 4f:1d:88:19:f8:ab:52:31:85:20:c6:9f:f6:79:26: 43:4b:57:af:76:bb:a2:ec:2b:66:e7:34:69:62:12: a9:32:f6:d1:be:df:b3:98:6f:ba:69:87:3f:65:ac: cd:17:d9:5e:f7:01:29:4c:4d:ea:21:ef:e2:80:14: 29:e7:2e:92:bc:d6:4a:6d:29:9c:2c:e1:99:7e:c8: d9:23:2c:da:dd:43:a0:0f:de:e1:41:23:ec:ee:63: 05:ba:bd:f7:00:af:60:75:19:43:5c:7e:b5:3d:23: 2f:f6:b5:40:9b:c4:d2:82:8b:9f:03:3a:be:b0:ff: 1d:ac:69:76:31:0b:ec:6a:4e:09:32:fd:21:f2:72: 68:11:d2:34:98:d3:cf:42:be:24:99:11:ac:2e:7d: 83:1b:7c:3e:c9:5f:26:fc:e2:fc:44:2e:36:c4:de: c3:a2:20:ac:09:d8:3f:77:7c:d1:af:11:12:2e:73: ea:a2:f3:a4:a5:ee:bd:9d:fb:21:c3:db:41:e3:08: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AD:BC:11:DC:87:AD:72:97:88:04:AA:4D:31:AF:12:D6:12:12:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/59385aef-4766-3cb7-9758-592d31f34e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv4: 172.98.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:c9:60:81:18:44:4b:80:fa:72:f0:a3:d7:d5:19:ca:69:7e: 6b:94:93:2b:45:25:18:9f:e8:87:bc:f2:b2:a5:d2:9a:f1:8e: 46:be:b7:16:4e:30:cc:ce:97:16:8b:64:74:1c:38:96:2a:19: 00:1f:cc:77:ed:80:1a:c5:92:2f:45:4c:fc:e5:e5:bf:07:eb: df:04:71:4c:0d:d7:cd:6d:9d:ea:57:de:bc:14:5e:c8:89:2a: ef:e3:47:a4:63:b6:bc:1f:97:c8:c7:7a:67:ec:6f:05:58:ed: b9:e4:fc:aa:86:9d:a9:f3:33:dc:d3:e3:97:c4:95:60:a3:c4: 7a:be:cc:71:14:65:21:99:f5:75:09:37:75:9d:a8:cc:ba:3e: de:4d:c8:e6:6e:17:ba:f8:d5:e3:e1:a0:37:4f:22:b3:79:b4: 04:2b:67:fd:bc:2c:0f:f9:f7:2b:ac:d5:76:1b:96:34:63:b0: f4:6f:d6:3e:c7:c1:3a:b6:40:8d:44:e0:b4:30:65:4a:f4:3b: 78:a1:61:1c:37:82:a6:99:eb:51:e7:20:cb:04:00:d3:d8:f8: 35:5d:19:7b:a6:22:ee:c2:37:f6:06:44:0b:7f:b8:10:0f:ce: ef:56:fb:8a:b0:80:d9:e0:06:dd:88:18:68:2f:7d:0e:bf:49: a9:27:b7:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuna0Lpe64eqWm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NDhiNjI2YmEtYWUwNy00Yjg3LTgzYjItMjdmYmM2MzMzZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDae1zjDDMMmfXl+4HV/Wh1RoRIwg63KJA+t 2WfxdThPQFuukXTJ5lMXbm3jm0B24tGc/9wFBHdQoj1PHYgZ+KtSMYUgxp/2eSZD S1evdrui7Ctm5zRpYhKpMvbRvt+zmG+6aYc/ZazNF9le9wEpTE3qIe/igBQp5y6S vNZKbSmcLOGZfsjZIyza3UOgD97hQSPs7mMFur33AK9gdRlDXH61PSMv9rVAm8TS goufAzq+sP8drGl2MQvsak4JMv0h8nJoEdI0mNPPQr4kmRGsLn2DG3w+yV8m/OL8 RC42xN7DoiCsCdg/d3zRrxESLnPqovOkpe69nfshw9tB4whtHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWtvBHch61yl4gEqk0xrxLWEhJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvNTkzODVhZWYtNDc2Ni0z Y2I3LTk3NTgtNTkyZDMxZjM0ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjJYIEYREuA+nLwo9fVGcppfmuUkytFJRif6Ie88rKl0prxjka+txZO MMzOlxaLZHQcOJYqGQAfzHftgBrFki9FTPzl5b8H698EcUwN181tnepX3rwUXsiJ Ku/jR6Rjtrwfl8jHemfsbwVY7bnk/KqGnanzM9zT45fElWCjxHq+zHEUZSGZ9XUJ N3WdqMy6Pt5NyOZuF7r41ePhoDdPIrN5tAQrZ/28LA/59yus1XYbljRjsPRv1j7H wTq2QI1E4LQwZUr0O3ihYRw3gqaZ61HnIMsEANPY+DVdGXumIu7CN/YGRAt/uBAP zu9W+4qwgNngBt2IGGgvfQ6/Sakntyo= -----END CERTIFICATE-----Generated at Wed Jun 18 11:04:10 2025 by rpki-client