$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa File: 98e047ca-9195-3a20-aea9-f36970a2a4b4.roa (raw, json) Hash identifier: gmQPe8DMqAImPLXCt5Uq4XWcO05looRptDMPzQuvpkk= Subject key identifier: 71:9B:A9:D8:54:6C:D1:69:55:81:00:28:4D:7E:81:CF:F3:73:B3:C4 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F432858499F3D3368729F466188D86200 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa Signing time: Wed 23 Apr 2025 13:50:40 +0000 ROA not before: Wed 23 Apr 2025 13:50:40 +0000 ROA not after: Tue 22 Jul 2025 13:50:40 +0000 asID: 10745 IP address blocks: 192.149.252.0/24 maxlen: 24 2620:d0:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:3d:33:68:72:9f:46:61:88:d8:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Apr 23 13:50:40 2025 GMT Not After : Jul 22 13:50:40 2025 GMT Subject: CN=57bb5be8-a694-4b76-91a4-04147e80e4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:76:72:49:d1:8e:1d:c3:d1:0e:0c:fd:23: 72:55:6b:5c:35:b6:df:e5:ba:be:80:8c:fa:1c:20: c1:68:a1:7a:bf:bf:d1:4e:47:f4:10:9e:44:62:dd: ad:34:22:86:e6:cd:05:52:17:3d:b5:b6:c2:47:44: 54:64:47:df:63:0b:df:b9:b4:8a:0c:3c:97:11:75: 31:fd:33:d0:8e:a4:05:6e:1d:df:b8:c8:e8:82:ca: e8:88:a3:19:6a:e0:6e:d2:fa:99:f2:d5:17:f3:65: ae:c5:92:5e:89:d3:bd:93:8a:8a:4f:4b:63:b9:0a: 19:2e:e7:b6:4b:b7:45:89:26:db:10:9e:0d:8f:b6: 04:a9:ae:91:ae:4c:02:e8:57:ee:3b:d6:98:9a:13: 88:51:f0:14:ec:a7:54:bf:34:8e:0a:f9:2f:36:12: b1:03:d6:1e:12:49:6f:86:1c:99:c5:2f:06:0b:12: b5:cf:63:78:05:d6:55:fb:1a:b7:fb:f5:c2:ea:78: 9b:cf:3c:1b:ca:b0:5b:6e:8c:0c:63:ce:e3:d4:3e: 5a:7b:83:5b:35:9a:38:3e:8c:93:9a:3b:c5:a4:9a: 2d:80:e8:49:7f:93:27:54:5c:8a:3f:67:6a:f1:e6: f0:f5:62:f6:c8:8d:81:67:a2:c1:e7:da:41:3c:3b: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:A9:D8:54:6C:D1:69:55:81:00:28:4D:7E:81:CF:F3:73:B3:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 192.149.252.0/24 IPv6: 2620:d0:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:90:83:75:c3:3e:8b:ba:bd:5b:27:72:f6:50:e1:62:bb:27: 43:34:1d:60:8c:0f:78:70:5e:15:bc:26:35:d1:4f:5a:8e:01: 85:27:56:1f:d9:0b:85:97:cf:26:c5:b0:2a:f1:4e:be:47:2e: d0:9f:84:cf:b5:6c:33:cd:47:91:ca:cb:55:87:d1:cb:74:d5: 6a:9c:0d:91:99:da:6c:54:4f:02:69:c7:71:9f:7c:40:b4:62: c1:7b:1c:66:ee:e0:c0:6d:02:24:3f:e9:b1:5a:e6:9a:83:dc: 85:5d:52:e7:eb:25:7c:83:24:fc:d0:dd:e9:7d:a9:2c:db:80: 28:14:ff:84:10:96:57:03:03:43:ae:e6:db:d5:8d:9a:08:bb: 20:0d:67:1f:a7:20:a2:97:b2:9e:06:74:fb:f5:d6:c8:40:35: a8:b9:79:fd:12:30:b4:4b:1d:2c:4f:9d:b9:e1:a5:27:7d:90: 49:a0:d9:fe:3e:16:e6:44:dc:1b:db:44:b0:ca:e6:07:7f:d7: 69:85:9e:66:bf:51:11:ca:ef:d5:4a:28:6f:c8:d3:21:3e:4c: 21:1d:25:6d:87:d3:6a:a1:03:7f:ac:f3:4c:a1:12:ab:ea:52: f3:ae:9a:20:72:26:bb:d3:f4:cc:38:41:49:ec:32:6c:03:50: 07:4c:a9:16 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmfPTNocp9GYYjYYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDQyMzEzNTA0MFoXDTI1MDcyMjEzNTA0MFowLzEtMCsGA1UEAxMk NTdiYjViZTgtYTY5NC00Yjc2LTkxYTQtMDQxNDdlODBlNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIx2cknRjh3D0Q4M/SNyVWtcNbbf5bq+gIz6 HCDBaKF6v7/RTkf0EJ5EYt2tNCKG5s0FUhc9tbbCR0RUZEffYwvfubSKDDyXEXUx /TPQjqQFbh3fuMjogsroiKMZauBu0vqZ8tUX82WuxZJeidO9k4qKT0tjuQoZLue2 S7dFiSbbEJ4Nj7YEqa6RrkwC6FfuO9aYmhOIUfAU7KdUvzSOCvkvNhKxA9YeEklv hhyZxS8GCxK1z2N4BdZV+xq3+/XC6nibzzwbyrBbbowMY87j1D5ae4NbNZo4PoyT mjvFpJotgOhJf5MnVFyKP2dq8ebw9WL2yI2BZ6LB59pBPDuPaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHGbqdhUbNFpVYEAKE1+gc/zc7PEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvOThlMDQ3Y2EtOTE5NS0z YTIwLWFlYTktZjM2OTcwYTJhNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwJX8MA8E AgACMAkDBwAmIADQYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg5CDdcM+i7q9Wydy9lDhYrsnQzQdYIwP eHBeFbwmNdFPWo4BhSdWH9kLhZfPJsWwKvFOvkcu0J+Ez7VsM81HkcrLVYfRy3TV apwNkZnabFRPAmnHcZ98QLRiwXscZu7gwG0CJD/psVrmmoPchV1S5+slfIMk/NDd 6X2pLNuAKBT/hBCWVwMDQ67m29WNmgi7IA1nH6cgopeyngZ0+/XWyEA1qLl5/RIw tEsdLE+dueGlJ32QSaDZ/j4W5kTcG9tEsMrmB3/XaYWeZr9REcrv1Uoob8jTIT5M IR0lbYfTaqEDf6zzTKESq+pS866aIHImu9P0zDhBSewybANQB0ypFg== -----END CERTIFICATE-----Generated at Wed Apr 30 14:34:29 2025 by rpki-client