$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa File: eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa (raw, json) Hash identifier: qJ4MRoaesaeDYMrYETmd+eHWzhRmyXPrbm11Y5P3Nr8= Subject key identifier: 30:6C:A5:83:2D:F9:8B:28:4C:35:D8:0F:6E:DD:FA:5D:0E:1C:42:E5 Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Certificate serial: 010D0C9F432858494CC9437A7778BF1D5DF30E80 Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 398797 IP address blocks: 199.255.148.0/24 maxlen: 25 2602:fd1e::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:43:7a:77:78:bf:1d:5d:f3:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=0002b82b-a1c5-40cb-bc12-411974983131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:17:59:17:87:30:c7:f8:b4:06:8e:7b:e1: ec:78:88:4e:78:84:04:c5:ea:a7:18:69:9c:a7:dc: da:c5:df:83:10:6b:b7:ce:bb:7c:67:64:e2:3f:a6: 37:79:47:c8:4a:f5:74:79:69:ed:7e:67:93:2f:c4: dc:a2:39:75:e8:47:2c:c8:ca:27:cd:4f:09:d1:f3: 5f:a3:0e:03:80:41:bc:17:7f:de:98:8f:9e:c2:96: 83:ba:d6:9d:07:6f:3e:b9:26:d1:ff:61:1c:03:30: fe:63:2e:68:ba:d1:2e:c1:06:60:b6:0b:7e:2f:01: 34:c2:cc:89:61:c4:1c:34:8a:90:47:5d:44:7e:2a: c7:83:30:56:96:48:9f:7e:8f:7a:92:a4:74:4c:79: 99:ae:f1:b6:ad:30:ff:4c:d3:8b:c8:07:be:ba:42: 6d:ae:8c:fd:9f:22:39:0e:67:76:b0:04:1c:08:9f: a6:f2:19:25:35:01:5e:f0:44:f6:93:5d:67:9f:bb: 23:a5:cf:50:8f:08:0e:2f:83:9a:ea:84:45:b9:78: 0e:2d:62:66:63:af:09:38:60:4a:cd:bb:6c:d6:d1: b9:f8:58:47:7f:4b:e2:10:63:9e:8b:8d:b6:04:55: 04:5a:7b:85:ce:1d:9c:27:19:96:29:f1:b4:a7:82: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6C:A5:83:2D:F9:8B:28:4C:35:D8:0F:6E:DD:FA:5D:0E:1C:42:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl X509v3 Authority Key Identifier: keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer sbgp-ipAddrBlock: critical IPv4: 199.255.148.0/24 IPv6: 2602:fd1e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b3:9c:d7:e4:35:bd:0b:74:31:dc:91:63:13:29:ae:2b:b8: 16:08:c2:e9:02:01:e5:8c:93:ba:2e:63:a0:fd:22:6e:90:64: 0a:d7:22:83:f8:b9:e9:61:e2:85:b7:6f:0c:d1:f6:3d:fe:56: bd:56:f7:a0:e6:60:9e:f8:80:0b:7a:4f:ad:34:7b:48:60:83: eb:de:e9:79:23:85:54:28:f5:4c:e3:e4:b7:ce:e8:4c:02:46: d6:76:6e:43:0c:b3:64:39:a4:de:44:b6:70:6d:87:50:02:fb: c9:cd:83:ef:11:9a:79:ad:bb:78:14:f1:02:f1:f1:c3:60:7d: c3:d7:1d:34:ed:00:4b:cd:4c:76:95:d9:7f:e1:2e:c1:fc:e6: 8c:79:db:de:75:0f:1f:0f:20:06:13:39:ad:94:fd:cb:b7:0e: d7:b9:09:6e:04:e5:71:4f:dc:bc:2e:f0:e2:ed:fc:48:34:19: 0f:69:b7:72:62:16:ec:39:77:ce:8b:d5:7a:4f:9e:2b:d6:c7: 8f:a1:42:06:0c:a7:ef:12:c7:7a:4e:84:e1:73:9d:a1:2c:4b: ac:0a:a6:6b:66:00:03:98:d2:8f:1c:96:e1:ed:5a:56:3f:cc: d0:d3:c1:84:2d:d1:df:79:d0:bc:74:53:17:ba:cf:7b:fe:cb: ed:eb:75:2a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElMyUN6d3i/HV3zDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NiNmE5OGEtMDlmNC00ZTI5LTk0MDYtYmMwY2IxNjYx ZGZjMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDAwMmI4MmItYTFjNS00MGNiLWJjMTItNDExOTc0OTgzMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd0XWReHMMf4tAaOe+HseIhOeIQExeqnGGmc p9zaxd+DEGu3zrt8Z2TiP6Y3eUfISvV0eWntfmeTL8Tcojl16EcsyMonzU8J0fNf ow4DgEG8F3/emI+ewpaDutadB28+uSbR/2EcAzD+Yy5outEuwQZgtgt+LwE0wsyJ YcQcNIqQR11EfirHgzBWlkiffo96kqR0THmZrvG2rTD/TNOLyAe+ukJtroz9nyI5 Dmd2sAQcCJ+m8hklNQFe8ET2k11nn7sjpc9QjwgOL4Oa6oRFuXgOLWJmY68JOGBK zbts1tG5+FhHf0viEGOei422BFUEWnuFzh2cJxmWKfG0p4JyrQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDBspYMt+YsoTDXYD27d+l0OHELlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2 YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBjYjE2NjFkZmMvZWVlZWE3ZTktZTM0Yy0z NTA5LThmOGYtNjY3Nzg1ZmVmOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2NiNmE5OGEtMDlmNC00ZTI5LTk0 MDYtYmMwY2IxNjYxZGZjL2NjYjZhOThhLTA5ZjQtNGUyOS05NDA2LWJjMGNiMTY2 MWRmYy5jcmwwHwYDVR0jBBgwFoAUWNuLitfSv3HYwgdcEp2ETtuQbc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBj YjE2NjFkZmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx/+UMA4E AgACMAgDBgQmAv0eADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbs5zX5DW9C3Qx3JFjEymuK7gWCMLpAgHl jJO6LmOg/SJukGQK1yKD+LnpYeKFt28M0fY9/la9Vveg5mCe+IALek+tNHtIYIPr 3ul5I4VUKPVM4+S3zuhMAkbWdm5DDLNkOaTeRLZwbYdQAvvJzYPvEZp5rbt4FPEC 8fHDYH3D1x007QBLzUx2ldl/4S7B/OaMedvedQ8fDyAGEzmtlP3Ltw7XuQluBOVx T9y8LvDi7fxINBkPabdyYhbsOXfOi9V6T54r1sePoUIGDKfvEsd6ToThc52hLEus CqZrZgADmNKPHJbh7VpWP8zQ08GELdHfedC8dFMXus97/svt63Uq -----END CERTIFICATE-----Generated at Tue Apr 29 14:27:22 2025 by rpki-client