$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa File: 2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json) Hash identifier: uLCtP2af2quqqRG32NLP4BvidX4TDh9wfPQMESQIGAU= Subject key identifier: E3:15:66:D6:EB:3C:14:BC:02:C7:4B:67:5F:55:59:3C:F8:B9:AE:F5 Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f Certificate serial: 010D0C9F43285848F1D1573A80095244D5067000 Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa Signing time: Thu 20 Feb 2025 10:58:30 +0000 ROA not before: Thu 20 Feb 2025 10:58:30 +0000 ROA not after: Wed 21 May 2025 09:58:30 +0000 asID: 9009 IP address blocks: 172.85.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:d1:57:3a:80:09:52:44:d5:06:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f Validity Not Before: Feb 20 10:58:30 2025 GMT Not After : May 21 09:58:30 2025 GMT Subject: CN=2bc84123-832a-4a8b-92e4-62c049eaa298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:44:3d:6c:49:16:1a:c7:05:5c:7b:3d:f4: ad:45:12:ca:bb:54:03:5d:67:8c:b1:5f:98:df:eb: db:c8:04:48:91:c2:a5:c3:6b:29:82:52:13:8b:1a: 57:7f:88:79:74:27:52:cb:d8:ce:0a:ca:8d:9c:db: ee:dd:d8:85:27:b4:74:0a:c4:cd:57:e1:fc:b9:7e: 4e:dd:1c:19:70:73:09:ac:53:e1:6e:fa:a4:03:ba: 5f:9d:3e:21:2d:68:25:7f:45:2e:fd:82:57:14:0f: 53:9a:e2:0e:a2:7e:1e:f4:92:7b:68:7d:bb:f2:7e: df:76:a3:7f:52:74:44:9c:96:ba:14:31:cb:0f:44: c9:a7:7b:86:3d:f7:6e:40:8e:b2:d2:a3:be:f9:78: 6c:d8:9b:94:dc:07:a5:f3:90:40:b9:46:37:97:ee: 70:a7:5f:91:ae:fc:bb:cb:3c:f9:50:f2:a8:35:af: 06:2b:03:5e:04:c6:fc:64:e2:6c:68:b5:af:a6:e7: db:20:cd:19:95:b6:30:fd:a2:3f:bb:c2:fe:d7:ac: 3d:f6:64:51:32:48:63:0d:71:96:81:0c:1e:30:21: 6d:ef:90:b8:8f:79:9f:f7:fa:4a:dd:09:3b:5d:56: cd:44:76:d4:5e:c7:d3:71:39:42:38:34:db:14:0e: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:15:66:D6:EB:3C:14:BC:02:C7:4B:67:5F:55:59:3C:F8:B9:AE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl X509v3 Authority Key Identifier: keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer sbgp-ipAddrBlock: critical IPv4: 172.85.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ec:27:34:5f:91:86:b8:64:d5:8a:f0:11:7a:b4:0d:e3:a4: 67:e1:4b:b9:ba:8e:70:59:f4:2f:6e:2d:69:40:f8:fe:21:d6: 6c:7a:c4:53:fd:25:68:f8:53:a7:4d:9a:03:e2:b9:eb:9f:cc: 97:f3:76:61:72:e3:46:26:ff:f2:db:89:c2:4e:2d:12:24:6a: 5d:3f:80:7f:71:df:90:0f:cf:f8:7e:e5:78:8c:d4:9f:9e:50: 21:31:4f:99:d8:68:c3:8b:7f:a2:34:3b:e6:4b:4e:f1:44:17: 48:1d:0d:6c:de:fd:26:8a:e3:d1:07:98:96:bb:59:49:64:84: de:71:cc:0d:ae:65:a0:c6:4e:2a:5e:16:99:3d:00:04:fa:b8: a6:58:32:35:48:4e:9b:4e:6a:3c:5e:f5:a9:12:7b:93:a6:cc: 38:0e:e9:f4:75:e1:5e:3f:fa:75:da:c9:1d:56:de:50:7a:32: 40:01:99:c9:2b:c2:10:ed:ed:9b:06:f6:85:a9:79:7d:14:ce: 16:3f:28:44:d0:47:da:90:d3:36:cb:5f:17:62:a8:d7:5a:d5: 45:a0:43:e1:46:b6:41:52:e3:e9:f7:f6:f7:fd:68:17:4a:7e: e7:df:45:20:c3:11:8c:aa:3e:85:fe:99:bd:1b:d8:d2:f3:c3: 9e:af:06:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx0Vc6gAlSRNUGcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1 OTFmMB4XDTI1MDIyMDEwNTgzMFoXDTI1MDUyMTA5NTgzMFowLzEtMCsGA1UEAxMk MmJjODQxMjMtODMyYS00YThiLTkyZTQtNjJjMDQ5ZWFhMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG5EPWxJFhrHBVx7PfStRRLKu1QDXWeMsV+Y 3+vbyARIkcKlw2spglITixpXf4h5dCdSy9jOCsqNnNvu3diFJ7R0CsTNV+H8uX5O 3RwZcHMJrFPhbvqkA7pfnT4hLWglf0Uu/YJXFA9TmuIOon4e9JJ7aH278n7fdqN/ UnREnJa6FDHLD0TJp3uGPfduQI6y0qO++Xhs2JuU3Ael85BAuUY3l+5wp1+Rrvy7 yzz5UPKoNa8GKwNeBMb8ZOJsaLWvpufbIM0ZlbYw/aI/u8L+16w99mRRMkhjDXGW gQweMCFt75C4j3mf9/pK3Qk7XVbNRHbUXsfTcTlCODTbFA7XYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMVZtbrPBS8AsdLZ19VWTz4ua71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5 OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvMmQwMTkzZDMtZjc3ZS0z MWQ5LWE1NDktYTNmMjMwZThkOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2 NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPsJzRfkYa4ZNWK8BF6tA3jpGfhS7m6jnBZ9C9uLWlA+P4h1mx6xFP9 JWj4U6dNmgPiueufzJfzdmFy40Ym//LbicJOLRIkal0/gH9x35APz/h+5XiM1J+e UCExT5nYaMOLf6I0O+ZLTvFEF0gdDWze/SaK49EHmJa7WUlkhN5xzA2uZaDGTipe Fpk9AAT6uKZYMjVITptOajxe9akSe5OmzDgO6fR14V4/+nXayR1W3lB6MkABmckr whDt7ZsG9oWpeX0UzhY/KETQR9qQ0zbLXxdiqNda1UWgQ+FGtkFS4+n39vf9aBdK fuffRSDDEYyqPoX+mb0b2NLzw56vBmo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:19 2025 by rpki-client