$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa File: 3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa (raw, json) Hash identifier: n5M/ZOot0YoXNfMczErfs4DdmrRdWcWajc6KNpslG0A= Subject key identifier: 5D:B3:4D:1D:D0:4F:E9:6F:31:7C:92:3F:50:F4:01:63:2A:02:8D:E2 Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F432858499C59E62D7ED93D39A7AD3A00 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 18013 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e6:2d:7e:d9:3d:39:a7:ad:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=d19f6318-5040-40a2-9ba8-f4fa2a9cd7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:8b:4c:8d:cb:8e:ae:39:83:cc:96:07:c2: 24:2a:aa:56:08:d6:8d:e6:54:0d:6c:a1:04:c1:81: e0:cd:dd:a0:d7:3c:13:a0:f9:d4:ac:72:fb:2a:59: 2e:38:d8:2c:ab:ed:5e:3f:4a:e7:ed:c5:e3:3c:01: ca:96:87:96:f5:44:d2:fd:2e:54:49:7d:4e:fa:70: b4:65:f3:14:2d:a0:f9:03:2c:50:26:d6:74:bf:d9: 34:84:60:c8:8e:d1:76:f6:a2:b8:8d:80:bd:21:db: 5a:04:45:53:31:d0:b5:86:da:65:c1:e2:96:bc:31: 1a:1a:e9:18:0f:4a:3c:b8:dc:80:57:63:05:a7:8d: a0:45:15:b4:24:c3:c4:96:67:cb:f8:19:53:0b:22: 41:67:75:d2:f7:20:78:86:a7:e0:52:06:56:1d:5b: 9e:22:50:2b:e1:d1:43:55:30:2f:4c:cc:b6:db:b7: 66:98:20:ab:cf:a8:b4:aa:95:05:33:1e:18:17:e1: 74:57:6f:31:e3:10:72:8f:a1:ec:fb:98:2a:25:d5: e9:06:ae:e4:e2:98:a8:c6:56:7a:dd:a0:6e:b2:53: 1c:ab:d1:ee:a6:37:44:7e:40:a0:28:25:93:ec:b9: 03:fb:3e:e4:6f:9b:56:bb:01:fc:7c:88:b6:3f:66: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B3:4D:1D:D0:4F:E9:6F:31:7C:92:3F:50:F4:01:63:2A:02:8D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:17:65:f4:7a:14:c8:e1:26:d3:c2:63:3e:2b:22:c2:bb:ac: a3:26:8f:a9:7e:c5:22:5b:85:f6:23:dd:27:8b:99:74:6b:8c: e4:b4:35:66:86:95:46:08:73:f5:b0:c1:f8:97:3f:79:a0:8d: 21:ea:90:e8:d1:2e:4f:fc:54:e8:26:5a:32:32:6b:85:ea:1a: a6:32:e7:6e:54:e3:37:60:ef:c6:98:07:50:d2:26:ab:41:02: d9:10:20:7b:33:2a:8c:19:46:5b:e7:c1:9b:f7:70:e7:a5:f4: 1e:9d:b9:43:06:42:20:ec:d4:f5:8f:66:9f:04:df:13:cb:5c: 95:a1:f3:5e:ff:52:2f:af:07:9a:04:4c:a5:bf:c3:2b:44:ef: 5a:e8:2a:a1:e4:be:d0:2a:e2:36:50:b4:5b:ae:35:fa:70:5e: 4d:b0:29:13:e8:32:eb:06:eb:61:6d:af:92:03:62:20:4a:38: 5c:2a:4d:d6:8f:e7:00:20:61:2e:52:7c:55:4c:09:c8:e6:0d: 50:fb:b0:04:97:a0:af:7a:24:49:09:b9:bd:c5:96:6b:4d:b9: 49:a3:db:b7:a5:1d:ac:96:d9:5e:1a:53:19:66:04:11:2e:81: 32:ab:80:61:b3:d9:80:2f:0d:b2:90:46:9b:27:ae:54:9e:9d: 91:8c:b6:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeYtftk9OaetOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZDE5ZjYzMTgtNTA0MC00MGEyLTliYTgtZjRmYTJhOWNkN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLaLTI3Ljq45g8yWB8IkKqpWCNaN5lQNbKEE wYHgzd2g1zwToPnUrHL7KlkuONgsq+1eP0rn7cXjPAHKloeW9UTS/S5USX1O+nC0 ZfMULaD5AyxQJtZ0v9k0hGDIjtF29qK4jYC9IdtaBEVTMdC1htplweKWvDEaGukY D0o8uNyAV2MFp42gRRW0JMPElmfL+BlTCyJBZ3XS9yB4hqfgUgZWHVueIlAr4dFD VTAvTMy227dmmCCrz6i0qpUFMx4YF+F0V28x4xByj6Hs+5gqJdXpBq7k4pioxlZ6 3aBuslMcq9HupjdEfkCgKCWT7LkD+z7kb5tWuwH8fIi2P2ZIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2zTR3QT+lvMXySP1D0AWMqAo3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvM2EyMzNiOWEtZGIzMC0z OTQzLWEzMGMtNGMwZmUwZDJkZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIXZfR6FMjhJtPCYz4rIsK7rKMmj6l+xSJbhfYj3SeLmXRrjOS0NWaG lUYIc/WwwfiXP3mgjSHqkOjRLk/8VOgmWjIya4XqGqYy525U4zdg78aYB1DSJqtB AtkQIHszKowZRlvnwZv3cOel9B6duUMGQiDs1PWPZp8E3xPLXJWh817/Ui+vB5oE TKW/wytE71roKqHkvtAq4jZQtFuuNfpwXk2wKRPoMusG62Ftr5IDYiBKOFwqTdaP 5wAgYS5SfFVMCcjmDVD7sASXoK96JEkJub3FlmtNuUmj27elHayW2V4aUxlmBBEu gTKrgGGz2YAvDbKQRpsnrlSenZGMtgU= -----END CERTIFICATE-----Generated at Sat Apr 26 15:50:21 2025 by rpki-client