$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa File: cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa (raw, json) Hash identifier: ktzwxcwmap3oMawy2PW5X6U2DW9T1xdVedzVAApTgdQ= Subject key identifier: D0:E3:CD:39:58:8B:41:22:76:27:92:EC:C1:40:69:F6:03:F5:53:8F Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849A5890350B37FEEB49E7A0F40 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa Signing time: Fri 25 Apr 2025 19:58:16 +0000 ROA not before: Fri 25 Apr 2025 19:58:16 +0000 ROA not after: Thu 24 Jul 2025 19:58:16 +0000 asID: 20001 IP address blocks: 98.147.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:89:03:50:b3:7f:ee:b4:9e:7a:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Apr 25 19:58:16 2025 GMT Not After : Jul 24 19:58:16 2025 GMT Subject: CN=cd5555aa-43cb-442f-81be-04d7cc45ad6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:d0:2d:e6:f9:3e:a3:d6:d1:ae:b1:80:11: ea:bb:93:68:6f:0d:3f:37:bf:5f:0e:04:ba:f7:4a: 84:4c:bd:ab:5c:21:ab:35:42:48:80:5f:e9:01:b5: ec:4d:32:82:67:c2:19:e2:51:81:70:8f:24:3c:8c: ad:d0:2b:9f:72:bc:b2:f2:ef:a5:c8:d8:3c:4a:af: 20:f8:58:ba:6e:5a:fc:68:b6:db:2a:ee:d8:83:a0: 0c:1d:67:c8:38:d0:6b:53:5e:55:0d:a9:04:02:35: 93:39:cc:7d:71:db:43:f1:f5:ba:eb:32:3c:7e:6d: a1:68:cc:fd:72:7c:42:2e:16:f8:02:d2:7f:a6:91: 75:df:1d:37:60:74:6c:4c:a3:cf:ec:80:cc:f3:c3: 5e:9b:02:24:f0:90:12:ae:74:cc:c0:13:c4:ca:f5: 71:df:78:90:8a:fe:31:75:18:80:7d:3f:43:8c:c0: 4a:18:0a:b8:25:95:e5:b2:88:46:ec:7a:36:dc:13: 0f:17:e4:cc:b9:f8:e7:eb:ab:33:3c:b0:b2:9b:bb: 37:0c:a2:0b:9b:f4:2d:f5:db:f0:4b:e1:ca:e7:ff: a7:16:60:6b:81:67:b5:72:d8:c1:76:79:e0:41:4a: ff:05:38:cb:18:dc:88:8d:ac:43:d7:c6:4c:83:0a: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:CD:39:58:8B:41:22:76:27:92:EC:C1:40:69:F6:03:F5:53:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.147.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:17:7b:6b:35:fa:6e:c5:f9:75:43:b1:34:0e:9a:47:94:02: d0:02:f1:12:08:c9:fe:58:e8:94:ff:b4:d8:60:1b:a0:05:1f: ab:13:22:c9:ea:23:47:a5:63:52:73:65:70:99:c0:e3:7b:02: 83:9d:20:0a:86:b5:2f:bf:2a:0b:e3:6c:ba:9c:0e:a5:7b:40: 1b:4c:c1:19:ff:5d:19:05:15:c5:b6:7e:1e:24:64:50:d2:8e: f7:1e:5a:9c:17:70:ce:77:16:90:83:91:55:27:70:2a:68:3a: c9:f3:e9:1b:41:e9:e1:db:39:07:25:f1:96:df:5c:81:f7:c8: 3b:60:cf:4a:98:42:73:de:20:96:75:2e:68:73:a7:4c:66:95: 5d:b5:87:82:7c:8d:4d:69:49:f2:ce:2a:e2:6a:80:6a:d6:f6: ce:7d:a7:d3:a0:10:f2:26:74:8e:9e:6d:8b:b0:fb:e7:f9:6c: cb:a1:1d:8e:6d:e4:04:03:15:9d:65:c5:2a:f8:ae:f6:8c:44: 50:2f:aa:18:44:14:a8:c8:7f:ef:df:8e:8f:c8:04:09:af:55: 09:82:7d:bd:e7:fe:97:b7:9c:f3:83:7a:4d:c6:32:a5:bb:5a: 50:fe:20:03:1e:b5:1d:ab:88:89:e8:13:55:d2:08:07:28:41: cc:6d:b7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmliQNQs3/utJ56D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDQyNTE5NTgxNloXDTI1MDcyNDE5NTgxNlowLzEtMCsGA1UEAxMk Y2Q1NTU1YWEtNDNjYi00NDJmLTgxYmUtMDRkN2NjNDVhZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPQLeb5PqPW0a6xgBHqu5Nobw0/N79fDgS6 90qETL2rXCGrNUJIgF/pAbXsTTKCZ8IZ4lGBcI8kPIyt0Cufcryy8u+lyNg8Sq8g +Fi6blr8aLbbKu7Yg6AMHWfIONBrU15VDakEAjWTOcx9cdtD8fW66zI8fm2haMz9 cnxCLhb4AtJ/ppF13x03YHRsTKPP7IDM88NemwIk8JASrnTMwBPEyvVx33iQiv4x dRiAfT9DjMBKGAq4JZXlsohG7Ho23BMPF+TMufjn66szPLCym7s3DKILm/Qt9dvw S+HK5/+nFmBrgWe1ctjBdnngQUr/BTjLGNyIjaxD18ZMgwrBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDjzTlYi0EidieS7MFAafYD9VOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvY2I0NWEzYTQtMzI0My0z NWZhLThhNTUtZWIyMmEwNDEzZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYpN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4Xe2s1+m7F+XVDsTQOmkeUAtAC8RIIyf5Y6JT/tNhgG6AFH6sTIsnq I0elY1JzZXCZwON7AoOdIAqGtS+/KgvjbLqcDqV7QBtMwRn/XRkFFcW2fh4kZFDS jvceWpwXcM53FpCDkVUncCpoOsnz6RtB6eHbOQcl8ZbfXIH3yDtgz0qYQnPeIJZ1 Lmhzp0xmlV21h4J8jU1pSfLOKuJqgGrW9s59p9OgEPImdI6ebYuw++f5bMuhHY5t 5AQDFZ1lxSr4rvaMRFAvqhhEFKjIf+/fjo/IBAmvVQmCfb3n/pe3nPODek3GMqW7 WlD+IAMetR2riInoE1XSCAcoQcxttwM= -----END CERTIFICATE-----Generated at Tue Apr 29 14:35:50 2025 by rpki-client