$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa File: 323c2fc7-9009-33ce-aa09-64b232426f68.roa (raw, json) Hash identifier: DkXlfGt5lDc7n+0qc9lz14FCtt3mTvxUXYLzJuceLuA= Subject key identifier: 48:A9:FB:90:7A:36:DD:15:55:EE:22:0A:E0:5E:1B:6B:24:63:A0:C6 Certificate issuer: /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Certificate serial: 010D0C9F43285849ABB49DA7C9FA21C2814EC680 Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 398999 IP address blocks: 172.98.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9d:a7:c9:fa:21:c2:81:4e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=7ad9c19d-e53b-4e61-bec5-80b5f766949e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:bb:71:b4:49:c5:39:c0:5f:d7:43:8a:1e: 0a:e1:c0:8d:b3:6e:24:87:2a:ba:77:ad:c7:2c:84: b6:f8:e7:69:b6:51:46:b8:70:ac:f1:4f:93:5b:35: d1:58:ce:1f:11:e0:eb:49:fc:48:c2:3e:6f:35:29: 88:fa:64:96:22:5f:5b:2b:a8:a6:cf:12:10:2e:86: 38:af:e0:22:6a:7e:6a:3e:96:84:bc:f3:bf:0e:bf: 98:f5:56:75:48:67:5f:7d:6f:8a:97:fa:a1:cf:84: ea:84:2c:ee:a6:31:e0:c5:c8:a4:b1:55:3d:1a:d8: aa:e8:bf:7b:44:ed:f1:bc:20:81:52:f9:44:ab:70: 52:c9:12:bd:c9:61:47:a4:d7:c7:e2:8f:5c:5d:fc: cf:b7:45:18:ad:d0:60:ed:66:b5:9f:33:ff:c7:8c: 59:5e:c0:05:d7:0d:b3:ae:e2:36:53:96:b4:bc:27: b5:af:6e:4a:f4:75:40:0c:94:e4:9f:04:e5:57:5c: 9f:52:4b:fc:92:75:13:05:f0:20:60:a6:bb:dc:15: 83:f5:e7:b7:af:88:82:dd:2b:bd:17:25:36:52:dd: 9b:db:85:09:15:02:df:8b:80:ad:32:44:58:7b:3a: 87:97:12:c4:df:62:35:a2:96:6b:34:f9:47:bd:0e: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A9:FB:90:7A:36:DD:15:55:EE:22:0A:E0:5E:1B:6B:24:63:A0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl X509v3 Authority Key Identifier: keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer sbgp-ipAddrBlock: critical IPv4: 172.98.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cf:00:41:83:a1:92:f6:bc:7c:41:6b:bb:76:fc:35:f4:12: 58:c7:0a:73:a8:e9:b5:09:9e:e9:db:da:7a:c6:42:4e:19:f3: 01:75:82:6d:df:31:bd:69:91:c0:fa:94:88:7f:d5:95:c0:63: c8:97:79:15:4f:f2:38:49:a3:9c:1d:9c:10:7e:a1:80:70:35: 1b:c8:16:43:52:f2:62:d1:3e:1e:84:25:02:81:4b:fc:ad:06: 59:14:61:9b:38:1b:af:8c:2a:64:a3:ff:f1:40:e6:25:5c:74: 73:8b:aa:61:63:6e:f2:ec:6a:b5:98:1d:01:02:56:e7:8b:be: 16:0d:ad:46:33:44:49:6e:84:f1:88:4e:74:03:dd:a6:b7:2d: ac:76:2a:bf:1b:60:d8:ea:a5:dc:0b:d7:37:ef:59:ed:08:38: d8:e9:64:77:2c:7a:c2:62:d8:52:59:5f:0f:b8:3e:3d:6c:77: 28:31:6e:dd:77:a7:e6:06:75:1f:c5:4d:83:cd:35:1f:c8:91: dd:b2:0d:15:63:5c:db:c5:86:39:ec:06:d8:92:e5:54:74:5e: f3:27:63:af:85:34:1d:64:9f:06:2e:34:ec:21:cc:35:08:33: 8d:c1:98:3c:dd:9a:59:66:12:e2:e4:c0:12:dd:4d:e8:6c:97: 1c:4e:91:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ2nyfohwoFOxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNj Nzc4MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk N2FkOWMxOWQtZTUzYi00ZTYxLWJlYzUtODBiNWY3NjY5NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EG7cbRJxTnAX9dDih4K4cCNs24khyq6d63H LIS2+OdptlFGuHCs8U+TWzXRWM4fEeDrSfxIwj5vNSmI+mSWIl9bK6imzxIQLoY4 r+Aian5qPpaEvPO/Dr+Y9VZ1SGdffW+Kl/qhz4TqhCzupjHgxciksVU9Gtiq6L97 RO3xvCCBUvlEq3BSyRK9yWFHpNfH4o9cXfzPt0UYrdBg7Wa1nzP/x4xZXsAF1w2z ruI2U5a0vCe1r25K9HVADJTknwTlV1yfUkv8knUTBfAgYKa73BWD9ee3r4iC3Su9 FyU2Ut2b24UJFQLfi4CtMkRYezqHlxLE32I1opZrNPlHvQ69UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEip+5B6Nt0VVe4iCuBeG2skY6DGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcw ZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvMzIzYzJmYzctOTAwOS0z M2NlLWFhMDktNjRiMjMyNDI2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3MGViNGUtZDIxNC00MWRjLThm MGQtOWExOTM2ZWNjNzc4L2U0NzBlYjRlLWQyMTQtNDFkYy04ZjBkLTlhMTkzNmVj Yzc3OC5jcmwwHwYDVR0jBBgwFoAU5LCh+GG0ks2TDqviZa++pbVntvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5 MzZlY2M3NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrPAEGDoZL2vHxBa7t2/DX0EljHCnOo6bUJnunb2nrGQk4Z8wF1gm3f Mb1pkcD6lIh/1ZXAY8iXeRVP8jhJo5wdnBB+oYBwNRvIFkNS8mLRPh6EJQKBS/yt BlkUYZs4G6+MKmSj//FA5iVcdHOLqmFjbvLsarWYHQECVueLvhYNrUYzREluhPGI TnQD3aa3Lax2Kr8bYNjqpdwL1zfvWe0IONjpZHcsesJi2FJZXw+4Pj1sdygxbt13 p+YGdR/FTYPNNR/Ikd2yDRVjXNvFhjnsBtiS5VR0XvMnY6+FNB1knwYuNOwhzDUI M43BmDzdmllmEuLkwBLdTehslxxOkac= -----END CERTIFICATE-----Generated at Tue Apr 29 10:54:42 2025 by rpki-client