$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa File: 6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa (raw, json) Hash identifier: X6BOSTzzTHz6hV471cIHzs5EIMoJJGxsN7+jkoBiOw0= Subject key identifier: 98:77:AC:44:3F:F7:ED:63:EF:54:F3:40:D4:BE:33:0E:47:DB:2B:DC Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F43285849F17FB8694509CE35DA7FCCF8 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 206092 IP address blocks: 172.98.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b8:69:45:09:ce:35:da:7f:cc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=2fa5da5a-daa9-4fa4-8c21-e8ec378606d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:8e:e8:31:cc:5a:a4:69:f8:1d:f6:3b:06: 1c:0b:07:5e:ed:b6:1e:61:87:a0:7e:d9:32:c6:97: 4c:0c:7a:f4:8a:f0:d3:46:17:35:1a:3f:4f:c4:07: 4f:cf:fa:22:f3:33:24:58:86:94:3a:32:ac:90:6f: 6f:c0:7d:1e:ad:ad:b3:2b:46:1d:c0:aa:9c:ce:80: 2f:ac:ee:65:36:55:a6:b2:b3:f0:ad:44:d3:48:4a: 34:2d:c4:6f:53:d0:70:d6:2f:11:a2:33:f6:70:69: be:ec:a1:6b:bb:35:f8:1e:0c:4b:ac:c7:63:f3:d4: d1:3c:21:cf:eb:e0:73:62:96:74:7e:b2:b3:24:65: 7b:d5:36:e7:14:96:ef:99:2f:11:28:b9:3c:6f:d0: 5b:eb:c9:51:0d:c1:60:bd:fe:46:e1:df:e3:84:0f: 8f:80:8b:19:03:2d:ca:6e:ca:b6:84:87:f0:7e:82: 1d:12:21:0b:fb:a4:81:43:2a:8e:79:42:63:86:b6: 6e:10:d7:54:87:52:05:41:d6:05:fa:78:8f:a3:c8: c7:06:20:d1:2a:56:5a:a2:ad:09:a2:13:dc:9f:ee: 3a:63:67:0e:95:87:6d:17:55:f3:a5:2f:7b:53:27: ff:e8:7b:df:ad:13:59:90:fb:61:d2:cd:c4:75:d8: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:77:AC:44:3F:F7:ED:63:EF:54:F3:40:D4:BE:33:0E:47:DB:2B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2c:16:d9:bf:92:b2:fb:f6:25:96:2f:fc:50:37:42:51:4f: 71:62:38:29:1a:22:0a:13:62:29:1d:27:9b:6a:b8:46:1e:1a: 6e:55:34:62:03:c6:ad:c7:16:d9:b9:65:b5:ff:2f:ba:8e:9e: c6:1f:d2:a5:3c:ab:86:03:58:9d:65:7c:e8:27:bd:e2:70:43: 1f:8f:c3:e1:ac:ca:52:fa:bb:3d:70:c0:1c:bd:a9:09:dd:6d: 70:e4:0c:7b:97:17:86:20:42:e0:c1:31:0f:ad:c1:fc:3c:eb: 1e:75:ed:d2:bc:38:93:ad:fe:c7:19:e1:eb:64:e8:57:53:cb: 54:4a:69:4b:35:91:d6:03:e4:dd:80:03:1d:f5:93:80:f9:fe: 5e:9c:ff:ce:92:4e:60:8a:e5:86:bc:69:c5:48:73:af:61:5b: fe:67:ea:88:a0:ea:52:1e:30:a5:c8:79:3b:65:66:c4:75:71: da:53:a9:7c:64:08:89:06:40:27:4b:43:b0:e0:52:86:68:f0: 58:d1:1b:fc:72:73:fa:ce:79:64:c5:b7:b9:95:c6:f2:67:cc: 78:c7:b9:bf:bb:cd:5c:b2:62:d9:4b:52:54:c0:d6:a5:f9:a3: 5f:b1:af:86:b6:42:b5:32:cb:01:10:10:f6:f7:cb:3b:fc:d5: ba:2a:29:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7hpRQnONdp/zPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MmZhNWRhNWEtZGFhOS00ZmE0LThjMjEtZThlYzM3ODYwNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3suO6DHMWqRp+B32OwYcCwde7bYeYYegftky xpdMDHr0ivDTRhc1Gj9PxAdPz/oi8zMkWIaUOjKskG9vwH0era2zK0YdwKqczoAv rO5lNlWmsrPwrUTTSEo0LcRvU9Bw1i8RojP2cGm+7KFruzX4HgxLrMdj89TRPCHP 6+BzYpZ0frKzJGV71TbnFJbvmS8RKLk8b9Bb68lRDcFgvf5G4d/jhA+PgIsZAy3K bsq2hIfwfoIdEiEL+6SBQyqOeUJjhrZuENdUh1IFQdYF+niPo8jHBiDRKlZaoq0J ohPcn+46Y2cOlYdtF1XzpS97Uyf/6HvfrRNZkPth0s3EddhaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh3rEQ/9+1j71TzQNS+Mw5H2yvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNmQyNWE4YWItZjdkMS0z NTFmLThlMmUtYmQ1YzYwODZmZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIsFtm/krL79iWWL/xQN0JRT3FiOCkaIgoTYikdJ5tquEYeGm5VNGID xq3HFtm5ZbX/L7qOnsYf0qU8q4YDWJ1lfOgnveJwQx+Pw+GsylL6uz1wwBy9qQnd bXDkDHuXF4YgQuDBMQ+twfw86x517dK8OJOt/scZ4etk6FdTy1RKaUs1kdYD5N2A Ax31k4D5/l6c/86STmCK5Ya8acVIc69hW/5n6oig6lIeMKXIeTtlZsR1cdpTqXxk CIkGQCdLQ7DgUoZo8FjRG/xyc/rOeWTFt7mVxvJnzHjHub+7zVyyYtlLUlTA1qX5 o1+xr4a2QrUyywEQEPb3yzv81boqKQo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:14:13 2025 by rpki-client