$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json) Hash identifier: nf8vSxCOQhKc+pDQ1KA0Ce7XqkUz6/mfE6qBhn8nkvA= Subject key identifier: 63:04:89:17:19:32:0F:A6:E2:94:EA:18:BD:76:C4:F1:EA:8B:84:75 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F432858497279BB47F500A40FAA6EB8C0 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 399521 IP address blocks: 172.98.8.0/24 maxlen: 24 172.98.9.0/24 maxlen: 24 172.98.10.0/24 maxlen: 24 172.98.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:bb:47:f5:00:a4:0f:aa:6e:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=69d88940-45ad-4ee6-abea-913a9d22c5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:da:0c:06:c5:e3:82:31:1e:2e:19:00:92: c4:4c:62:0b:4f:b1:a9:1c:48:1e:63:fb:4a:a6:6d: 0e:30:bd:62:9f:91:c6:dd:6a:46:0b:2b:3e:00:02: b5:61:4f:bf:5d:e9:c2:04:9c:f8:29:3d:22:ce:6c: b4:bf:d0:d9:6f:82:20:eb:0f:6a:97:ac:b0:8d:ea: f6:f0:e8:db:4f:de:39:b2:8e:b1:e2:bc:c4:92:17: b5:b2:3d:62:10:4a:0c:94:d6:91:32:70:e6:f6:d0: b3:15:1c:cf:89:97:e0:97:ed:4e:95:4c:ce:68:cd: 8d:be:7c:39:4c:a2:56:b8:d7:ac:82:61:f9:07:f1: 69:04:d3:05:65:f0:16:72:c9:cf:91:e3:2a:e6:47: e4:fa:a4:27:b4:05:f0:4c:fd:82:3d:a0:20:b3:27: 24:e3:1b:ab:9a:87:af:76:3b:39:47:4a:b4:a7:43: 82:ea:c9:f9:e8:14:6d:e2:5b:a1:4e:ca:23:90:0a: f5:14:f4:f4:7a:86:4c:de:21:4a:b6:ca:d6:9a:1a: 54:2c:6e:ca:8f:9e:ee:61:b8:38:3a:48:55:bd:63: 7d:74:f8:b3:19:b0:4c:60:a2:61:d3:a3:80:80:a2: ef:43:3f:b8:62:0d:27:41:82:24:71:af:80:43:d7: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:04:89:17:19:32:0F:A6:E2:94:EA:18:BD:76:C4:F1:EA:8B:84:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: 172.98.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ff:83:d1:d3:32:4b:2d:78:2f:b2:65:ea:28:a0:b0:c6:80: 33:cd:c9:f2:66:72:11:2b:1b:86:1b:60:25:78:8e:9c:22:25: b8:7d:0a:1c:24:89:57:25:f1:ff:93:01:ae:ec:e7:68:76:5c: ef:1a:fe:a5:89:43:aa:26:c1:70:c7:7e:d8:d6:8e:39:ae:b8: 85:b9:11:9d:15:94:df:0b:2f:04:83:0a:ff:d7:74:16:89:d8: 0a:00:72:7a:11:eb:31:32:99:5a:90:c4:92:01:45:07:e6:9f: ba:9e:09:44:1b:25:91:64:f1:8b:53:07:b1:ed:3d:76:e7:73: 22:9d:98:5b:bc:1f:69:2d:9e:d2:b6:5f:9a:76:5c:dc:17:cd: db:62:fa:d6:6c:15:f5:8f:e3:bc:95:78:04:9b:37:a3:16:63: ed:fe:75:22:8f:ef:df:29:06:6a:70:63:87:83:77:8c:c7:f1: 70:e4:4c:1e:47:a8:cd:2d:d6:ba:31:ea:65:1e:a6:8b:ea:77: 70:c4:a3:01:f6:8b:11:c2:46:8b:d2:9d:1b:3c:7d:e1:e8:47: b2:ac:1e:16:e0:c8:c5:4b:88:53:95:4e:02:28:1c:96:76:c9: 07:6f:e4:3a:d4:e9:59:83:d0:1d:5e:77:d3:50:75:02:20:4a: 5e:97:e0:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebtH9QCkD6puuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NjlkODg5NDAtNDVhZC00ZWU2LWFiZWEtOTEzYTlkMjJjNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJPaDAbF44IxHi4ZAJLETGILT7GpHEgeY/tK pm0OML1in5HG3WpGCys+AAK1YU+/XenCBJz4KT0izmy0v9DZb4Ig6w9ql6ywjer2 8OjbT945so6x4rzEkhe1sj1iEEoMlNaRMnDm9tCzFRzPiZfgl+1OlUzOaM2Nvnw5 TKJWuNesgmH5B/FpBNMFZfAWcsnPkeMq5kfk+qQntAXwTP2CPaAgsyck4xurmoev djs5R0q0p0OC6sn56BRt4luhTsojkAr1FPT0eoZM3iFKtsrWmhpULG7Kj57uYbg4 OkhVvWN9dPizGbBMYKJh06OAgKLvQz+4Yg0nQYIkca+AQ9eOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMEiRcZMg+m4pTqGL12xPHqi4R1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvZWY1YjRmODQtZmNkOS0z ZTVmLWI5ODYtNjExNGJjMWVmMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL/g9HTMksteC+yZeoooLDGgDPNyfJmchErG4YbYCV4jpwiJbh9Chwk iVcl8f+TAa7s52h2XO8a/qWJQ6omwXDHftjWjjmuuIW5EZ0VlN8LLwSDCv/XdBaJ 2AoAcnoR6zEymVqQxJIBRQfmn7qeCUQbJZFk8YtTB7HtPXbncyKdmFu8H2ktntK2 X5p2XNwXzdti+tZsFfWP47yVeASbN6MWY+3+dSKP798pBmpwY4eDd4zH8XDkTB5H qM0t1rox6mUepovqd3DEowH2ixHCRovSnRs8feHoR7KsHhbgyMVLiFOVTgIoHJZ2 yQdv5DrU6VmD0B1ed9NQdQIgSl6X4Ec= -----END CERTIFICATE-----Generated at Mon Apr 28 23:00:26 2025 by rpki-client