$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa File: dded8e61-2654-367c-8bf2-b7c820c106cc.roa (raw, json) Hash identifier: Ld38R6ghPmFso8CUa4K8IqzalOs2+a/yPpebj1/4KiI= Subject key identifier: EC:E1:0D:D8:72:58:99:B9:90:80:E2:D3:0C:49:1F:8F:A4:E6:1F:C1 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F3DC0EB1E588D25EFEFC0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 198.89.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:c0:eb:1e:58:8d:25:ef:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=75e3c802-7023-49f1-91be-0c40d906fed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:ac:9a:4f:f1:b7:6f:6a:5b:35:66:fd:a6: 2e:9c:29:93:b0:be:d7:a7:fc:48:95:42:99:b9:a7: b9:5e:5a:56:de:10:77:26:f3:24:f8:20:03:6c:ce: 4d:45:3b:a6:b8:74:a6:94:7a:7d:a9:a2:22:1c:d5: 5a:d9:a3:e3:45:04:4a:b1:4b:b1:32:5e:33:b9:a9: 46:87:c3:fc:21:5e:75:0e:95:6c:82:b5:dc:98:83: ee:8f:a7:3c:f2:c7:4d:24:44:fb:ad:fe:99:83:1f: 56:e9:2a:fb:b1:d6:76:7d:dd:da:fc:3e:34:83:16: e0:33:0a:3b:1e:af:a5:d9:f6:2a:b2:ae:76:94:6d: ed:96:06:83:23:b4:f4:e2:74:0a:96:a8:e3:f0:07: 2f:66:a3:8f:ae:e8:e8:3e:f4:3d:30:6a:c7:33:da: ba:b0:21:5c:af:d7:d4:ef:15:03:0f:a4:81:93:8c: fd:87:56:f6:e9:17:54:30:4a:9b:64:b4:77:6c:b4: 51:47:72:58:ec:05:0e:1b:4c:ea:01:b7:2e:3c:78: 88:d7:b7:4f:2b:2c:16:30:52:ce:12:c6:e5:bd:74: a4:72:4b:9e:1b:bc:b3:65:1a:b5:f5:89:77:8b:f3: c4:42:04:9a:d2:3a:b2:2d:db:9d:4a:7c:8b:59:5a: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E1:0D:D8:72:58:99:B9:90:80:E2:D3:0C:49:1F:8F:A4:E6:1F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 198.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7b:58:69:2a:30:d4:88:e8:d5:30:cb:44:47:57:cf:66:94: 8f:65:d9:ec:54:f0:a4:a8:7f:50:e4:ce:75:2d:43:1d:2c:a7: 09:0e:dd:3a:1f:53:31:43:a3:f6:fe:bb:92:71:90:9c:15:ba: 4a:d0:6e:ec:10:90:d0:63:57:c1:de:28:b5:91:8d:dd:56:60: 08:73:36:e9:50:c0:ca:fb:13:7f:71:82:72:d0:3a:a4:f7:4b: 98:3c:37:62:7c:e2:e1:52:bc:f9:e6:89:db:55:28:44:8d:0b: 77:41:ec:91:1f:97:f5:d7:10:ee:db:d3:77:e0:d3:a3:5a:5b: 73:3b:69:dc:47:cf:33:96:22:a1:67:23:de:4c:53:1d:13:5a: 0e:c9:de:14:1d:ee:8f:d9:65:d2:31:00:0f:c0:85:d7:a8:4e: cb:5e:b2:f5:c0:d2:f8:bd:44:a2:a2:7b:89:dc:46:58:b4:aa: 48:f1:f4:f4:14:73:78:c8:5b:5c:fe:d1:c5:50:96:5d:c0:a7: 2f:ce:e7:a6:fc:61:af:93:03:9f:f5:5c:53:16:3f:2d:12:4e: 0c:13:f3:c2:1d:0c:b4:ae:d5:5d:d6:68:ea:da:ba:f4:c2:b4: a2:c7:31:af:0b:6a:53:c5:a7:d1:b2:43:57:07:37:fa:fc:c3: fa:19:db:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz3A6x5YjSXv78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NzVlM2M4MDItNzAyMy00OWYxLTkxYmUtMGM0MGQ5MDZmZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvusmk/xt29qWzVm/aYunCmTsL7Xp/xIlUKZ uae5XlpW3hB3JvMk+CADbM5NRTumuHSmlHp9qaIiHNVa2aPjRQRKsUuxMl4zualG h8P8IV51DpVsgrXcmIPuj6c88sdNJET7rf6Zgx9W6Sr7sdZ2fd3a/D40gxbgMwo7 Hq+l2fYqsq52lG3tlgaDI7T04nQKlqjj8AcvZqOPrujoPvQ9MGrHM9q6sCFcr9fU 7xUDD6SBk4z9h1b26RdUMEqbZLR3bLRRR3JY7AUOG0zqAbcuPHiI17dPKywWMFLO EsblvXSkckueG7yzZRq19Yl3i/PEQgSa0jqyLdudSnyLWVotuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzhDdhyWJm5kIDi0wxJH4+k5h/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZGRlZDhlNjEtMjY1NC0z NjdjLThiZjItYjdjODIwYzEwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxlkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD97WGkqMNSI6NUwy0RHV89mlI9l2exU8KSof1DkznUtQx0spwkO3Tof UzFDo/b+u5JxkJwVukrQbuwQkNBjV8HeKLWRjd1WYAhzNulQwMr7E39xgnLQOqT3 S5g8N2J84uFSvPnmidtVKESNC3dB7JEfl/XXEO7b03fg06NaW3M7adxHzzOWIqFn I95MUx0TWg7J3hQd7o/ZZdIxAA/AhdeoTstesvXA0vi9RKKie4ncRli0qkjx9PQU c3jIW1z+0cVQll3Apy/O56b8Ya+TA5/1XFMWPy0STgwT88IdDLSu1V3WaOrauvTC tKLHMa8LalPFp9GyQ1cHN/r8w/oZ21E= -----END CERTIFICATE-----Generated at Sun Jun 15 16:44:28 2025 by rpki-client