$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/00698a8c-5b96-31fc-89e1-d48332d16fe0.roa File: 00698a8c-5b96-31fc-89e1-d48332d16fe0.roa (raw, json) Hash identifier: h0GgsdfJI8SFTaN2ZW0n+rUElTvrEagdbZsVSLw+VVM= Subject key identifier: AA:DB:40:83:F1:0C:FD:D1:44:55:C1:E0:09:F9:22:B1:85:FA:32:FD Certificate issuer: /CN=98e62aba-8b05-4785-a899-f75688a272a5 Certificate serial: 010D0C9F432858496CE44391B36C10DC9E196800 Authority key identifier: 74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/00698a8c-5b96-31fc-89e1-d48332d16fe0.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 10103 IP address blocks: 199.204.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:43:91:b3:6c:10:dc:9e:19:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e62aba-8b05-4785-a899-f75688a272a5 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=344c894a-142e-496e-9b30-7b2f96a81b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:fb:31:fd:ad:27:74:90:66:90:b2:03:c1: 2f:15:e3:aa:39:46:7d:57:eb:2b:3a:19:6c:ce:4c: ad:b6:2e:a6:73:65:d9:40:e9:a9:5c:df:b7:d5:65: a8:03:ec:ae:7b:e8:23:60:a8:e7:6b:0c:7b:f6:76: 96:77:46:ef:87:45:3a:62:38:d4:6d:40:e8:a1:de: 5b:53:76:9e:25:41:ee:dd:84:1e:00:2c:63:64:c9: 33:10:a6:4e:34:fe:bb:ed:74:b8:83:a3:bf:1c:5b: ab:24:f6:b8:f7:b1:52:d0:44:ac:38:46:4e:db:96: c3:97:3d:17:27:cb:6c:7e:67:c8:95:d6:7f:37:eb: 9a:40:f2:dd:97:f2:6b:35:5d:85:b6:10:bd:20:7c: 3c:37:e5:ac:7e:53:4c:33:ad:eb:8e:be:74:8d:58: 09:c8:e0:d4:5c:1b:d4:f1:34:c1:1a:14:e0:09:68: 29:51:15:94:10:4d:55:ac:cd:51:a1:c8:2b:a6:4c: 40:e2:f7:04:be:54:76:59:9c:b3:19:0d:aa:1a:ac: 2f:a7:f1:35:98:86:3f:e7:27:53:c9:59:c5:d4:3a: 90:63:27:ba:8c:22:06:2a:2a:aa:e2:e3:f6:76:13: d4:11:4c:e8:33:4a:c2:4d:1a:f7:16:d6:3c:30:a7: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DB:40:83:F1:0C:FD:D1:44:55:C1:E0:09:F9:22:B1:85:FA:32:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/00698a8c-5b96-31fc-89e1-d48332d16fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl X509v3 Authority Key Identifier: keyid:74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer sbgp-ipAddrBlock: critical IPv4: 199.204.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:83:09:53:b5:bb:01:74:28:d0:2d:9e:7c:fd:e9:3a:bf:c4: a5:c9:8b:fb:06:16:a9:0b:f6:92:8f:05:5a:e2:fb:25:0a:0b: 92:0c:58:d7:98:8d:14:e0:03:69:9a:ce:99:33:81:8c:36:54: 59:e1:04:fe:9f:5d:74:e7:95:6b:23:68:35:61:79:81:69:32: 57:81:e5:b8:05:a1:ae:b1:88:90:85:6b:8a:88:41:2e:14:1a: 9a:60:97:91:80:66:26:ff:c2:9e:c6:89:a9:9e:41:60:07:4a: 5e:8a:de:5c:98:d2:a5:ac:21:63:e1:c6:ce:18:fb:3e:a0:17: c6:9e:88:f7:8e:8f:1d:53:cd:ab:6e:5c:26:7b:7a:59:b2:1c: 22:a2:74:ab:96:e0:c5:8d:ec:be:d1:24:bd:d4:92:96:1f:c1: 11:6d:84:a1:46:b6:f6:bc:7c:56:a5:10:8a:9a:30:19:79:55: 8a:06:29:25:43:2c:36:0c:2f:8e:0b:a7:84:16:18:e9:03:7c: f6:85:cf:26:9f:99:59:c8:34:f2:1e:b0:3d:f0:7e:d4:9b:85: 45:55:7b:30:30:2b:5a:8e:e6:b7:e7:f9:15:7c:a2:8f:30:89: 22:cf:e2:ca:2b:42:e9:2e:0a:6a:a9:84:35:1b:5a:14:3c:c0: 4d:15:44:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EORs2wQ3J4ZaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThlNjJhYmEtOGIwNS00Nzg1LWE4OTktZjc1Njg4YTI3 MmE1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MzQ0Yzg5NGEtMTQyZS00OTZlLTliMzAtN2IyZjk2YTgxYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsL7Mf2tJ3SQZpCyA8EvFeOqOUZ9V+srOhls zkytti6mc2XZQOmpXN+31WWoA+yue+gjYKjnawx79naWd0bvh0U6YjjUbUDood5b U3aeJUHu3YQeACxjZMkzEKZONP677XS4g6O/HFurJPa497FS0ESsOEZO25bDlz0X J8tsfmfIldZ/N+uaQPLdl/JrNV2FthC9IHw8N+WsflNMM63rjr50jVgJyODUXBvU 8TTBGhTgCWgpURWUEE1VrM1RocgrpkxA4vcEvlR2WZyzGQ2qGqwvp/E1mIY/5ydT yVnF1DqQYye6jCIGKiqq4uP2dhPUEUzoM0rCTRr3FtY8MKehBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrbQIPxDP3RRFXB4An5IrGF+jL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGU2 MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2ODhhMjcyYTUvMDA2OThhOGMtNWI5Ni0z MWZjLTg5ZTEtZDQ4MzMyZDE2ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThlNjJhYmEtOGIwNS00Nzg1LWE4 OTktZjc1Njg4YTI3MmE1Lzk4ZTYyYWJhLThiMDUtNDc4NS1hODk5LWY3NTY4OGEy NzJhNS5jcmwwHwYDVR0jBBgwFoAUdH1dKtMnvT7+sSgUb0YffdcfE30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGU2MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2 ODhhMjcyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKDCVO1uwF0KNAtnnz96Tq/xKXJi/sGFqkL9pKPBVri+yUKC5IMWNeY jRTgA2mazpkzgYw2VFnhBP6fXXTnlWsjaDVheYFpMleB5bgFoa6xiJCFa4qIQS4U Gppgl5GAZib/wp7GiameQWAHSl6K3lyY0qWsIWPhxs4Y+z6gF8aeiPeOjx1Tzatu XCZ7elmyHCKidKuW4MWN7L7RJL3UkpYfwRFthKFGtva8fFalEIqaMBl5VYoGKSVD LDYML44Lp4QWGOkDfPaFzyafmVnINPIesD3wftSbhUVVezAwK1qO5rfn+RV8oo8w iSLP4sorQukuCmqphDUbWhQ8wE0VRBk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:19:53 2025 by rpki-client