$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/ff4fdd3b-fa4a-3d68-bff9-9f292efa6e08.roa File: ff4fdd3b-fa4a-3d68-bff9-9f292efa6e08.roa (raw, json) Hash identifier: 2j19K19unOa9b4+g+x0eJmZbQykgS60xL89iuMNXfrU= Subject key identifier: AB:35:C5:7A:71:2B:62:65:4B:96:A3:CC:F7:FA:A5:6F:B6:D3:EF:7A Certificate issuer: /CN=98e62aba-8b05-4785-a899-f75688a272a5 Certificate serial: 010D0C9F4328584945CE9A65026FBE4D19679680 Authority key identifier: 74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/ff4fdd3b-fa4a-3d68-bff9-9f292efa6e08.roa Signing time: Sat 22 Mar 2025 13:00:52 +0000 ROA not before: Sat 22 Mar 2025 13:00:52 +0000 ROA not after: Fri 20 Jun 2025 13:00:52 +0000 asID: 7018 IP address blocks: 199.204.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:45:ce:9a:65:02:6f:be:4d:19:67:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e62aba-8b05-4785-a899-f75688a272a5 Validity Not Before: Mar 22 13:00:52 2025 GMT Not After : Jun 20 13:00:52 2025 GMT Subject: CN=a2e4a90b-d4d8-4be9-baa1-36622539b585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:6f:fe:76:f7:56:ce:e7:9c:07:d4:5a:0a: b3:de:40:ff:01:d9:66:15:68:38:32:8a:7d:41:2a: 60:60:2b:da:9a:d5:33:8d:66:e5:12:9b:ef:55:d9: 99:da:bc:97:65:f9:8c:19:3b:af:ec:b9:37:97:34: 4b:b3:ca:32:aa:d5:69:28:dd:33:6b:bb:d9:e9:57: 4d:1b:71:ea:2a:64:0e:a4:02:81:09:a3:04:6f:81: 47:40:9a:02:a6:c4:9f:0a:b9:c4:22:dc:80:f5:11: 16:77:c0:61:cf:95:f5:14:00:94:ea:c0:a1:be:56: ab:57:fb:ad:83:c2:3f:37:de:c9:5e:86:31:50:0c: 04:79:0f:49:f9:72:4c:bc:6c:e5:e5:d3:7c:8a:e0: d4:e9:d4:2f:81:65:8f:e9:f6:44:0f:c6:da:b4:fc: be:83:9f:f2:bf:9c:56:03:7e:3d:97:fe:5b:cf:79: d1:a4:b9:fc:7b:8c:be:ae:fc:3a:14:b8:9e:ea:2d: 79:56:ae:6a:02:78:f0:7e:1e:99:8e:43:fa:c9:3c: 2c:99:74:97:ce:e9:61:c9:20:e9:7b:39:91:05:a1: a6:2a:02:50:ca:ba:4e:b1:bf:db:1a:42:6b:6d:fb: c8:38:32:4f:1a:c5:30:65:d8:78:03:e3:7d:7c:52: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:35:C5:7A:71:2B:62:65:4B:96:A3:CC:F7:FA:A5:6F:B6:D3:EF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/ff4fdd3b-fa4a-3d68-bff9-9f292efa6e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl X509v3 Authority Key Identifier: keyid:74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer sbgp-ipAddrBlock: critical IPv4: 199.204.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b3:33:b7:01:c5:74:6e:32:5c:5a:22:60:a4:11:90:0b:3e: 93:d9:78:ba:5b:4b:eb:db:71:41:e9:f0:8b:cc:b8:5b:fe:e6: 79:14:44:3d:89:f4:df:f1:13:8e:97:5a:93:bc:84:73:36:28: fc:bf:43:ff:5c:1f:55:81:11:ae:20:96:ce:14:22:89:bd:1d: 44:84:0b:36:5a:6b:7a:4c:56:71:2d:ec:48:19:08:dc:96:fb: 80:f4:b2:b2:17:ba:6d:63:d9:04:41:48:17:15:bc:e9:d6:e9: 9a:77:99:6c:6c:64:e1:b3:80:ee:24:ba:2d:a8:76:ce:49:db: 7e:0e:de:d7:58:9b:bc:df:1d:33:ed:2f:0f:60:da:68:dc:a0: 22:2e:fc:d3:2b:e9:83:d9:61:5f:3c:2c:67:4f:a2:fb:fe:53: da:a0:40:a6:0a:8c:dd:d7:d0:83:f4:e4:c0:13:f5:9a:d1:37: 7d:a2:0b:a5:ed:84:42:2c:c5:1c:68:c1:13:86:8f:e9:5a:e6: b8:03:06:f3:0e:af:f3:2d:d7:ab:fd:8c:e7:aa:1d:c4:1b:28: 2e:56:82:99:02:b9:c5:14:16:c4:5c:b4:27:25:7f:eb:a3:23: 67:75:0c:88:c0:e6:e0:4e:36:e8:f1:b7:c5:1c:e9:8b:c3:df: 01:7c:94:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElFzpplAm++TRlnloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThlNjJhYmEtOGIwNS00Nzg1LWE4OTktZjc1Njg4YTI3 MmE1MB4XDTI1MDMyMjEzMDA1MloXDTI1MDYyMDEzMDA1MlowLzEtMCsGA1UEAxMk YTJlNGE5MGItZDRkOC00YmU5LWJhYTEtMzY2MjI1MzliNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRpv/nb3Vs7nnAfUWgqz3kD/AdlmFWg4Mop9 QSpgYCvamtUzjWblEpvvVdmZ2ryXZfmMGTuv7Lk3lzRLs8oyqtVpKN0za7vZ6VdN G3HqKmQOpAKBCaMEb4FHQJoCpsSfCrnEItyA9REWd8Bhz5X1FACU6sChvlarV/ut g8I/N97JXoYxUAwEeQ9J+XJMvGzl5dN8iuDU6dQvgWWP6fZED8batPy+g5/yv5xW A349l/5bz3nRpLn8e4y+rvw6FLie6i15Vq5qAnjwfh6ZjkP6yTwsmXSXzulhySDp ezmRBaGmKgJQyrpOsb/bGkJrbfvIODJPGsUwZdh4A+N9fFKFrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs1xXpxK2JlS5ajzPf6pW+20+96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGU2 MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2ODhhMjcyYTUvZmY0ZmRkM2ItZmE0YS0z ZDY4LWJmZjktOWYyOTJlZmE2ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThlNjJhYmEtOGIwNS00Nzg1LWE4 OTktZjc1Njg4YTI3MmE1Lzk4ZTYyYWJhLThiMDUtNDc4NS1hODk5LWY3NTY4OGEy NzJhNS5jcmwwHwYDVR0jBBgwFoAUdH1dKtMnvT7+sSgUb0YffdcfE30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGU2MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2 ODhhMjcyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAizM7cBxXRuMlxaImCkEZALPpPZeLpbS+vbcUHp8IvMuFv+5nkURD2J 9N/xE46XWpO8hHM2KPy/Q/9cH1WBEa4gls4UIom9HUSECzZaa3pMVnEt7EgZCNyW +4D0srIXum1j2QRBSBcVvOnW6Zp3mWxsZOGzgO4kui2ods5J234O3tdYm7zfHTPt Lw9g2mjcoCIu/NMr6YPZYV88LGdPovv+U9qgQKYKjN3X0IP05MAT9ZrRN32iC6Xt hEIsxRxowROGj+la5rgDBvMOr/Mt16v9jOeqHcQbKC5WgpkCucUUFsRctCclf+uj I2d1DIjA5uBONujxt8Uc6YvD3wF8lNQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:44 2025 by rpki-client