$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa File: 3708b2e2-b1f4-3516-a6cc-623967a05732.roa (raw, json) Hash identifier: H7BAofZ5mxNkRfxMuPCDfMg+s5G3ZNuDhso8xLCMGeI= Subject key identifier: 11:12:17:15:E8:76:71:D4:03:6B:1A:24:C5:6E:C4:D5:08:A1:3C:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F2B346FAFBD985919E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 98.117.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f2:b3:46:fa:fb:d9:85:91:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=fb1c524a-fb8b-49f9-9c74-d455ef48be9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:0a:e7:ba:dc:16:40:94:d7:d7:97:f9:ce: 0d:c9:07:2c:9d:0f:46:dc:f6:ad:21:e1:69:e9:1e: 33:80:c2:3b:87:d5:02:dc:bc:79:84:e5:40:ef:ff: 6e:ee:4d:f4:12:a6:b1:5f:7f:61:b2:a0:37:c0:2f: a1:ea:93:70:c7:38:04:db:65:91:34:96:24:b1:eb: 5d:f5:30:01:20:6e:b5:96:04:09:89:e7:f3:8e:fd: 0c:cd:61:e8:ea:5c:88:d5:2e:5e:43:c1:90:ac:cc: 50:99:12:7d:cd:77:6f:fb:90:fb:a6:95:ce:bc:5e: 52:76:1c:15:03:62:0c:38:c8:5d:1c:b2:f4:90:de: 04:85:65:13:2e:17:2d:df:dc:7c:0d:8a:0e:7b:72: 28:6b:02:8a:74:cf:66:ec:00:2e:7e:2a:b6:b6:1a: 77:dc:bb:97:07:48:00:7f:6b:37:a5:e3:fe:8a:c1: c6:f7:ab:df:b0:42:c5:08:1e:86:bd:32:ef:3d:ff: b6:79:2a:4f:16:72:fd:15:45:06:57:17:6d:80:2f: 6f:24:31:b9:69:27:6b:7b:7c:a2:d2:4f:27:8a:a6: c3:a7:d2:8a:00:1c:b8:04:77:56:01:87:b7:68:16: 34:ea:b7:65:2a:be:dc:1a:7d:12:08:12:bf:8f:fc: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:17:15:E8:76:71:D4:03:6B:1A:24:C5:6E:C4:D5:08:A1:3C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.117.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7f:2d:94:81:87:56:71:2f:63:d0:96:57:ba:ec:d7:14:c2: ce:9c:e5:b0:dd:80:e3:48:b1:e0:9a:64:30:b4:b8:79:d2:93: 0e:8d:0a:cd:b2:39:94:40:9a:e4:08:ea:de:90:0b:a2:d4:df: 92:df:2c:28:90:48:7d:8f:da:f6:2a:14:be:ed:32:f9:6c:c9: 3d:63:43:fe:4a:18:0c:32:15:8c:d1:32:b1:a8:c0:83:a4:e5: 27:5b:50:68:d8:f3:80:f2:cc:22:34:88:b7:11:ed:1b:b6:35: b3:87:4a:4d:ed:94:e2:d5:4d:0a:97:6b:8d:6e:3e:27:8b:02: 90:4f:25:5a:f5:1f:12:c9:b1:f3:86:f4:a9:56:6e:6e:2e:5b: 67:bc:6b:ea:07:3a:91:e6:78:62:95:ce:f8:d2:2b:34:c1:3d: a0:cd:15:43:33:e6:80:e9:d3:5a:ac:6e:d5:54:dc:79:88:5c: 18:4f:46:80:cd:a8:c0:60:5c:74:06:7e:e5:f3:8f:92:11:e0: 6e:ea:ea:58:dd:d1:24:b8:d5:c9:ad:f4:69:12:fb:72:5d:74: 46:ec:e7:2d:76:3b:51:33:43:13:d3:a6:68:55:96:9d:19:77: bd:88:8d:cb:ae:11:82:1b:1f:bc:2c:d5:ac:f4:cd:e4:73:cf: f0:16:2d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvKzRvr72YWRngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZmIxYzUyNGEtZmI4Yi00OWY5LTljNzQtZDQ1NWVmNDhiZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWgK57rcFkCU19eX+c4NyQcsnQ9G3PatIeFp 6R4zgMI7h9UC3Lx5hOVA7/9u7k30EqaxX39hsqA3wC+h6pNwxzgE22WRNJYksetd 9TABIG61lgQJiefzjv0MzWHo6lyI1S5eQ8GQrMxQmRJ9zXdv+5D7ppXOvF5SdhwV A2IMOMhdHLL0kN4EhWUTLhct39x8DYoOe3IoawKKdM9m7AAufiq2thp33LuXB0gA f2s3peP+isHG96vfsELFCB6GvTLvPf+2eSpPFnL9FUUGVxdtgC9vJDG5aSdre3yi 0k8niqbDp9KKABy4BHdWAYe3aBY06rdlKr7cGn0SCBK/j/yjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBESFxXodnHUA2saJMVuxNUIoTyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzcwOGIyZTItYjFmNC0z NTE2LWE2Y2MtNjIzOTY3YTA1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYnXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp/LZSBh1ZxL2PQlle67NcUws6c5bDdgONIseCaZDC0uHnSkw6NCs2y OZRAmuQI6t6QC6LU35LfLCiQSH2P2vYqFL7tMvlsyT1jQ/5KGAwyFYzRMrGowIOk 5SdbUGjY84DyzCI0iLcR7Ru2NbOHSk3tlOLVTQqXa41uPieLApBPJVr1HxLJsfOG 9KlWbm4uW2e8a+oHOpHmeGKVzvjSKzTBPaDNFUMz5oDp01qsbtVU3HmIXBhPRoDN qMBgXHQGfuXzj5IR4G7q6ljd0SS41cmt9GkS+3JddEbs5y12O1EzQxPTpmhVlp0Z d72IjcuuEYIbH7ws1az0zeRzz/AWLYY= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:42 2025 by rpki-client