$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a7aa09b-f805-3c2c-8cda-4ad5c381106b.roa File: 0a7aa09b-f805-3c2c-8cda-4ad5c381106b.roa (raw, json) Hash identifier: 1j/5BaXsIwPRMdeUKnIJcIQNY4eDS5Dv0oSJ9L5mCTc= Subject key identifier: 9D:BB:E7:7E:A9:0D:9F:53:C2:92:86:13:1F:DF:6A:AC:C2:1E:5B:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4327CD828D8360322D94680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a7aa09b-f805-3c2c-8cda-4ad5c381106b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.201.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:7c:d8:28:d8:36:03:22:d9:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9c7dd0a9-d736-4a16-9552-9658ac34a3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:b2:49:f0:9f:f9:93:39:23:b3:df:35:dc: 2c:99:3a:e2:f6:38:08:ce:28:1a:64:5f:dc:0b:0c: 72:9a:75:23:e1:3d:c1:45:50:4b:66:ed:00:c2:97: b6:82:c6:30:0e:1f:bd:e0:71:c7:b1:91:7c:fc:85: 3b:12:35:cb:ac:f1:65:f6:71:82:14:f9:3b:fa:ba: 07:18:8b:a4:2f:48:4e:4e:90:16:18:3d:8c:69:df: 20:16:0a:f8:7e:27:ec:ab:83:06:47:14:6c:37:c8: 4a:81:3f:d8:e3:e7:bf:2b:94:8f:59:fe:0c:3e:90: bb:75:1c:18:5b:39:01:f8:99:22:f3:82:40:f7:b3: 25:51:d6:81:24:d0:c4:9e:b4:b8:5f:2c:75:ff:b3: 3d:0f:83:18:c7:72:c0:56:73:60:3d:59:1a:89:28: f3:9f:b1:09:68:5e:72:0a:22:e6:84:75:83:ed:27: 18:d5:75:99:fb:bf:26:2c:af:10:b6:74:de:08:4c: cd:a0:e6:4b:b0:5c:e3:c5:e2:d5:43:97:23:d0:e8: 2b:26:6e:27:80:fb:1e:0d:8a:b7:00:20:3f:1d:96: 39:4a:28:68:70:90:36:a9:65:cb:54:62:5f:0d:88: 71:eb:1e:40:84:27:55:9b:12:2c:89:3f:1a:ef:92: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BB:E7:7E:A9:0D:9F:53:C2:92:86:13:1F:DF:6A:AC:C2:1E:5B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a7aa09b-f805-3c2c-8cda-4ad5c381106b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:55:ce:1a:69:35:d1:e7:65:3d:51:bf:14:44:1e:8e:76:26: 97:88:8e:37:51:b8:05:9b:05:6b:25:ee:bb:79:0e:0d:e2:44: cb:61:f1:8a:91:db:8e:3e:bd:ad:12:ac:14:5b:f2:d0:76:c5: ae:27:8c:f0:90:24:c7:e3:b2:a3:99:50:16:97:f4:6e:24:aa: 0f:4b:f2:3a:79:9e:66:2f:b5:a1:af:4f:81:ba:ef:d2:46:38: 19:0b:36:6f:42:60:bd:8b:c4:46:32:0c:44:3d:2f:d6:1f:6a: bf:69:79:32:69:70:ab:1e:f8:58:6b:b7:a7:d1:25:3e:d2:06: 02:9a:39:1d:0c:7e:7b:d2:88:38:74:ad:c3:1d:1a:97:d4:22: 35:0b:13:19:9d:d5:aa:bf:ba:22:51:9e:f8:cf:b3:ce:01:24: 3a:ba:c3:1e:2e:85:2e:dd:9c:04:03:c8:2d:ba:ae:08:11:40: f6:ae:31:f5:b1:26:38:ed:51:72:67:2a:31:0e:56:f7:cb:65: 48:29:1c:62:78:cd:8a:d2:2f:04:bf:73:c3:1d:45:e2:19:0d: 25:3a:59:fe:96:a3:4b:b9:3b:d4:9f:70:90:49:d6:ac:29:b5: e4:3e:8e:8b:f8:2f:ec:a3:84:0d:04:31:47:4f:bb:18:8c:1a: fe:38:c0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMnzYKNg2AyLZRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWM3ZGQwYTktZDczNi00YTE2LTk1NTItOTY1OGFjMzRhM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdSySfCf+ZM5I7PfNdwsmTri9jgIzigaZF/c CwxymnUj4T3BRVBLZu0Awpe2gsYwDh+94HHHsZF8/IU7EjXLrPFl9nGCFPk7+roH GIukL0hOTpAWGD2Mad8gFgr4fifsq4MGRxRsN8hKgT/Y4+e/K5SPWf4MPpC7dRwY WzkB+Jki84JA97MlUdaBJNDEnrS4Xyx1/7M9D4MYx3LAVnNgPVkaiSjzn7EJaF5y CiLmhHWD7ScY1XWZ+78mLK8QtnTeCEzNoOZLsFzjxeLVQ5cj0OgrJm4ngPseDYq3 ACA/HZY5SihocJA2qWXLVGJfDYhx6x5AhCdVmxIsiT8a75KgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ27536pDZ9TwpKGEx/faqzCHlvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGE3YWEwOWItZjgwNS0z YzJjLThjZGEtNGFkNWMzODExMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5VzhppNdHnZT1RvxREHo52JpeIjjdRuAWbBWsl7rt5Dg3iRMth8YqR 244+va0SrBRb8tB2xa4njPCQJMfjsqOZUBaX9G4kqg9L8jp5nmYvtaGvT4G679JG OBkLNm9CYL2LxEYyDEQ9L9Yfar9peTJpcKse+Fhrt6fRJT7SBgKaOR0MfnvSiDh0 rcMdGpfUIjULExmd1aq/uiJRnvjPs84BJDq6wx4uhS7dnAQDyC26rggRQPauMfWx JjjtUXJnKjEOVvfLZUgpHGJ4zYrSLwS/c8MdReIZDSU6Wf6Wo0u5O9SfcJBJ1qwp teQ+jov4L+yjhA0EMUdPuxiMGv44wLg= -----END CERTIFICATE-----Generated at Tue Jun 3 05:00:14 2025 by rpki-client