$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afae46b-bac9-38bc-9126-df0075ae4558.roa File: 0afae46b-bac9-38bc-9126-df0075ae4558.roa (raw, json) Hash identifier: +xUeafqjnbbZVnfd+4Kl2aDXlwxXX0Zc1uQxFzxcsDY= Subject key identifier: 22:11:FE:EF:36:DF:CF:89:43:3D:93:67:6F:63:43:D6:C1:18:79:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0867FFEC9AB7BCF81A2800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afae46b-bac9-38bc-9126-df0075ae4558.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.253.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:67:ff:ec:9a:b7:bc:f8:1a:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a5f1ada8-afe6-4ce5-99a2-b4e84ceddf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:45:9a:06:54:42:c4:00:95:f1:4e:bf:ff: d1:15:a6:5a:45:08:af:a4:cc:69:d9:64:af:2e:60: 11:7f:89:a4:21:2c:d9:86:2e:c0:cc:23:76:92:c6: 50:93:40:cb:db:04:5a:c1:45:b4:3c:93:0e:b6:3b: f6:d6:c1:9f:09:6c:d0:fc:e6:32:06:f6:f4:24:7e: f4:09:d4:23:9d:36:e4:6e:0f:b7:59:59:d2:10:0e: 92:a6:a4:6a:bf:84:fa:a2:b6:63:c4:ea:eb:ce:12: b4:37:63:f0:5a:70:9b:27:b8:71:70:47:3a:dc:d2: 79:4c:ab:51:58:bb:3f:4b:77:9f:59:44:7c:3d:4c: d9:42:28:8a:f0:15:e2:c7:0f:a6:2e:6c:5e:db:a1: 01:02:07:d1:55:72:94:b3:3a:2b:de:6d:87:bc:1f: 09:d4:43:ac:fc:af:2e:58:a0:04:33:cd:e7:c0:2f: c2:21:55:ac:fc:44:81:a2:da:42:49:6a:d3:4c:7d: 4c:16:b5:7e:d9:57:f0:aa:fa:74:4e:05:ce:42:14: 2b:78:4f:23:bf:b9:b1:75:92:c4:19:b3:f7:aa:3b: b5:33:ed:c7:b0:63:80:2a:2b:ea:9d:59:bb:fe:59: 1e:0b:a4:bf:59:ad:82:a8:bc:83:f8:e5:84:f7:64: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:11:FE:EF:36:DF:CF:89:43:3D:93:67:6F:63:43:D6:C1:18:79:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afae46b-bac9-38bc-9126-df0075ae4558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6d:31:af:28:4a:5e:fe:bb:fa:31:1b:b9:2b:e1:c9:53:77: a1:03:9b:12:20:d6:90:52:f6:e8:a8:d8:80:e1:94:35:63:61: 89:7c:03:11:80:be:df:02:e3:9c:9b:7f:14:1b:09:42:9c:e4: ba:f2:37:b2:3a:58:26:7f:61:99:fd:93:6c:4c:20:9f:2d:89: 56:5a:a2:8b:7d:59:d5:a9:e4:8b:60:27:f1:bc:c5:d8:ae:ea: be:cc:e4:4e:ef:ce:9f:f1:a8:a5:16:55:ac:f2:19:94:e2:24: 26:ff:4d:70:62:46:db:10:61:f2:3d:c2:4e:c9:a2:50:b3:d0: 31:88:66:ea:7d:99:e5:ab:2f:39:ff:b8:c2:42:41:10:28:73: 43:7f:7c:7b:d7:ab:8d:98:b9:5b:bf:e4:a6:5e:c4:c0:15:eb: dc:54:59:64:57:55:99:f6:9c:40:f7:13:77:c3:13:06:71:eb: ee:e2:69:fd:15:aa:f2:3a:a6:67:70:f0:a2:10:3f:61:e7:12: 18:4d:e8:1a:a3:d3:8c:74:ae:26:c8:80:ff:66:5f:00:5b:6d: ef:99:6d:04:d6:34:14:a2:39:85:a6:7c:e4:45:60:a1:18:fd: 40:4f:0a:15:2c:4b:20:43:41:a2:3f:06:3c:ed:6f:56:97:6f: 86:e6:b1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCGf/7Jq3vPgaKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTVmMWFkYTgtYWZlNi00Y2U1LTk5YTItYjRlODRjZWRkZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTNFmgZUQsQAlfFOv//RFaZaRQivpMxp2WSv LmARf4mkISzZhi7AzCN2ksZQk0DL2wRawUW0PJMOtjv21sGfCWzQ/OYyBvb0JH70 CdQjnTbkbg+3WVnSEA6SpqRqv4T6orZjxOrrzhK0N2PwWnCbJ7hxcEc63NJ5TKtR WLs/S3efWUR8PUzZQiiK8BXixw+mLmxe26EBAgfRVXKUszor3m2HvB8J1EOs/K8u WKAEM83nwC/CIVWs/ESBotpCSWrTTH1MFrV+2Vfwqvp0TgXOQhQreE8jv7mxdZLE GbP3qju1M+3HsGOAKivqnVm7/lkeC6S/Wa2CqLyD+OWE92T4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIR/u8238+JQz2TZ29jQ9bBGHlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFmYWU0NmItYmFjOS0z OGJjLTkxMjYtZGYwMDc1YWU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVtMa8oSl7+u/oxG7kr4clTd6EDmxIg1pBS9uio2IDhlDVjYYl8AxGA vt8C45ybfxQbCUKc5LryN7I6WCZ/YZn9k2xMIJ8tiVZaoot9WdWp5ItgJ/G8xdiu 6r7M5E7vzp/xqKUWVazyGZTiJCb/TXBiRtsQYfI9wk7JolCz0DGIZup9meWrLzn/ uMJCQRAoc0N/fHvXq42YuVu/5KZexMAV69xUWWRXVZn2nED3E3fDEwZx6+7iaf0V qvI6pmdw8KIQP2HnEhhN6Bqj04x0ribIgP9mXwBbbe+ZbQTWNBSiOYWmfORFYKEY /UBPChUsSyBDQaI/Bjztb1aXb4bmsbg= -----END CERTIFICATE-----Generated at Tue Jun 3 06:59:22 2025 by rpki-client