$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cc7c046-6bc6-35cc-9bea-40caa9c0b331.roa File: 0cc7c046-6bc6-35cc-9bea-40caa9c0b331.roa (raw, json) Hash identifier: flMBXHPu+WhiwDfCMtJNzZxlBWEXC9IF211ytBfuOrc= Subject key identifier: 06:A4:BC:48:28:17:2A:AF:BB:76:C9:35:42:7F:0A:59:68:D3:5C:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08E5B4B4272CDF60F3D580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cc7c046-6bc6-35cc-9bea-40caa9c0b331.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 98.33.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:e5:b4:b4:27:2c:df:60:f3:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3794b5bb-82f0-48be-a482-96f509cf5264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:b9:cb:47:62:45:e3:ec:78:26:25:67:e1: cd:c9:04:84:e7:1c:75:82:b9:37:d9:8a:08:73:73: a2:af:a5:11:3d:21:61:7f:26:6c:dd:4a:9e:0c:9c: eb:e3:38:f3:79:7e:36:67:14:9f:0e:39:94:dc:0a: 32:24:6b:5f:f4:d4:95:16:ba:f5:d5:1b:b6:1a:75: ce:d9:f6:82:90:1f:09:80:2a:99:d4:e0:0f:48:57: 08:af:0a:fd:3c:bf:b5:70:0d:92:19:cf:4e:7d:b8: 47:3a:82:e3:fd:94:5d:9f:10:0c:aa:46:e9:b5:44: 93:d9:0b:47:a2:be:01:8f:1c:b2:6c:d8:64:ef:f6: d4:7b:82:b5:af:0f:ff:57:2a:9d:64:ff:11:67:02: 1d:8f:1c:f4:b9:33:93:44:da:26:78:68:06:3c:95: ca:21:91:20:30:6f:22:7f:c9:24:07:db:f3:b6:ef: 68:48:3f:07:a1:8d:9c:9e:fe:7e:bf:51:6b:ee:4b: 95:5b:4f:b4:1f:a1:b8:7a:5a:c2:9c:fa:ba:0d:8c: ef:cd:a5:bd:8d:ce:0d:04:6b:91:95:93:44:8b:46: 56:24:1d:b5:5e:19:4f:87:8d:5b:3b:2c:77:34:93: bd:56:e0:6e:58:82:de:ca:f2:00:4a:fd:69:12:d1: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:BC:48:28:17:2A:AF:BB:76:C9:35:42:7F:0A:59:68:D3:5C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cc7c046-6bc6-35cc-9bea-40caa9c0b331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:35:25:47:23:b2:12:bc:1c:37:77:bd:4c:7f:1f:08:54:23: 04:97:ad:d1:2a:5b:92:77:38:0f:0a:60:c9:3a:76:10:f1:0b: 43:28:6a:11:d9:36:36:9c:f3:d0:43:24:5c:2b:5e:aa:2a:eb: c3:6c:8f:29:e9:8e:31:27:aa:49:66:03:0d:db:62:56:bc:ab: 8d:27:4a:e9:85:0c:90:b7:ee:6c:1d:6c:50:45:5a:dc:7a:31: 3b:46:2d:7a:ce:1f:df:f2:a3:dc:6f:c0:a7:db:ca:b1:fc:47: c6:e1:6a:fc:33:7d:cc:07:c2:bd:40:2c:7a:7b:bf:d4:90:8d: 90:83:0c:6f:14:34:eb:aa:4c:82:a5:e8:eb:2a:5c:da:95:b3: d4:fd:98:a6:da:72:c5:33:2f:f5:dd:b2:bf:77:4e:0d:06:3f: d4:9c:f1:6b:a2:36:4d:cb:d6:e0:12:51:d5:ef:90:91:e6:86: 54:1b:fa:4d:13:5f:71:3e:ca:45:27:96:81:25:33:6c:f1:51: c7:57:d6:c9:71:44:f1:21:d9:c5:92:25:c6:24:a9:a4:29:83: a6:17:76:2b:2d:51:be:fb:00:0e:d8:aa:a0:6e:5e:51:59:87: 92:08:44:08:4e:74:62:bc:7c:0c:25:42:ab:08:aa:6a:64:63: d1:90:7d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCOW0tCcs32Dz1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Mzc5NGI1YmItODJmMC00OGJlLWE0ODItOTZmNTA5Y2Y1MjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKO5y0diRePseCYlZ+HNyQSE5xx1grk32YoI c3Oir6URPSFhfyZs3UqeDJzr4zjzeX42ZxSfDjmU3AoyJGtf9NSVFrr11Ru2GnXO 2faCkB8JgCqZ1OAPSFcIrwr9PL+1cA2SGc9OfbhHOoLj/ZRdnxAMqkbptUST2QtH or4BjxyybNhk7/bUe4K1rw//VyqdZP8RZwIdjxz0uTOTRNomeGgGPJXKIZEgMG8i f8kkB9vztu9oSD8HoY2cnv5+v1Fr7kuVW0+0H6G4elrCnPq6DYzvzaW9jc4NBGuR lZNEi0ZWJB21XhlPh41bOyx3NJO9VuBuWILeyvIASv1pEtHwMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAakvEgoFyqvu3bJNUJ/Cllo01wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNjN2MwNDYtNmJjNi0z NWNjLTliZWEtNDBjYWE5YzBiMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ1JUcjshK8HDd3vUx/HwhUIwSXrdEqW5J3OA8KYMk6dhDxC0MoahHZ Njac89BDJFwrXqoq68NsjynpjjEnqklmAw3bYla8q40nSumFDJC37mwdbFBFWtx6 MTtGLXrOH9/yo9xvwKfbyrH8R8bhavwzfcwHwr1ALHp7v9SQjZCDDG8UNOuqTIKl 6OsqXNqVs9T9mKbacsUzL/Xdsr93Tg0GP9Sc8WuiNk3L1uASUdXvkJHmhlQb+k0T X3E+ykUnloElM2zxUcdX1slxRPEh2cWSJcYkqaQpg6YXdistUb77AA7YqqBuXlFZ h5IIRAhOdGK8fAwlQqsIqmpkY9GQfRw= -----END CERTIFICATE-----Generated at Tue Jun 3 06:02:40 2025 by rpki-client