$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb166c2-1262-3a96-99a5-a3667b4e947f.roa File: 0eb166c2-1262-3a96-99a5-a3667b4e947f.roa (raw, json) Hash identifier: 0GCskfOLVaHFDXpjFHZDHT5vGaHKuZkO3XCl+SiQafU= Subject key identifier: 4A:E0:AF:63:46:75:5B:53:20:73:91:C4:73:F4:49:96:78:B1:44:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C1ED455BA1EAD54512000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb166c2-1262-3a96-99a5-a3667b4e947f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 98.208.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:1e:d4:55:ba:1e:ad:54:51:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7ffc8c5e-806f-49fd-b6ba-f17f3abc0cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:c3:bd:56:07:da:c1:99:44:cc:cd:ad:44: 98:d4:47:2b:bc:17:af:35:60:6e:8e:df:db:39:a9: 06:5d:21:ae:86:bd:03:87:54:32:74:0e:b8:47:f1: 3a:cd:ce:50:b9:0d:63:42:4f:99:04:6c:ea:21:cb: 06:32:db:5b:1b:46:5d:bf:cb:6b:15:16:27:55:1c: 52:c4:69:fe:36:9c:59:29:34:cf:3b:78:d1:66:c8: 94:e8:04:1d:a7:83:fd:a5:85:90:69:f5:f0:e2:cf: 5f:67:71:07:67:6b:98:e7:71:02:29:51:82:2e:f9: 2d:a6:be:8c:c4:a6:45:f5:48:8d:f3:1c:40:4e:e5: b6:bd:4e:21:32:ac:6a:85:e9:18:18:88:43:20:ee: 9e:3f:c9:c8:9c:55:e0:b1:f8:3d:71:7f:9f:68:92: 3e:45:39:21:67:4f:80:24:41:35:20:3f:49:c9:5e: 78:24:51:cd:47:a5:4b:ca:49:5b:67:88:22:69:6e: 61:6f:e6:d6:7c:16:3d:fc:ae:64:fe:2b:12:68:9c: b9:c7:01:e9:d0:d8:a9:07:74:db:75:4e:bd:bd:32: 0e:ef:80:15:6f:ee:be:dd:b5:c2:64:33:ca:64:e0: e5:2f:1e:fe:0f:51:ea:22:fb:41:9d:1a:47:e5:ed: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E0:AF:63:46:75:5B:53:20:73:91:C4:73:F4:49:96:78:B1:44:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb166c2-1262-3a96-99a5-a3667b4e947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.208.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:25:ee:cf:8e:5d:b2:5c:ac:94:27:92:4e:9e:43:f6:28:f1: 17:2f:f7:94:70:20:71:cc:4b:31:2f:d6:07:e2:07:a4:e1:4e: 39:5d:d7:b2:83:94:ec:17:a6:52:60:00:d2:85:6b:0b:02:5d: 24:48:6c:11:72:b3:4a:9d:62:31:4c:bb:15:eb:69:89:9d:7f: 3b:5e:b7:4a:8f:70:be:2d:2b:1b:51:f6:57:fb:97:56:61:58: 92:45:d0:d1:d6:c7:c6:e2:8b:55:51:0f:8a:5c:13:10:dc:9d: e0:ce:c1:64:fe:8b:6e:62:3e:85:41:38:a9:dd:3a:8e:16:17: 1d:8c:b8:c9:db:c7:a8:c0:a1:9e:50:83:ae:09:5f:27:63:84: 93:fb:c1:98:0c:02:65:58:89:bb:a7:90:e4:fb:3d:99:15:5b: c5:36:ea:a5:7e:34:4c:7a:a4:f1:ec:3a:5d:ee:ed:12:ee:6e: 59:67:21:59:c8:1f:93:e9:48:8a:ba:18:34:6c:1f:ed:a4:f7: 4a:9f:32:20:18:41:8f:a6:e8:c6:b1:6b:2d:80:c5:d0:7d:13: 06:10:ca:21:0d:47:00:43:5a:b5:e7:78:93:2e:04:d3:44:2f: 27:c7:6d:34:a4:19:34:4e:ef:dc:2a:ed:ea:53:e1:5b:43:86: 99:1e:0a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebB7UVboerVRRIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2ZmYzhjNWUtODA2Zi00OWZkLWI2YmEtZjE3ZjNhYmMwY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstrDvVYH2sGZRMzNrUSY1EcrvBevNWBujt/b OakGXSGuhr0Dh1QydA64R/E6zc5QuQ1jQk+ZBGzqIcsGMttbG0Zdv8trFRYnVRxS xGn+NpxZKTTPO3jRZsiU6AQdp4P9pYWQafXw4s9fZ3EHZ2uY53ECKVGCLvktpr6M xKZF9UiN8xxATuW2vU4hMqxqhekYGIhDIO6eP8nInFXgsfg9cX+faJI+RTkhZ0+A JEE1ID9JyV54JFHNR6VLyklbZ4giaW5hb+bWfBY9/K5k/isSaJy5xwHp0NipB3Tb dU69vTIO74AVb+6+3bXCZDPKZODlLx7+D1HqIvtBnRpH5e1HewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErgr2NGdVtTIHORxHP0SZZ4sUT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGViMTY2YzItMTI2Mi0z YTk2LTk5YTUtYTM2NjdiNGU5NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYtAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIol7s+OXbJcrJQnkk6eQ/Yo8Rcv95RwIHHMSzEv1gfiB6ThTjld17KD lOwXplJgANKFawsCXSRIbBFys0qdYjFMuxXraYmdfztet0qPcL4tKxtR9lf7l1Zh WJJF0NHWx8bii1VRD4pcExDcneDOwWT+i25iPoVBOKndOo4WFx2MuMnbx6jAoZ5Q g64JXydjhJP7wZgMAmVYibunkOT7PZkVW8U26qV+NEx6pPHsOl3u7RLubllnIVnI H5PpSIq6GDRsH+2k90qfMiAYQY+m6Maxay2AxdB9EwYQyiENRwBDWrXneJMuBNNE LyfHbTSkGTRO79wq7epT4VtDhpkeCvo= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:39 2025 by rpki-client