$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10248696-b6a5-3280-be74-2ac9a1e1f114.roa File: 10248696-b6a5-3280-be74-2ac9a1e1f114.roa (raw, json) Hash identifier: S3syA+EgVYpC5Py3xIo89eL1r4wFH2/fcRJw16hV6OU= Subject key identifier: B9:1D:59:1F:63:73:40:82:5F:71:42:70:84:DE:56:38:48:4A:38:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F80B247916CDBF97796180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10248696-b6a5-3280-be74-2ac9a1e1f114.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.197.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:0b:24:79:16:cd:bf:97:79:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ee1cb2bb-0203-47a0-9f2b-aaa47ee94d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e1:36:93:ec:6a:4c:6f:13:da:3f:48:2b:28: 3e:92:45:e2:cb:d7:34:f8:01:e3:dd:a4:23:e2:bf: c2:3a:ca:4e:e2:39:97:0d:ca:c1:b9:8f:80:0f:38: 62:7b:2e:6b:67:0a:72:21:b7:f2:96:95:ad:de:4c: fc:56:1e:ea:a8:a8:dc:6c:43:92:a0:31:75:c3:d8: 70:b4:9f:36:6e:b3:d2:07:bf:3e:49:99:39:49:bf: f2:88:8c:76:1a:9d:69:bf:b8:fb:65:09:8d:ee:ec: de:c5:a4:60:61:97:2d:16:a2:d5:11:e2:4b:48:cb: b9:2f:38:17:1b:01:27:15:ca:ab:5c:28:bc:c7:0b: 36:e7:09:b9:6d:bf:e1:f6:df:c0:af:91:b8:23:e0: 0e:e6:e7:26:03:ad:fe:fe:04:0d:c5:1b:ba:6c:bb: 61:2f:ef:bc:0e:0b:e5:4f:11:c5:9c:55:e7:8b:43: be:46:51:6b:7e:0a:ee:9c:46:f5:52:d5:5b:f1:04: eb:6d:a2:99:9f:9e:98:ce:fe:f8:92:46:96:d0:27: e9:4a:c9:4e:aa:e0:5a:1e:05:71:2c:92:bf:dc:e1: eb:a5:0d:98:83:d9:18:40:0b:3c:f5:fa:5b:02:7a: 5a:f4:53:bc:50:fb:ea:c8:b6:44:92:97:9b:f7:48: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:59:1F:63:73:40:82:5F:71:42:70:84:DE:56:38:48:4A:38:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10248696-b6a5-3280-be74-2ac9a1e1f114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:85:8f:4b:ee:32:74:60:0e:c5:1c:e9:9d:69:be:fb:f3:1b: f2:71:95:59:b8:07:f3:a9:a6:cc:fe:c8:95:47:15:c2:ff:21: 36:f8:94:31:66:1d:dd:c6:24:21:03:92:ed:5d:58:df:cc:39: a6:c7:81:58:c5:aa:c7:fd:75:27:93:c7:32:ef:43:40:81:55: 37:55:70:33:e7:25:03:b9:c6:75:2b:68:d0:17:d6:01:93:fa: 86:9b:83:6b:be:97:2d:d9:f0:51:03:ff:2d:31:2b:96:da:45: c9:65:ed:90:6d:a5:77:63:15:e9:db:5f:15:91:23:83:99:2f: 64:b3:a7:88:6f:4a:77:37:72:6c:e5:24:cb:9d:a3:52:fb:64: 98:29:1a:e9:eb:20:f1:52:3e:50:01:68:ee:fd:5d:17:60:97: 97:fc:fe:63:52:5a:9c:b3:7c:00:86:b7:5f:29:55:9e:05:72: 0f:2f:47:d6:2d:e4:61:31:0c:1d:bc:75:73:e8:65:9a:53:83: 41:8a:9b:f4:3e:f3:f0:46:b9:7a:6f:35:1c:45:66:35:47:14: df:b5:18:b3:21:68:f0:ad:f4:c8:cc:f1:3e:bb:74:67:1b:4f: 53:64:a1:97:c2:f2:c5:8a:f3:b7:ca:30:b7:de:82:42:3e:93: 73:d7:9d:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+AskeRbNv5d5YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWUxY2IyYmItMDIwMy00N2EwLTlmMmItYWFhNDdlZTk0ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OE2k+xqTG8T2j9IKyg+kkXiy9c0+AHj3aQj 4r/COspO4jmXDcrBuY+ADzhiey5rZwpyIbfylpWt3kz8Vh7qqKjcbEOSoDF1w9hw tJ82brPSB78+SZk5Sb/yiIx2Gp1pv7j7ZQmN7uzexaRgYZctFqLVEeJLSMu5LzgX GwEnFcqrXCi8xws25wm5bb/h9t/Ar5G4I+AO5ucmA63+/gQNxRu6bLthL++8Dgvl TxHFnFXni0O+RlFrfgrunEb1UtVb8QTrbaKZn56Yzv74kkaW0CfpSslOquBaHgVx LJK/3OHrpQ2Yg9kYQAs89fpbAnpa9FO8UPvqyLZEkpeb90g8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkdWR9jc0CCX3FCcITeVjhISjiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTAyNDg2OTYtYjZhNS0z MjgwLWJlNzQtMmFjOWExZTFmMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaFj0vuMnRgDsUc6Z1pvvvzG/JxlVm4B/Oppsz+yJVHFcL/ITb4lDFm Hd3GJCEDku1dWN/MOabHgVjFqsf9dSeTxzLvQ0CBVTdVcDPnJQO5xnUraNAX1gGT +oabg2u+ly3Z8FED/y0xK5baRcll7ZBtpXdjFenbXxWRI4OZL2Szp4hvSnc3cmzl JMudo1L7ZJgpGunrIPFSPlABaO79XRdgl5f8/mNSWpyzfACGt18pVZ4Fcg8vR9Yt 5GExDB28dXPoZZpTg0GKm/Q+8/BGuXpvNRxFZjVHFN+1GLMhaPCt9MjM8T67dGcb T1NkoZfC8sWK87fKMLfegkI+k3PXnYk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:25:25 2025 by rpki-client