$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12c50086-937b-34d6-b1f9-25c9a95d3104.roa File: 12c50086-937b-34d6-b1f9-25c9a95d3104.roa (raw, json) Hash identifier: +nBxn8Ky7bwIEliMKUQjwMXzLn8XNObbPbz9L+mR6pU= Subject key identifier: 46:AB:F0:F0:10:19:60:C8:E2:C7:87:E5:C4:EC:5D:BE:B7:06:A9:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06B3AD9E470295A08653BC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12c50086-937b-34d6-b1f9-25c9a95d3104.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.223.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:b3:ad:9e:47:02:95:a0:86:53:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=170fad22-68cd-408a-bff2-25da5685d92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:bf:a4:a5:25:f1:da:46:d9:17:d6:a6:3a: b5:ec:29:43:74:f9:29:cb:cd:0d:02:0d:65:41:83: 13:92:18:40:d7:3a:99:1d:98:60:f6:96:05:05:63: 4a:3a:39:ac:c7:f2:55:24:7f:8c:57:60:5d:64:83: fb:41:17:9d:df:82:19:97:d2:56:cf:76:ad:9e:63: a8:aa:93:62:dd:ca:14:4d:94:bd:29:12:6f:29:cd: 22:e6:26:9a:f2:f2:ee:1b:3e:ce:30:46:d6:32:e4: 4a:0c:f6:57:dd:77:fa:e3:c0:3f:42:25:2f:2d:0f: 11:d8:f3:0b:35:41:b1:57:ff:99:bf:09:65:b1:5f: 11:70:d0:8b:ae:02:48:54:ab:be:5c:eb:77:1a:bc: f0:ad:fb:b9:de:a5:52:d8:a5:72:21:f5:45:82:75: 60:43:b0:f9:ac:ee:4c:45:43:7d:26:f4:b5:38:9b: 53:4f:b7:f8:21:e9:49:c3:9d:61:b1:57:66:8b:43: 41:d0:06:36:2c:bd:8e:22:52:d2:4b:15:e6:bb:35: 3e:60:ae:03:92:4b:2d:28:39:45:32:0c:09:89:b1: ad:a3:e7:c7:a7:a8:03:67:49:4d:66:7b:d3:58:78: 3a:46:b3:5b:2c:ef:a0:dc:b4:5a:51:68:a6:d6:6d: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:F0:F0:10:19:60:C8:E2:C7:87:E5:C4:EC:5D:BE:B7:06:A9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12c50086-937b-34d6-b1f9-25c9a95d3104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:90:35:db:26:dc:60:da:78:dc:ca:81:f9:41:09:87:a4:8e: 58:a4:8a:da:0a:2f:6c:c7:c5:dd:d7:e5:a5:9b:23:6a:d9:fd: ff:0e:08:93:4f:d8:2a:7d:c7:59:0c:2a:5e:42:51:3c:fd:03: 99:0c:03:d8:20:32:5b:4f:3f:4f:1e:d9:1b:32:39:7e:5c:63: fd:e8:f4:f0:3e:03:cc:d7:cb:11:b2:9b:23:08:84:2f:a5:b4: e3:d5:30:f4:8c:24:8b:f9:91:6e:cc:8d:30:e9:5f:de:74:4f: 07:cd:7c:fc:f9:9f:cc:28:dc:e3:bb:90:93:c9:84:a2:8c:c0: 44:68:e7:bd:41:12:28:3b:47:4b:e0:21:c4:52:3b:2e:c8:cd: b1:bf:19:eb:4e:8a:8b:84:68:71:31:00:0f:ab:b8:cb:62:41: 23:20:65:b6:69:fe:02:a5:4a:df:b0:5f:45:39:31:c5:7e:fa: 12:8e:ac:29:d8:28:c3:71:4f:26:16:f0:c0:fd:8f:47:9e:f5: 0c:63:4a:02:69:87:de:8d:a5:97:85:19:2b:26:88:83:2a:f0: bf:b5:9f:be:42:ad:a5:36:c4:6b:1d:08:5b:70:75:0d:d0:d2: 12:b7:65:5f:fa:87:fe:b9:8a:36:7a:30:ad:21:c9:94:e8:e5: f2:cd:a3:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBrOtnkcClaCGU7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTcwZmFkMjItNjhjZC00MDhhLWJmZjItMjVkYTU2ODVkOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib6/pKUl8dpG2RfWpjq17ClDdPkpy80NAg1l QYMTkhhA1zqZHZhg9pYFBWNKOjmsx/JVJH+MV2BdZIP7QRed34IZl9JWz3atnmOo qpNi3coUTZS9KRJvKc0i5iaa8vLuGz7OMEbWMuRKDPZX3Xf648A/QiUvLQ8R2PML NUGxV/+ZvwllsV8RcNCLrgJIVKu+XOt3Grzwrfu53qVS2KVyIfVFgnVgQ7D5rO5M RUN9JvS1OJtTT7f4IelJw51hsVdmi0NB0AY2LL2OIlLSSxXmuzU+YK4DkkstKDlF MgwJibGto+fHp6gDZ0lNZnvTWHg6RrNbLO+g3LRaUWim1m26dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEar8PAQGWDI4seH5cTsXb63Bql5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJjNTAwODYtOTM3Yi0z NGQ2LWIxZjktMjVjOWE5NWQzMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyQNdsm3GDaeNzKgflBCYekjlikitoKL2zHxd3X5aWbI2rZ/f8OCJNP 2Cp9x1kMKl5CUTz9A5kMA9ggMltPP08e2RsyOX5cY/3o9PA+A8zXyxGymyMIhC+l tOPVMPSMJIv5kW7MjTDpX950TwfNfPz5n8wo3OO7kJPJhKKMwERo571BEig7R0vg IcRSOy7IzbG/GetOiouEaHExAA+ruMtiQSMgZbZp/gKlSt+wX0U5McV++hKOrCnY KMNxTyYW8MD9j0ee9QxjSgJph96NpZeFGSsmiIMq8L+1n75CraU2xGsdCFtwdQ3Q 0hK3ZV/6h/65ijZ6MK0hyZTo5fLNo9Q= -----END CERTIFICATE-----Generated at Tue Jun 3 05:37:57 2025 by rpki-client