$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b7a7d80-fac6-3593-82a4-4bd8b64a3880.roa File: 1b7a7d80-fac6-3593-82a4-4bd8b64a3880.roa (raw, json) Hash identifier: e8HS/Ohh1OzJJ7E9jf4FGsXdqMyKbN8KO1xzvKZZRK4= Subject key identifier: 8A:93:74:85:87:DA:C4:F6:EE:F8:A6:EE:3F:06:C4:22:E5:0E:0C:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0715B631639B204AB53B90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b7a7d80-fac6-3593-82a4-4bd8b64a3880.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 98.248.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:15:b6:31:63:9b:20:4a:b5:3b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3815fc71-0b14-4892-8b03-f3f61478d74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d6:d7:cc:cd:da:a8:43:02:7b:47:80:5e:95: b5:74:16:37:c3:c1:d4:4e:0e:f4:fb:f2:3a:24:07: 40:4e:29:0d:2e:bb:34:63:46:a3:91:3f:c7:6f:2f: cc:3d:51:1b:da:59:f2:13:b5:57:7c:24:4e:60:47: 04:80:50:d7:e9:19:df:7e:f7:87:3b:e3:60:0b:c8: 62:ac:e3:dc:54:6f:59:ad:2f:cd:7e:3d:e7:4e:81: e7:f3:a9:cf:9a:25:7b:5e:ad:40:a2:8e:34:f3:1b: 3d:9c:e8:e9:c3:c3:b8:e2:c8:60:e1:03:ff:94:71: 74:7d:37:6b:30:79:e0:35:76:48:c4:a7:eb:5c:6e: 17:6f:f4:af:98:85:04:02:43:3a:40:31:07:b2:8b: fa:ad:c8:77:5a:d8:83:c4:40:74:a9:49:19:23:c3: e0:8d:96:5b:cb:f4:0d:45:32:0e:95:28:58:d6:64: 36:2a:4a:22:73:f2:ff:86:fd:ae:2a:28:08:4d:8a: ca:80:61:5f:5a:c1:27:b7:64:b3:4d:62:4e:f8:8c: 1c:6d:f2:17:52:8b:50:07:06:89:a3:99:85:78:d1: 35:14:5c:8a:5a:20:ee:08:f5:98:dc:22:c3:a5:93: 78:83:78:5d:c2:d9:93:28:4c:b5:09:dd:3a:38:77: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:93:74:85:87:DA:C4:F6:EE:F8:A6:EE:3F:06:C4:22:E5:0E:0C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b7a7d80-fac6-3593-82a4-4bd8b64a3880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d9:9f:1a:74:3f:da:36:35:64:1a:75:d0:68:ab:01:7a:4b: c1:34:f2:56:eb:08:fc:32:9e:14:85:c4:31:6d:17:fe:d4:b1: 25:1f:e5:c6:7f:4a:b7:90:f5:38:c6:7c:dc:a3:ef:da:92:7c: 05:8a:b0:53:34:3d:00:33:6b:e9:30:f2:f7:75:3f:de:3f:a4: b4:9a:9e:64:f7:ee:9c:59:5d:6b:72:da:de:b5:dc:37:75:33: e0:0c:34:fa:53:8e:d3:5c:db:25:b3:f8:56:d7:3c:af:55:50: d0:34:0d:4a:e7:83:55:e4:db:2d:eb:a3:30:e9:46:ba:a0:14: af:d2:49:d8:38:22:34:2e:ed:3b:58:2f:5d:ff:5f:85:60:e6: d2:f3:d2:18:4f:ab:a8:70:54:47:b2:0e:18:8d:2e:59:d6:e7: f8:05:59:7a:b7:03:86:77:38:d6:be:be:f5:5a:91:f8:ed:21: c6:58:75:2b:6c:fb:b0:aa:08:5f:43:3d:53:38:8a:4b:98:af: 88:70:42:0b:4f:51:76:1a:0e:a4:7a:26:b1:7d:b7:b8:4e:c4: d7:f8:6c:3c:0d:aa:0d:fc:35:ed:cf:19:d0:cc:50:97:71:a0: 8c:7f:d1:4e:e1:58:80:bf:32:b4:b6:71:a5:e3:41:67:77:32: 9f:c0:94:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBxW2MWObIEq1O5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MzgxNWZjNzEtMGIxNC00ODkyLThiMDMtZjNmNjE0NzhkNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9bXzM3aqEMCe0eAXpW1dBY3w8HUTg70+/I6 JAdATikNLrs0Y0ajkT/Hby/MPVEb2lnyE7VXfCROYEcEgFDX6RnffveHO+NgC8hi rOPcVG9ZrS/Nfj3nToHn86nPmiV7Xq1Aoo408xs9nOjpw8O44shg4QP/lHF0fTdr MHngNXZIxKfrXG4Xb/SvmIUEAkM6QDEHsov6rch3WtiDxEB0qUkZI8PgjZZby/QN RTIOlShY1mQ2Kkoic/L/hv2uKigITYrKgGFfWsEnt2SzTWJO+IwcbfIXUotQBwaJ o5mFeNE1FFyKWiDuCPWY3CLDpZN4g3hdwtmTKEy1Cd06OHdcxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqTdIWH2sT27vim7j8GxCLlDgwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI3YTdkODAtZmFjNi0z NTkzLTgyYTQtNGJkOGI2NGEzODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvi4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnZnxp0P9o2NWQaddBoqwF6S8E08lbrCPwynhSFxDFtF/7UsSUf5cZ/ SreQ9TjGfNyj79qSfAWKsFM0PQAza+kw8vd1P94/pLSanmT37pxZXWty2t613Dd1 M+AMNPpTjtNc2yWz+FbXPK9VUNA0DUrng1Xk2y3rozDpRrqgFK/SSdg4IjQu7TtY L13/X4Vg5tLz0hhPq6hwVEeyDhiNLlnW5/gFWXq3A4Z3ONa+vvVakfjtIcZYdSts +7CqCF9DPVM4ikuYr4hwQgtPUXYaDqR6JrF9t7hOxNf4bDwNqg38Ne3PGdDMUJdx oIx/0U7hWIC/MrS2caXjQWd3Mp/AlAA= -----END CERTIFICATE-----Generated at Tue Jun 3 06:19:20 2025 by rpki-client