$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21786802-3647-3cf9-83ea-4f89e171f1a1.roa File: 21786802-3647-3cf9-83ea-4f89e171f1a1.roa (raw, json) Hash identifier: rCOgqHgAcKwiT5XNRDJ7ywVTPoKOzkBMUqR4iplD7J8= Subject key identifier: 5A:70:66:A8:6A:C8:62:6A:15:F6:70:CE:34:E6:FF:BB:75:56:45:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FF44A4F352413EA3FFA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21786802-3647-3cf9-83ea-4f89e171f1a1.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 98.246.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:f4:4a:4f:35:24:13:ea:3f:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=876dd3df-10f1-4cf0-b290-b4df23729b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:5d:de:57:8c:56:36:f4:e7:3f:51:a5:33: 7f:c1:84:46:fb:a8:c8:c7:75:8c:f8:26:b9:a6:e8: dd:65:9b:f4:e2:72:27:79:05:c8:d0:93:45:2b:fa: b7:7b:cf:df:5b:45:af:43:95:b4:80:3f:7a:b6:c7: 38:60:d3:1b:30:22:37:ec:c5:1b:f8:39:9f:ea:18: 93:8c:61:17:a2:58:da:a1:e1:a9:0f:71:f1:76:04: cd:ba:a7:eb:c7:6e:44:43:89:f1:15:91:bf:bb:7e: 19:c3:60:c0:e7:c1:e0:f5:66:37:7b:bb:d9:4d:eb: a5:da:2b:91:56:91:59:01:f6:67:5e:b6:69:f7:38: c0:5c:cb:94:d6:70:31:2a:37:31:9f:82:87:36:83: fe:d3:de:87:b2:8b:41:09:d9:2e:32:db:cb:b6:c3: 66:9b:fd:26:b7:17:0e:5c:07:bc:41:de:82:56:1f: 3a:0b:38:ac:a9:e1:8e:98:57:25:c5:c4:fd:3c:f8: 0f:32:1b:30:fc:cf:3f:81:d8:62:b3:58:35:5b:aa: 27:b0:ec:37:70:5c:bd:b5:7f:8e:44:88:7d:94:78: 1d:15:d6:19:c5:2a:09:6c:c8:5b:54:54:8d:c8:d0: 21:1c:9a:12:79:27:03:bb:88:bf:03:a0:67:e8:20: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:66:A8:6A:C8:62:6A:15:F6:70:CE:34:E6:FF:BB:75:56:45:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21786802-3647-3cf9-83ea-4f89e171f1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c5:9a:35:3c:ff:75:1c:6a:31:d5:2b:bc:ab:99:06:75:6a: 69:6b:96:03:48:95:80:ee:2e:53:9f:d2:2c:66:36:bf:42:be: d8:22:52:d2:53:5a:15:ba:58:f7:00:59:06:69:7e:22:46:c6: ad:e2:d9:bd:81:bd:00:28:ae:55:29:05:af:59:87:a4:c6:b5: 8e:f3:fd:76:a8:c5:33:34:e8:d1:7e:f9:c2:f7:98:1d:8f:24: 5c:bb:af:9b:c6:b1:f4:4c:ad:7e:70:59:f2:af:1c:9d:77:21: b3:56:ae:c6:6a:41:b7:51:1f:0b:9f:f5:38:39:06:e0:8d:6b: 7c:1c:50:52:e5:25:e8:5d:1f:7b:1d:6b:d2:ab:ca:db:ed:ca: 8b:66:9f:e7:e9:5b:e2:d8:b5:65:91:bd:70:43:96:59:f4:79: 69:22:f4:c3:bb:fb:7e:d4:ca:8c:02:72:a3:38:46:7e:55:52: a1:20:52:08:2a:d9:6e:f1:ef:45:6f:1a:fb:f3:f7:a9:86:5d: a5:e2:74:70:80:c7:52:4a:9d:f6:7f:49:ad:63:57:76:d6:14: 60:f8:f0:64:16:ed:06:10:fe:28:3e:2c:25:57:03:0b:36:fd: 05:57:1f:e4:62:10:a5:d6:ce:28:75:71:f2:9d:08:e1:09:6e: b9:6d:16:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/RKTzUkE+o/+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODc2ZGQzZGYtMTBmMS00Y2YwLWIyOTAtYjRkZjIzNzI5YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJd3leMVjb05z9RpTN/wYRG+6jIx3WM+Ca5 pujdZZv04nIneQXI0JNFK/q3e8/fW0WvQ5W0gD96tsc4YNMbMCI37MUb+Dmf6hiT jGEXoljaoeGpD3HxdgTNuqfrx25EQ4nxFZG/u34Zw2DA58Hg9WY3e7vZTeul2iuR VpFZAfZnXrZp9zjAXMuU1nAxKjcxn4KHNoP+096HsotBCdkuMtvLtsNmm/0mtxcO XAe8Qd6CVh86CzisqeGOmFclxcT9PPgPMhsw/M8/gdhis1g1W6onsOw3cFy9tX+O RIh9lHgdFdYZxSoJbMhbVFSNyNAhHJoSeScDu4i/A6Bn6CDOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpwZqhqyGJqFfZwzjTm/7t1VkWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjE3ODY4MDItMzY0Ny0z Y2Y5LTgzZWEtNGY4OWUxNzFmMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDFmjU8/3UcajHVK7yrmQZ1amlrlgNIlYDuLlOf0ixmNr9CvtgiUtJT WhW6WPcAWQZpfiJGxq3i2b2BvQAorlUpBa9Zh6TGtY7z/XaoxTM06NF++cL3mB2P JFy7r5vGsfRMrX5wWfKvHJ13IbNWrsZqQbdRHwuf9Tg5BuCNa3wcUFLlJehdH3sd a9Krytvtyotmn+fpW+LYtWWRvXBDlln0eWki9MO7+37UyowCcqM4Rn5VUqEgUggq 2W7x70VvGvvz96mGXaXidHCAx1JKnfZ/Sa1jV3bWFGD48GQW7QYQ/ig+LCVXAws2 /QVXH+RiEKXWzih1cfKdCOEJbrltFso= -----END CERTIFICATE-----Generated at Tue Jun 3 07:01:03 2025 by rpki-client