$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa File: 21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa (raw, json) Hash identifier: G73Jg0kyydQXM+UQ8OuwFWp5K0yO7BHR7uiYwC7Ri5I= Subject key identifier: 1E:7D:77:B1:13:EA:32:96:AD:D8:EF:6D:47:12:17:75:F0:7A:A9:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08DE9D2DB0ABA6591A4D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 98.234.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:de:9d:2d:b0:ab:a6:59:1a:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9df01362-2bf9-4084-9303-defa6bb3fa3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:56:30:95:22:a7:d6:c4:17:90:95:b3:92: b0:a4:80:43:36:64:29:2a:7a:d6:4e:69:88:fb:37: 7c:ed:ea:ae:24:84:31:d4:74:71:25:a6:63:d7:ef: 54:9e:d6:17:6d:07:d1:91:69:62:39:80:ec:b7:39: 6c:7f:6d:d4:5e:59:93:da:31:4a:cf:b2:69:d8:21: f2:a0:99:3e:45:af:e3:4a:5e:6a:39:6d:7d:d2:25: a7:87:22:41:92:ca:0f:03:85:28:94:b4:fa:e5:9c: 1c:2a:d5:ce:df:de:7d:6d:72:71:0a:e2:91:ee:c8: 5f:48:7b:b9:b7:c1:ba:95:a6:71:61:58:d0:97:8c: b9:6c:59:97:34:e8:0e:4a:19:f8:a7:16:a7:e4:a6: ac:3e:e8:47:75:6a:e4:f0:d3:77:db:9c:9d:2e:8c: 28:2d:08:2a:2d:bc:d5:ae:03:13:a5:2e:57:b1:18: 5f:27:86:fe:b9:db:fc:7f:00:1a:29:4e:0b:54:5a: df:2b:69:35:0b:80:c2:3e:f8:46:ad:25:58:46:b6: 25:03:1e:6e:53:96:b8:e4:31:75:36:5f:14:15:bf: fe:86:18:dc:48:85:3c:0c:d0:68:7c:f4:79:f2:a1: 33:a7:a4:15:f9:49:98:d2:2e:2e:01:8e:4a:7c:5e: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:77:B1:13:EA:32:96:AD:D8:EF:6D:47:12:17:75:F0:7A:A9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e2:c1:41:1f:8c:86:8d:e1:a5:c7:34:af:4b:38:86:a2:a1: 97:5c:eb:92:d0:87:c1:83:81:dc:d7:f5:86:c7:0b:95:13:c3: 2d:97:f2:11:d8:7f:5e:bd:86:ee:ab:94:62:f0:47:e4:3a:e1: 96:ac:c0:40:67:8d:1e:7d:6f:6c:54:81:6f:63:23:99:d6:e6: 3c:d0:08:36:7b:17:3d:08:f9:a4:41:d5:43:69:00:62:ab:a2: 52:52:5c:01:26:f6:f9:49:83:6f:da:cc:e9:e9:e3:d6:08:92: 0b:03:80:10:da:00:f3:65:29:73:1d:5c:53:31:7f:8d:da:56: 77:ee:33:bb:ef:6c:c9:34:a3:3a:ac:9b:90:79:5e:c4:61:5a: b8:9e:25:96:c6:5d:fc:8f:1d:1f:bc:81:1a:64:cb:2d:85:b9: ea:98:02:db:78:91:63:5c:d1:8d:43:b1:3c:83:48:0e:3d:5d: b5:8f:81:87:23:7d:9d:78:a1:0b:be:5b:c3:de:55:da:4c:b2: 4d:52:d0:6d:3d:e2:80:80:00:fa:ba:87:d9:c3:18:36:12:e0: d9:ff:e4:fd:5b:78:9c:5d:4b:db:fb:b2:ae:28:fb:e7:52:da: 87:68:b2:f5:ab:96:2c:79:ff:60:db:c4:d7:24:be:dc:0e:1d: 32:12:6e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCN6dLbCrplkaTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWRmMDEzNjItMmJmOS00MDg0LTkzMDMtZGVmYTZiYjNmYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeVWMJUip9bEF5CVs5KwpIBDNmQpKnrWTmmI +zd87equJIQx1HRxJaZj1+9UntYXbQfRkWliOYDstzlsf23UXlmT2jFKz7Jp2CHy oJk+Ra/jSl5qOW190iWnhyJBksoPA4UolLT65ZwcKtXO3959bXJxCuKR7shfSHu5 t8G6laZxYVjQl4y5bFmXNOgOShn4pxan5KasPuhHdWrk8NN325ydLowoLQgqLbzV rgMTpS5XsRhfJ4b+udv8fwAaKU4LVFrfK2k1C4DCPvhGrSVYRrYlAx5uU5a45DF1 Nl8UFb/+hhjcSIU8DNBofPR58qEzp6QV+UmY0i4uAY5KfF6/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB59d7ET6jKWrdjvbUcSF3Xweqn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiZjlhZGYtNGIzYS0z ZjE4LTlkMGItYzliYTlmMGVjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALiwUEfjIaN4aXHNK9LOIaioZdc65LQh8GDgdzX9YbHC5UTwy2X8hHY f169hu6rlGLwR+Q64ZaswEBnjR59b2xUgW9jI5nW5jzQCDZ7Fz0I+aRB1UNpAGKr olJSXAEm9vlJg2/azOnp49YIkgsDgBDaAPNlKXMdXFMxf43aVnfuM7vvbMk0ozqs m5B5XsRhWrieJZbGXfyPHR+8gRpkyy2FueqYAtt4kWNc0Y1DsTyDSA49XbWPgYcj fZ14oQu+W8PeVdpMsk1S0G094oCAAPq6h9nDGDYS4Nn/5P1beJxdS9v7sq4o++dS 2odosvWrlix5/2DbxNckvtwOHTISbkA= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:48 2025 by rpki-client