$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26a5bd04-0988-3cea-bcee-8fe965137c4a.roa File: 26a5bd04-0988-3cea-bcee-8fe965137c4a.roa (raw, json) Hash identifier: pDATZybvTLdDEhSevE3H3wSCu2YIK18l+yhk32RnCG4= Subject key identifier: 59:DB:D6:8E:8F:CD:CF:78:56:F3:AD:57:13:6A:C7:FE:5E:C0:A7:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06B90E08138562E59DEB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26a5bd04-0988-3cea-bcee-8fe965137c4a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.228.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:b9:0e:08:13:85:62:e5:9d:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=7295252e-088a-4b4c-81f7-706d8957ed15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:b3:03:94:c7:ac:50:5b:a8:45:9f:e0:09: 52:bd:36:d7:de:82:36:d9:c9:a6:34:3e:f2:ed:1a: f5:ec:5f:6e:40:3f:ba:89:36:8d:5d:f4:26:8f:c3: ff:70:b6:df:12:0f:ed:a7:b6:2c:1e:ff:8d:31:4a: a9:c0:ae:08:b2:89:22:7e:da:26:8f:84:7b:1d:64: 1d:9b:8b:18:92:c8:dd:a2:ee:ca:e3:37:a8:c1:f5: b8:d6:bb:9f:2d:b0:d0:dc:f2:63:bd:59:58:ff:20: b2:97:24:80:85:e3:10:2a:b2:cb:12:74:e6:a0:b4: aa:0f:4e:ff:c6:9c:bb:91:37:60:a7:7b:ab:5c:44: a8:45:20:75:c2:6d:a4:e7:17:67:8f:92:48:1d:46: d4:c9:91:2e:00:7d:94:f6:63:b5:aa:62:8b:b2:89: 3a:0c:c1:9c:a7:b0:41:0e:50:71:cb:c4:a9:75:17: 28:17:cf:47:16:d0:c0:eb:2d:10:92:b0:89:80:dd: fe:f1:fb:69:23:85:27:98:ed:0e:37:da:7f:4d:aa: ee:d4:e5:0c:dc:3d:e9:75:48:8c:20:69:c6:eb:39: a0:57:2b:ed:3c:c5:2e:ce:37:7e:f0:5b:20:fe:f7: 26:3c:d1:08:a3:f4:75:b8:fc:95:ad:3e:53:bc:42: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DB:D6:8E:8F:CD:CF:78:56:F3:AD:57:13:6A:C7:FE:5E:C0:A7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26a5bd04-0988-3cea-bcee-8fe965137c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2f:3f:68:5d:4c:90:fc:b0:00:a7:99:0c:3a:56:3c:13:eb: 9e:67:7c:6a:61:10:ef:08:a3:7e:24:63:38:02:63:b8:11:d6: 81:80:67:3b:81:3e:d4:c5:02:7d:fa:66:83:4b:3d:d7:69:f8: 2e:98:5a:c6:54:95:07:fd:37:e4:a2:7f:55:b4:74:06:8e:31: 5e:7c:c7:4d:af:33:ca:ce:73:c1:28:75:0f:50:07:e4:90:a9: 1c:b7:ac:0b:1b:41:ea:3b:69:5d:1d:2f:f8:53:40:bf:52:96: b4:0b:d5:82:ca:26:06:2f:aa:21:48:db:58:52:c9:24:d7:bc: 02:bd:06:53:24:18:85:7a:aa:a5:83:3d:83:5c:b8:02:3d:b6: b1:4e:eb:e5:ca:bc:97:db:61:7e:17:fe:aa:be:c5:d8:e8:78: 3d:b1:96:34:33:c7:dd:90:ba:93:80:90:47:7c:9a:c6:ee:34: e5:b9:0a:d4:9f:87:87:1e:5c:47:55:07:9c:b3:c7:f5:4a:c8: a7:2e:75:9d:4a:dd:83:53:6a:c8:dd:b6:7b:2e:8a:08:c5:a9: 7f:21:29:a4:13:02:fc:70:15:cb:50:36:9b:01:75:a2:fa:4d: 5f:09:4a:63:1f:30:52:13:13:f0:b9:06:45:14:25:dd:ec:bc: 5a:ba:0d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBrkOCBOFYuWd64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NzI5NTI1MmUtMDg4YS00YjRjLTgxZjctNzA2ZDg5NTdlZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn2zA5THrFBbqEWf4AlSvTbX3oI22cmmND7y 7Rr17F9uQD+6iTaNXfQmj8P/cLbfEg/tp7YsHv+NMUqpwK4Isokiftomj4R7HWQd m4sYksjdou7K4zeowfW41rufLbDQ3PJjvVlY/yCylySAheMQKrLLEnTmoLSqD07/ xpy7kTdgp3urXESoRSB1wm2k5xdnj5JIHUbUyZEuAH2U9mO1qmKLsok6DMGcp7BB DlBxy8SpdRcoF89HFtDA6y0QkrCJgN3+8ftpI4UnmO0ON9p/Taru1OUM3D3pdUiM IGnG6zmgVyvtPMUuzjd+8Fsg/vcmPNEIo/R1uPyVrT5TvEKeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnb1o6Pzc94VvOtVxNqx/5ewKd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjZhNWJkMDQtMDk4OC0z Y2VhLWJjZWUtOGZlOTY1MTM3YzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIvP2hdTJD8sACnmQw6VjwT655nfGphEO8Io34kYzgCY7gR1oGAZzuB PtTFAn36ZoNLPddp+C6YWsZUlQf9N+Sif1W0dAaOMV58x02vM8rOc8EodQ9QB+SQ qRy3rAsbQeo7aV0dL/hTQL9SlrQL1YLKJgYvqiFI21hSySTXvAK9BlMkGIV6qqWD PYNcuAI9trFO6+XKvJfbYX4X/qq+xdjoeD2xljQzx92QupOAkEd8msbuNOW5CtSf h4ceXEdVB5yzx/VKyKcudZ1K3YNTasjdtnsuigjFqX8hKaQTAvxwFctQNpsBdaL6 TV8JSmMfMFITE/C5BkUUJd3svFq6Df0= -----END CERTIFICATE-----Generated at Tue Jun 3 06:02:28 2025 by rpki-client