$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28049881-7433-3ca0-ba49-cba628b14a03.roa File: 28049881-7433-3ca0-ba49-cba628b14a03.roa (raw, json) Hash identifier: IpjBm6NlhnZXd2vZX8C3kw7/TjxRv2FuYyzhPwKrRfY= Subject key identifier: 43:DE:25:AB:BF:59:D6:1B:89:94:04:36:32:A6:D9:C5:E1:E0:FD:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB15F21F5DF48D0666AD800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28049881-7433-3ca0-ba49-cba628b14a03.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.253.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:5f:21:f5:df:48:d0:66:6a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=7b2b5a8e-7e64-4b0e-bcc3-8fe45bf1363a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:8c:5a:e0:42:fd:49:e2:0b:ad:aa:7d:41: 32:6c:12:18:4a:d1:22:cd:c1:5d:c1:bb:7f:43:73: ba:b4:ca:19:9d:14:b0:18:cc:4c:e1:52:1c:51:7a: a2:f5:bf:70:e3:45:b0:fb:2a:07:ed:88:9a:ef:b7: 17:1f:f5:fa:a4:fb:89:9b:5c:75:77:54:95:75:62: 79:48:3d:49:01:9a:83:d8:04:a9:17:e2:c8:5d:8c: 3b:e4:fd:15:40:af:0a:0d:88:a9:d2:29:76:48:66: 35:00:49:be:64:dc:4f:18:01:43:aa:b8:78:59:fb: aa:a9:31:46:01:1c:05:4d:6d:91:fe:fd:e8:0b:fe: 85:b5:c2:56:1a:64:fa:74:a6:70:74:a1:11:4f:c5: 04:fe:56:60:8d:45:4d:0c:d8:55:44:f3:8b:06:9d: 63:8f:cb:4e:ad:ed:f0:0e:ad:b6:31:25:1a:78:60: 19:9c:99:f1:4c:6a:4c:2b:f3:29:15:08:96:32:4f: 3f:43:17:fc:c8:e9:85:c7:6f:aa:42:72:02:90:eb: bd:93:b0:ad:e2:e9:c3:f7:97:61:bd:cb:99:cb:da: f3:2f:75:33:63:e4:3b:8a:62:e0:e0:6a:4e:61:db: 09:96:82:a4:c1:f9:7e:20:72:99:35:3f:2f:ef:07: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:25:AB:BF:59:D6:1B:89:94:04:36:32:A6:D9:C5:E1:E0:FD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28049881-7433-3ca0-ba49-cba628b14a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:76:da:3b:0e:05:5a:8e:aa:14:e3:64:a4:f0:ab:fe:a4:db: ed:08:f4:d1:5b:66:32:2c:47:c2:28:4b:55:00:16:58:42:4e: 70:c1:ab:16:33:6d:3d:66:0b:cb:99:b0:b1:3b:9e:95:8e:0c: 45:71:5f:2e:5e:dd:3e:39:eb:79:81:3c:0d:d5:a6:cc:aa:e5: 3b:58:29:01:49:17:05:83:4c:54:94:2b:4a:b1:95:cd:f9:5e: 50:f1:87:df:30:bb:db:ff:da:3a:34:2c:2d:e9:1d:2d:c9:ef: 2a:52:58:2e:34:ec:e4:6a:71:da:96:42:12:c6:38:2d:84:a6: aa:e9:5c:8b:a5:d7:97:00:61:fe:34:28:74:d7:b4:b3:d8:ac: 77:f1:a1:61:07:9b:bd:05:69:96:9f:bd:1e:f1:d3:1d:8e:08: 97:12:ad:98:dd:9a:29:73:ca:7f:64:1d:4a:b3:ed:8c:97:17: 68:3c:fc:5a:10:13:05:c9:d5:b6:a5:c3:4e:c4:7b:53:83:33: 7c:99:93:ea:59:0b:47:75:3a:b1:8a:70:35:da:e4:1b:07:bf: ff:26:5e:6e:68:f9:e5:e5:ef:78:9d:4d:83:e0:0b:39:9d:1d: f9:cd:6f:24:d3:fe:53:32:e2:39:3f:86:86:8c:04:da:6b:7c: ed:61:a5:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssV8h9d9I0GZq2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2IyYjVhOGUtN2U2NC00YjBlLWJjYzMtOGZlNDViZjEzNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB6MWuBC/UniC62qfUEybBIYStEizcFdwbt/ Q3O6tMoZnRSwGMxM4VIcUXqi9b9w40Ww+yoH7Yia77cXH/X6pPuJm1x1d1SVdWJ5 SD1JAZqD2ASpF+LIXYw75P0VQK8KDYip0il2SGY1AEm+ZNxPGAFDqrh4WfuqqTFG ARwFTW2R/v3oC/6FtcJWGmT6dKZwdKERT8UE/lZgjUVNDNhVRPOLBp1jj8tOre3w Dq22MSUaeGAZnJnxTGpMK/MpFQiWMk8/Qxf8yOmFx2+qQnICkOu9k7Ct4unD95dh vcuZy9rzL3UzY+Q7imLg4GpOYdsJloKkwfl+IHKZNT8v7wc8SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPeJau/WdYbiZQENjKm2cXh4P3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjgwNDk4ODEtNzQzMy0z Y2EwLWJhNDktY2JhNjI4YjE0YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYv2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD922jsOBVqOqhTjZKTwq/6k2+0I9NFbZjIsR8IoS1UAFlhCTnDBqxYz bT1mC8uZsLE7npWODEVxXy5e3T4563mBPA3Vpsyq5TtYKQFJFwWDTFSUK0qxlc35 XlDxh98wu9v/2jo0LC3pHS3J7ypSWC407ORqcdqWQhLGOC2EpqrpXIul15cAYf40 KHTXtLPYrHfxoWEHm70FaZafvR7x0x2OCJcSrZjdmilzyn9kHUqz7YyXF2g8/FoQ EwXJ1balw07Ee1ODM3yZk+pZC0d1OrGKcDXa5BsHv/8mXm5o+eXl73idTYPgCzmd HfnNbyTT/lMy4jk/hoaMBNprfO1hpUw= -----END CERTIFICATE-----Generated at Mon Apr 7 09:49:12 2025 by rpki-client