$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e3d312-d7f8-31aa-918f-e23b7d3d4e8e.roa File: 29e3d312-d7f8-31aa-918f-e23b7d3d4e8e.roa (raw, json) Hash identifier: OQ9x+FPm/Wp8rzsK1eWlEvmz9XV+yzcXMg7xuKoBK+4= Subject key identifier: A9:16:9D:A3:ED:3A:00:5C:95:F1:A0:23:2B:27:EB:8F:31:82:A1:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F95D1293C7DF650655AE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e3d312-d7f8-31aa-918f-e23b7d3d4e8e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.197.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:5d:12:93:c7:df:65:06:55:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=0e877d9c-04bc-4f94-bac1-e5af28b6aa3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:0a:33:94:b6:b2:51:6e:78:0d:cc:a2:e8: 6c:f5:1d:8e:9f:08:04:18:84:e0:bc:30:47:9a:ce: c1:f9:ab:3b:90:42:8e:a7:8c:4f:09:ef:5a:c0:85: 35:6b:a0:db:1c:dc:40:06:1a:40:e8:db:d6:f6:d6: c9:43:85:47:f3:88:13:f9:0a:e1:07:ad:79:da:bd: c6:8d:10:0f:8d:1d:7e:0a:04:fe:b9:5a:32:cd:ae: 3f:1b:d5:85:f8:c7:1e:23:1b:40:9a:b0:51:de:4b: a4:d3:3f:6a:63:2d:55:2a:6a:73:d3:7f:e0:21:25: b4:26:e3:ad:3e:33:5f:a8:6a:54:2c:90:84:a0:b9: 3a:50:11:a5:d7:d3:43:cd:69:b0:a7:8b:72:4b:53: 4b:e1:b1:a2:6a:f5:40:5b:36:28:97:84:ef:cb:17: 14:67:57:33:b9:4f:b1:6d:4a:75:74:f9:38:bc:18: 8c:0a:7a:e3:96:e1:8d:af:42:5f:c7:09:49:0d:18: 94:68:74:2d:f3:d5:5a:f1:04:f0:7d:8d:b7:0b:1a: fe:a6:94:7b:80:c6:a7:4e:75:b4:0e:32:f5:59:52: 7c:4b:bb:cd:34:d8:11:93:85:02:01:43:3d:49:2b: f7:7c:52:03:e7:2d:77:6d:14:2f:14:a6:bf:82:c1: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:16:9D:A3:ED:3A:00:5C:95:F1:A0:23:2B:27:EB:8F:31:82:A1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e3d312-d7f8-31aa-918f-e23b7d3d4e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b1:13:38:ba:07:be:56:e6:cb:e3:25:2c:97:1e:83:27:88: 97:23:cb:66:2f:9c:bc:04:ec:c5:93:b3:c8:7b:4e:c3:1a:de: cd:fd:32:82:77:71:40:ad:cb:d2:75:7f:b4:f8:05:f1:de:72: 0f:e3:08:71:b6:f4:18:f8:87:c0:39:eb:90:44:5c:b1:b0:14: 6a:6a:a5:eb:07:47:5c:ac:e3:73:5a:91:2d:62:28:d2:4f:7f: ee:6e:83:35:54:72:73:9e:3e:29:4d:be:4d:7e:61:a8:38:4c: b3:14:e5:8b:51:63:16:a5:71:ab:04:60:6d:42:68:ed:a8:12: 3e:5c:3a:73:0f:5a:ac:73:8f:2c:cc:14:90:ed:b9:56:6c:d8: a7:82:e9:02:72:92:da:ec:bf:05:41:f5:57:19:43:64:1c:6f: ec:b7:1a:21:c7:d1:6a:40:3c:d2:20:45:c1:18:1b:3c:38:4e: bc:18:27:a9:2b:2c:e7:6f:63:fc:82:6d:70:02:87:9d:c7:b6: e9:6d:5c:1e:b7:b6:8d:89:90:43:e5:52:14:2d:07:47:8f:87: d0:24:34:cb:f7:be:f6:51:de:07:b8:9e:12:76:86:c5:31:ea: e8:54:20:63:37:32:0f:22:fb:5b:16:83:3f:e6:98:04:35:c7: 1b:52:42:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+V0Sk8ffZQZVroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MGU4NzdkOWMtMDRiYy00Zjk0LWJhYzEtZTVhZjI4YjZhYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxIKM5S2slFueA3Mouhs9R2OnwgEGITgvDBH ms7B+as7kEKOp4xPCe9awIU1a6DbHNxABhpA6NvW9tbJQ4VH84gT+QrhB6152r3G jRAPjR1+CgT+uVoyza4/G9WF+MceIxtAmrBR3kuk0z9qYy1VKmpz03/gISW0JuOt PjNfqGpULJCEoLk6UBGl19NDzWmwp4tyS1NL4bGiavVAWzYol4TvyxcUZ1czuU+x bUp1dPk4vBiMCnrjluGNr0JfxwlJDRiUaHQt89Va8QTwfY23Cxr+ppR7gManTnW0 DjL1WVJ8S7vNNNgRk4UCAUM9SSv3fFID5y13bRQvFKa/gsF02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkWnaPtOgBclfGgIysn648xgqF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjllM2QzMTItZDdmOC0z MWFhLTkxOGYtZTIzYjdkM2Q0ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsXiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCxEzi6B75W5svjJSyXHoMniJcjy2YvnLwE7MWTs8h7TsMa3s39MoJ3 cUCty9J1f7T4BfHecg/jCHG29Bj4h8A565BEXLGwFGpqpesHR1ys43NakS1iKNJP f+5ugzVUcnOePilNvk1+Yag4TLMU5YtRYxalcasEYG1CaO2oEj5cOnMPWqxzjyzM FJDtuVZs2KeC6QJyktrsvwVB9VcZQ2Qcb+y3GiHH0WpAPNIgRcEYGzw4TrwYJ6kr LOdvY/yCbXACh53HtultXB63to2JkEPlUhQtB0ePh9AkNMv3vvZR3ge4nhJ2hsUx 6uhUIGM3Mg8i+1sWgz/mmAQ1xxtSQis= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:31 2025 by rpki-client