$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa File: 2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa (raw, json) Hash identifier: 7Y2GwGyOrCKE3S5pxiUnnVtcIpE+1n3Qz6baEFLPnSg= Subject key identifier: 39:1B:A6:2B:4C:45:5C:E8:07:E3:32:2D:38:3B:0A:9A:2B:B6:C1:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430DE652F7AD304AAF4E808 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.250.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:de:65:2f:7a:d3:04:aa:f4:e8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=3552d72a-c3e5-4d06-840c-82c1a796bc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:fd:9a:95:90:53:1d:fe:2f:85:c3:ce:74: 31:4b:24:c7:fb:4a:4a:6d:3b:18:2c:32:d5:f2:9e: 36:a0:f2:7e:ed:79:2c:d0:6f:ba:59:14:4e:dd:ba: 5b:d7:92:45:2b:88:ec:7d:fb:34:00:a2:33:7d:da: 7a:29:be:78:9d:8c:54:cc:69:03:88:7c:d9:65:cc: 7c:19:2d:f8:b4:a1:53:72:3d:f2:f6:cd:27:12:18: 52:a2:fb:27:98:e2:31:1b:d9:d8:cd:56:0c:00:75: 14:41:20:41:2c:6e:6b:7c:af:ab:7e:e2:e3:e1:c9: 35:a0:16:ea:9c:9a:7d:13:0c:33:00:27:f6:5d:b9: 16:db:66:aa:22:21:37:55:03:82:a6:81:c4:a2:24: 79:06:24:3e:c4:12:85:74:60:32:ed:fc:41:b6:46: ee:2e:16:41:ec:c1:c8:b5:95:aa:cb:42:99:c8:de: 8c:61:c5:c7:b2:d4:09:37:ca:5b:28:ab:0d:3f:19: fb:7e:ea:af:c6:60:ec:c0:d4:5d:11:15:53:4e:4d: ec:32:80:02:cf:e8:c5:9d:9a:03:97:bc:1a:b8:48: 15:27:27:9c:a0:42:82:c2:17:a6:5f:59:0a:e4:25: 4e:b6:3d:24:e0:f0:65:f5:a9:47:c8:78:fd:2b:86: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1B:A6:2B:4C:45:5C:E8:07:E3:32:2D:38:3B:0A:9A:2B:B6:C1:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6f9405-bc19-3743-a0b2-7e1c132ba7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e2:09:e9:d7:e5:ac:42:e3:24:9b:04:4c:f2:0a:3d:e1:73: 50:a2:d0:ed:6a:6a:59:17:0c:2c:49:24:46:92:6a:2b:bb:95: eb:46:e5:20:5f:00:9c:61:13:dd:8b:ac:7d:a6:09:3b:a3:77: 45:03:fd:68:25:e1:13:67:4c:29:16:19:db:45:08:78:25:03: b2:77:de:78:3a:9a:91:88:43:c0:7c:bc:d4:e3:85:eb:4c:81: 1f:b9:93:df:93:49:89:bd:1a:56:50:48:8b:7e:67:3f:4c:33: 1d:cb:99:28:e8:82:d1:9e:a8:99:da:e7:e8:a9:bc:bc:fe:10: f1:3d:fe:4f:79:24:77:fa:a6:8b:08:d8:fd:f9:20:b0:59:b8: 6b:fa:78:48:e7:4c:bd:d1:24:24:47:07:f9:03:05:2a:21:78: fc:fd:a4:6c:bc:8b:b7:4c:9f:b2:6c:80:08:59:35:87:00:7f: 2a:9d:a9:ba:59:0d:44:86:67:38:b5:82:a1:8f:96:33:89:9e: 06:b8:bc:f1:d9:53:aa:13:14:e3:7b:25:28:0c:44:8e:11:35: e2:12:f0:97:64:29:82:1a:8c:e3:db:7d:9e:0c:14:98:6c:b6: 68:40:25:98:5f:46:1b:d3:3e:f6:d2:04:03:bd:6e:10:87:cd: 54:84:2e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMN5lL3rTBKr06AgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzU1MmQ3MmEtYzNlNS00ZDA2LTg0MGMtODJjMWE3OTZiYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmr9mpWQUx3+L4XDznQxSyTH+0pKbTsYLDLV 8p42oPJ+7Xks0G+6WRRO3bpb15JFK4jsffs0AKIzfdp6Kb54nYxUzGkDiHzZZcx8 GS34tKFTcj3y9s0nEhhSovsnmOIxG9nYzVYMAHUUQSBBLG5rfK+rfuLj4ck1oBbq nJp9EwwzACf2XbkW22aqIiE3VQOCpoHEoiR5BiQ+xBKFdGAy7fxBtkbuLhZB7MHI tZWqy0KZyN6MYcXHstQJN8pbKKsNPxn7fuqvxmDswNRdERVTTk3sMoACz+jFnZoD l7wauEgVJyecoEKCwhemX1kK5CVOtj0k4PBl9alHyHj9K4YmvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkbpitMRVzoB+MyLTg7CportsEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI2Zjk0MDUtYmMxOS0z NzQzLWEwYjItN2UxYzEzMmJhN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvr6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTiCenX5axC4ySbBEzyCj3hc1Ci0O1qalkXDCxJJEaSaiu7letG5SBf AJxhE92LrH2mCTujd0UD/Wgl4RNnTCkWGdtFCHglA7J33ng6mpGIQ8B8vNTjhetM gR+5k9+TSYm9GlZQSIt+Zz9MMx3LmSjogtGeqJna5+ipvLz+EPE9/k95JHf6posI 2P35ILBZuGv6eEjnTL3RJCRHB/kDBSohePz9pGy8i7dMn7JsgAhZNYcAfyqdqbpZ DUSGZzi1gqGPljOJnga4vPHZU6oTFON7JSgMRI4RNeIS8JdkKYIajOPbfZ4MFJhs tmhAJZhfRhvTPvbSBAO9bhCHzVSELvA= -----END CERTIFICATE-----Generated at Tue Jun 3 06:19:54 2025 by rpki-client