$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb30265-6a21-3a2d-b100-c1464cda0254.roa File: 2cb30265-6a21-3a2d-b100-c1464cda0254.roa (raw, json) Hash identifier: T2AmJ8ps8Z3wWPnhs3ZEFmqRIFN4UXon9DlVedkodt0= Subject key identifier: 29:3F:8A:B6:92:33:43:03:04:33:08:92:EF:BC:E0:D1:9D:56:A2:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8C902541DDE854E06DB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb30265-6a21-3a2d-b100-c1464cda0254.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 98.229.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:c9:02:54:1d:de:85:4e:06:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=974f7900-ede6-4580-a1f2-dc51aeb40d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:0c:63:2a:29:17:84:0b:f9:f2:49:87:0d: 62:dd:42:81:f3:fe:fe:08:0f:2d:b0:83:c1:73:f3: 35:5e:0a:70:96:ab:6f:a0:cb:08:71:e6:17:6f:6e: 8e:3c:46:36:60:7e:b3:4e:56:c4:74:68:ee:7c:31: 91:9f:ee:39:49:c3:72:46:1b:10:50:51:84:34:10: 06:3e:5e:b0:23:27:d5:70:8e:7d:30:77:80:69:69: 8e:89:e2:43:7b:7e:64:be:96:ef:d9:36:c2:20:ad: 2b:87:b3:ef:59:b9:c0:74:54:ff:00:b5:c5:7a:08: dc:24:b8:22:b6:e2:cb:0c:dd:0c:5b:9d:b7:b4:8e: ba:68:cd:fc:5c:fd:8c:e1:d1:40:28:cc:59:63:f1: 6e:bd:08:50:e0:07:20:69:63:8f:9f:28:bd:e7:87: 63:28:3c:40:c3:14:55:51:1d:df:04:38:26:7e:00: 4a:ca:38:ca:93:5f:f3:b7:12:28:4e:a3:f3:72:f2: 47:8a:80:52:24:a5:94:9e:c9:cf:57:ca:39:5a:60: 4d:3c:49:de:86:a3:22:20:d2:8a:67:7a:a4:ac:9f: 1a:58:f3:44:c5:f3:8a:09:d2:5d:b8:12:2e:94:59: f5:a7:f4:45:78:d3:9e:9e:10:b8:81:a9:8c:2c:6a: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3F:8A:B6:92:33:43:03:04:33:08:92:EF:BC:E0:D1:9D:56:A2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb30265-6a21-3a2d-b100-c1464cda0254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.229.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:09:98:c8:11:fc:80:84:22:d0:41:f9:ae:72:12:cb:f8:7f: b7:8f:e8:d7:39:53:8c:cc:d5:56:47:fe:06:bb:8e:fe:f3:6d: 19:49:e1:64:6d:e5:bc:75:a6:fc:a5:1a:ae:6e:cd:89:f2:96: a4:8a:ca:32:75:2c:d4:75:3f:0c:a7:f4:ad:5e:80:c0:ab:38: c6:5e:63:c3:16:c2:b1:21:5e:42:96:64:9b:13:87:b2:04:27: 2b:52:30:f0:6e:ca:56:74:0b:04:98:c9:96:23:c0:65:67:0a: 5a:04:82:1b:34:b9:72:d6:42:29:4b:3c:e8:8c:2b:20:45:e2: e5:e3:9b:c1:d0:37:22:23:2e:26:fe:a1:ca:53:14:7b:96:35: 74:13:8f:5c:c2:86:1a:5b:5a:9b:fe:41:18:fa:c4:12:1b:21: 51:fd:a3:a1:34:59:e0:35:ac:93:5c:72:d5:f6:e4:26:ee:56: dc:a6:31:4f:63:69:68:b2:05:4c:52:d2:6b:1b:1f:74:6b:04: b1:6f:74:be:1c:5e:77:a2:1a:58:8f:af:28:45:b4:8f:65:30: 4d:f9:4d:8e:4a:a3:91:72:3e:e4:c9:be:a8:fd:60:d3:dd:80: 23:b7:1f:6d:7f:94:f6:04:ce:a5:92:0e:43:34:e9:e7:0c:b0: 4f:60:52:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+MkCVB3ehU4G2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OTc0Zjc5MDAtZWRlNi00NTgwLWExZjItZGM1MWFlYjQwZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqkMYyopF4QL+fJJhw1i3UKB8/7+CA8tsIPB c/M1XgpwlqtvoMsIceYXb26OPEY2YH6zTlbEdGjufDGRn+45ScNyRhsQUFGENBAG Pl6wIyfVcI59MHeAaWmOieJDe35kvpbv2TbCIK0rh7PvWbnAdFT/ALXFegjcJLgi tuLLDN0MW523tI66aM38XP2M4dFAKMxZY/FuvQhQ4AcgaWOPnyi954djKDxAwxRV UR3fBDgmfgBKyjjKk1/ztxIoTqPzcvJHioBSJKWUnsnPV8o5WmBNPEnehqMiINKK Z3qkrJ8aWPNExfOKCdJduBIulFn1p/RFeNOenhC4gamMLGoPXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk/iraSM0MDBDMIku+84NGdVqL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNiMzAyNjUtNmEyMS0z YTJkLWIxMDAtYzE0NjRjZGEwMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIJmMgR/ICEItBB+a5yEsv4f7eP6Nc5U4zM1VZH/ga7jv7zbRlJ4WRt 5bx1pvylGq5uzYnylqSKyjJ1LNR1Pwyn9K1egMCrOMZeY8MWwrEhXkKWZJsTh7IE JytSMPBuylZ0CwSYyZYjwGVnCloEghs0uXLWQilLPOiMKyBF4uXjm8HQNyIjLib+ ocpTFHuWNXQTj1zChhpbWpv+QRj6xBIbIVH9o6E0WeA1rJNcctX25CbuVtymMU9j aWiyBUxS0msbH3RrBLFvdL4cXneiGliPryhFtI9lME35TY5Ko5FyPuTJvqj9YNPd gCO3H21/lPYEzqWSDkM06ecMsE9gUjI= -----END CERTIFICATE-----Generated at Sun Apr 6 12:00:59 2025 by rpki-client