$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31d3b667-f633-3bc0-b6f3-dd5b7e098e2d.roa File: 31d3b667-f633-3bc0-b6f3-dd5b7e098e2d.roa (raw, json) Hash identifier: S01JB2Ij7nPZEw+RoCd0WJxp/35PFTJpReE5j+kByQU= Subject key identifier: A6:DD:A6:F1:60:96:90:27:B6:05:52:A0:BF:B3:88:43:AB:A2:FB:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1E5A5E0FDF0B419C80780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31d3b667-f633-3bc0-b6f3-dd5b7e098e2d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.35.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:e5:a5:e0:fd:f0:b4:19:c8:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d49928d4-dc82-427a-94fe-7287ea2bd359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:bc:4a:a1:4a:d9:b6:01:0a:1d:ec:c9:e0: 2a:6d:5d:70:f1:36:15:27:10:a2:42:66:6c:be:f5: 6c:c9:92:26:44:bb:92:77:f9:5e:8b:e9:73:25:a9: 11:76:71:4f:3f:2f:2f:a0:3e:11:4b:ad:3b:12:61: 3c:1c:65:e8:a1:48:0e:86:32:a9:27:60:e2:cf:5e: 9a:da:6a:0b:e4:71:4e:16:f8:12:21:46:09:ea:59: cc:01:87:e8:e5:5d:a4:a8:9f:f8:a5:a0:55:fc:76: fb:d0:b8:03:02:92:56:bf:f3:d4:be:d0:9c:e7:31: ea:9d:3a:e4:61:49:53:54:5b:ce:40:d9:e7:92:7c: 57:8d:00:83:23:59:c0:eb:e4:78:e2:8f:44:11:22: 41:43:8c:b1:1b:38:67:82:2c:03:ab:d5:47:83:1e: 3d:36:b8:16:08:c0:06:04:1d:f9:51:a5:d1:19:f8: a2:71:ea:1c:a0:89:32:da:00:56:fe:80:22:df:8b: d3:96:3c:20:27:76:38:bf:02:0d:df:59:ba:47:a2: 3a:79:64:c7:98:25:83:6e:a8:99:0e:23:d8:d5:a1: 0c:47:af:5b:5d:ac:f5:6d:b4:52:e3:9f:98:d7:b8: 11:ba:2a:b5:cb:eb:53:64:91:82:2a:e7:ad:64:af: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DD:A6:F1:60:96:90:27:B6:05:52:A0:BF:B3:88:43:AB:A2:FB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31d3b667-f633-3bc0-b6f3-dd5b7e098e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:a3:f3:08:2c:ca:f4:60:55:3f:77:f6:d9:7f:03:cd:5c:ad: b6:f9:ff:be:3a:5e:8a:ae:6b:1a:d8:c6:11:69:fe:2f:d7:10: a3:24:0e:93:67:6f:a1:9f:f0:e2:64:0a:de:33:b5:2f:29:50: ab:c9:09:47:89:55:1e:cf:f5:f7:ae:e1:15:5d:d2:fa:ef:85: c8:eb:30:81:3a:69:02:8e:e7:6b:41:f6:9e:27:88:5e:4c:04: 88:97:58:e2:39:2e:d3:d7:43:e5:ad:47:3c:b4:7b:b9:d2:c2: 1d:b4:53:50:38:d4:a6:b5:93:cc:e2:2c:5c:cf:e9:9d:44:60: 60:e2:21:0f:1e:93:ad:3d:f6:59:9b:9a:a0:09:18:15:4d:b6: 42:31:64:f0:84:1a:93:dc:47:79:93:df:1c:92:78:cc:7b:71: 15:0e:77:12:da:e2:8f:7c:eb:a7:94:7b:13:ad:92:6b:27:5f: 28:79:c9:1d:ee:9f:e1:97:18:5c:a5:c3:b0:0e:44:22:c4:2c: ff:69:21:22:f9:ef:b2:79:d8:d4:b8:ad:d6:de:a7:aa:4b:44: 88:d7:d8:06:5a:0c:e0:c1:24:c9:6e:7d:0f:a5:6f:72:ef:60: cb:57:e0:5a:08:a5:43:f6:5a:77:e5:f9:21:0f:10:c1:27:d2: 05:04:ff:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksseWl4P3wtBnIB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDQ5OTI4ZDQtZGM4Mi00MjdhLTk0ZmUtNzI4N2VhMmJkMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssi8SqFK2bYBCh3syeAqbV1w8TYVJxCiQmZs vvVsyZImRLuSd/lei+lzJakRdnFPPy8voD4RS607EmE8HGXooUgOhjKpJ2Diz16a 2moL5HFOFvgSIUYJ6lnMAYfo5V2kqJ/4paBV/Hb70LgDApJWv/PUvtCc5zHqnTrk YUlTVFvOQNnnknxXjQCDI1nA6+R44o9EESJBQ4yxGzhngiwDq9VHgx49NrgWCMAG BB35UaXRGfiiceocoIky2gBW/oAi34vTljwgJ3Y4vwIN31m6R6I6eWTHmCWDbqiZ DiPY1aEMR69bXaz1bbRS45+Y17gRuiq1y+tTZJGCKuetZK9d6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbdpvFglpAntgVSoL+ziEOrovv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzFkM2I2NjctZjYzMy0z YmMwLWI2ZjMtZGQ1YjdlMDk4ZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSj8wgsyvRgVT939tl/A81crbb5/746XoquaxrYxhFp/i/XEKMkDpNn b6Gf8OJkCt4ztS8pUKvJCUeJVR7P9feu4RVd0vrvhcjrMIE6aQKO52tB9p4niF5M BIiXWOI5LtPXQ+WtRzy0e7nSwh20U1A41Ka1k8ziLFzP6Z1EYGDiIQ8ek6099lmb mqAJGBVNtkIxZPCEGpPcR3mT3xySeMx7cRUOdxLa4o9866eUexOtkmsnXyh5yR3u n+GXGFylw7AORCLELP9pISL577J52NS4rdbep6pLRIjX2AZaDODBJMlufQ+lb3Lv YMtX4FoIpUP2Wnfl+SEPEMEn0gUE/9Q= -----END CERTIFICATE-----Generated at Mon Apr 7 05:59:21 2025 by rpki-client