$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d04a85-610a-3faf-b0e0-e09eb69759e4.roa File: 34d04a85-610a-3faf-b0e0-e09eb69759e4.roa (raw, json) Hash identifier: heQXa3gtDBXcF0aQt5BQcALTr8n4Hw4c64MPXsQhQQY= Subject key identifier: 37:58:68:EF:99:43:24:37:1C:B6:A8:43:6D:C3:45:4B:6D:A9:0B:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4327868770404C069897B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d04a85-610a-3faf-b0e0-e09eb69759e4.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.199.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:78:68:77:04:04:c0:69:89:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e6edf2bc-a29d-4b7e-81e2-07f816408b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:53:b7:bc:4a:87:d9:78:5f:80:ac:f3:bf: 42:2b:42:dd:8e:20:bb:d8:d6:ee:8a:50:c2:64:15: a9:d6:48:4c:d0:88:72:f0:e4:66:ac:d8:2a:9e:bf: 26:59:c1:ec:8c:e0:aa:ab:6d:7f:7c:9e:81:e9:2d: 52:52:87:79:e2:78:26:47:4a:c0:59:0c:ee:8c:c5: bf:c5:18:93:7f:ad:b0:84:cb:0a:df:31:52:6c:e6: 2c:b4:17:84:80:d0:68:46:03:72:65:8f:20:d9:31: f2:0e:57:c4:1b:e4:ee:41:a2:08:d8:48:bb:04:e5: f9:5e:b1:af:f9:d2:a8:bc:14:bf:7e:c4:67:7e:32: fa:9e:20:7e:54:d9:ac:b5:c3:49:a9:ca:b9:e6:14: 76:51:33:a5:24:0b:60:5a:fe:fa:d4:71:b3:15:84: c0:51:ac:7e:e3:d7:86:c7:3b:e5:f9:fd:82:ef:7a: 56:36:35:ba:46:94:33:c6:59:a7:f4:85:ce:b2:98: 08:34:cc:42:53:e5:29:5d:a9:12:1a:0b:07:ae:30: cc:e5:f3:07:07:40:f1:2b:33:9e:90:88:da:0c:46: fa:fa:20:72:44:8c:d2:ab:6c:64:28:df:93:08:ce: bd:a0:38:d8:37:fc:a7:ef:1e:40:38:29:36:c7:dc: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:58:68:EF:99:43:24:37:1C:B6:A8:43:6D:C3:45:4B:6D:A9:0B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d04a85-610a-3faf-b0e0-e09eb69759e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e3:ec:0c:94:c2:29:5a:fa:bb:b9:1b:7a:6f:0e:13:dc:a1: b3:4d:93:ba:16:24:a0:36:42:4c:7c:a9:73:b4:49:18:0e:a5: 5a:c2:e2:79:d2:34:2f:2d:d7:ed:17:bd:50:1d:69:49:06:5a: b5:35:8f:71:39:c9:35:07:5c:8b:a7:af:a3:33:c3:b7:e9:1e: 8c:11:4f:e9:12:a2:2f:43:e0:84:b6:78:69:10:2c:7e:1e:4c: ec:0e:02:a5:c1:70:18:fb:a1:08:12:0d:dc:d9:c6:cf:ac:2a: 1d:fa:75:ca:0e:f3:0e:9b:93:49:79:63:7f:c2:42:64:ca:87: 04:36:73:c0:54:e1:f3:b3:97:cd:71:ff:b5:5b:c5:90:a3:19: db:ee:9a:d4:97:f1:c7:98:a1:75:4b:d6:90:03:f1:93:b9:0f: ac:89:fd:0a:aa:70:e5:6b:27:c2:f1:53:06:d7:27:c9:8b:0c: 7b:6c:56:84:26:0e:41:aa:67:89:d6:eb:06:a2:a0:05:1a:dd: cf:be:3d:70:3c:ac:4c:b6:67:80:1d:74:77:f9:8b:fc:d4:8e: 8e:12:86:f2:de:94:90:cb:71:52:60:0d:95:72:a8:4e:09:c4: 1a:58:53:45:0c:6d:bb:5e:a8:49:8d:c1:38:37:c0:ff:ea:c6: 0e:47:a2:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMnhodwQEwGmJewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTZlZGYyYmMtYTI5ZC00YjdlLTgxZTItMDdmODE2NDA4Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3JTt7xKh9l4X4Cs879CK0LdjiC72NbuilDC ZBWp1khM0Ihy8ORmrNgqnr8mWcHsjOCqq21/fJ6B6S1SUod54ngmR0rAWQzujMW/ xRiTf62whMsK3zFSbOYstBeEgNBoRgNyZY8g2THyDlfEG+TuQaII2Ei7BOX5XrGv +dKovBS/fsRnfjL6niB+VNmstcNJqcq55hR2UTOlJAtgWv761HGzFYTAUax+49eG xzvl+f2C73pWNjW6RpQzxlmn9IXOspgINMxCU+UpXakSGgsHrjDM5fMHB0DxKzOe kIjaDEb6+iByRIzSq2xkKN+TCM69oDjYN/yn7x5AOCk2x9wPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdYaO+ZQyQ3HLaoQ23DRUttqQuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRkMDRhODUtNjEwYS0z ZmFmLWIwZTAtZTA5ZWI2OTc1OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfj7AyUwila+ru5G3pvDhPcobNNk7oWJKA2Qkx8qXO0SRgOpVrC4nnS NC8t1+0XvVAdaUkGWrU1j3E5yTUHXIunr6Mzw7fpHowRT+kSoi9D4IS2eGkQLH4e TOwOAqXBcBj7oQgSDdzZxs+sKh36dcoO8w6bk0l5Y3/CQmTKhwQ2c8BU4fOzl81x /7VbxZCjGdvumtSX8ceYoXVL1pAD8ZO5D6yJ/QqqcOVrJ8LxUwbXJ8mLDHtsVoQm DkGqZ4nW6waioAUa3c++PXA8rEy2Z4AddHf5i/zUjo4ShvLelJDLcVJgDZVyqE4J xBpYU0UMbbteqEmNwTg3wP/qxg5Hol4= -----END CERTIFICATE-----Generated at Tue Jun 3 05:45:42 2025 by rpki-client