$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b0668f6-6b51-33e2-b5e6-0d918b241ce4.roa File: 3b0668f6-6b51-33e2-b5e6-0d918b241ce4.roa (raw, json) Hash identifier: iZICw+VwKP3SHImq9nZK15YHKuxeCkQrhXd4f1sEnYs= Subject key identifier: A1:8D:D9:B4:C8:BA:1E:E8:F4:24:85:48:E4:2E:1A:A1:22:7E:2C:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4326E045DDF5EA0EF3B2380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b0668f6-6b51-33e2-b5e6-0d918b241ce4.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.195.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:6e:04:5d:df:5e:a0:ef:3b:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=22d788f0-4f6d-40d3-bcf5-8b0e90b04bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:81:9d:d7:2c:87:73:e4:24:11:5e:f0:b3: 16:96:33:3f:8b:e6:93:07:d0:8e:6d:f0:9f:a2:03: 4f:d5:25:d6:71:c4:e7:ce:e3:21:1b:86:f0:9b:87: a7:d8:74:18:9c:8f:16:62:34:be:f2:ff:cf:1c:90: c8:d6:a0:5a:f3:13:bc:83:f1:ff:33:a9:8b:9b:7d: 4c:0f:87:e9:64:a6:23:37:cc:38:a1:9b:03:fd:58: 22:af:5b:ec:9e:8a:2e:13:58:b3:c6:2a:fb:25:07: c3:a6:15:93:d6:a6:b2:ad:1b:67:70:d8:17:59:4f: be:d0:ac:4d:e1:75:5c:b0:ea:30:40:7e:54:31:0f: 25:4c:71:89:b9:04:2f:1a:75:41:a5:56:a6:ca:73: f3:72:4c:12:fe:67:57:8a:7d:dc:66:34:ed:21:a8: 75:41:4a:e2:5b:fb:1f:fb:88:54:dc:6b:af:d2:e6: d7:6c:74:5d:2d:56:cc:ca:dc:a5:50:0b:d6:6b:68: cc:bb:45:c8:3e:b5:97:1b:06:13:49:88:e1:ad:14: c9:2d:22:43:91:33:98:b4:d1:4a:1e:55:2f:1b:cf: ef:8d:c7:dc:13:8f:a4:75:13:2b:95:6c:0d:7e:75: 57:72:c8:11:19:47:a8:8f:5c:7c:c6:d4:b4:16:95: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:D9:B4:C8:BA:1E:E8:F4:24:85:48:E4:2E:1A:A1:22:7E:2C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b0668f6-6b51-33e2-b5e6-0d918b241ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:c8:fe:3d:53:97:aa:a3:79:e7:76:77:0c:be:22:d1:90: 87:18:f5:2e:c5:b6:bb:92:96:b2:0f:aa:a6:85:b2:df:b2:3a: f2:4c:eb:d3:de:7b:be:26:46:f9:12:ca:e3:da:6b:1c:1e:4a: cf:0b:8c:1a:ce:0c:6a:d7:07:51:9c:b1:c8:19:84:ec:a9:30: 4f:89:f9:a8:a7:08:9a:9d:d7:28:9e:4e:18:89:4e:41:b1:49: ed:09:8f:2e:9d:52:0d:c7:9c:0c:c5:e9:01:08:a4:ba:31:e5: cc:3e:38:7f:cf:f8:8e:79:be:d6:a3:1d:9c:75:2f:d4:fa:80: 13:18:66:76:73:ec:81:22:21:ea:a9:72:41:b2:d3:94:ca:86: 64:8b:63:a9:46:60:0e:f0:7c:2f:01:f1:f7:e3:49:1f:e2:33: 7d:9f:c1:b5:73:fd:ac:50:ab:c1:0d:5a:89:58:28:27:f3:7e: 90:ef:9e:59:6a:b6:0b:3d:6c:a3:47:78:63:aa:db:77:99:7d: 12:31:7e:79:29:ca:48:f0:4c:23:7e:3b:c3:8f:38:36:7e:8a: ea:ee:b1:cc:40:4f:c1:01:90:1a:f4:53:f0:bc:0e:45:59:b0: b3:f9:40:59:72:49:91:e3:da:5b:f9:c9:f0:46:99:fb:cd:af: cb:b7:ad:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMm4EXd9eoO87I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjJkNzg4ZjAtNGY2ZC00MGQzLWJjZjUtOGIwZTkwYjA0YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfaBndcsh3PkJBFe8LMWljM/i+aTB9CObfCf ogNP1SXWccTnzuMhG4bwm4en2HQYnI8WYjS+8v/PHJDI1qBa8xO8g/H/M6mLm31M D4fpZKYjN8w4oZsD/Vgir1vsnoouE1izxir7JQfDphWT1qayrRtncNgXWU++0KxN 4XVcsOowQH5UMQ8lTHGJuQQvGnVBpVamynPzckwS/mdXin3cZjTtIah1QUriW/sf +4hU3Guv0ubXbHRdLVbMytylUAvWa2jMu0XIPrWXGwYTSYjhrRTJLSJDkTOYtNFK HlUvG8/vjcfcE4+kdRMrlWwNfnVXcsgRGUeoj1x8xtS0FpU4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGN2bTIuh7o9CSFSOQuGqEifizOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IwNjY4ZjYtNmI1MS0z M2UyLWI1ZTYtMGQ5MThiMjQxY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsNCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbiyP49U5eqo3nndncMviLRkIcY9S7FtruSlrIPqqaFst+yOvJM69Pe e74mRvkSyuPaaxweSs8LjBrODGrXB1GcscgZhOypME+J+ainCJqd1yieThiJTkGx Se0Jjy6dUg3HnAzF6QEIpLox5cw+OH/P+I55vtajHZx1L9T6gBMYZnZz7IEiIeqp ckGy05TKhmSLY6lGYA7wfC8B8ffjSR/iM32fwbVz/axQq8ENWolYKCfzfpDvnllq tgs9bKNHeGOq23eZfRIxfnkpykjwTCN+O8OPODZ+iuruscxAT8EBkBr0U/C8DkVZ sLP5QFlySZHj2lv5yfBGmfvNr8u3rZY= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:48 2025 by rpki-client