$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa File: 3c625f84-b529-345d-8f4a-aca2b3d15d50.roa (raw, json) Hash identifier: ahnsip6fp9zocFAZLwuuiqvxJypARAxjr8hALdeC16Q= Subject key identifier: D9:1E:73:37:8F:CD:83:70:65:E9:EA:49:A6:C5:25:C7:FE:9D:07:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1FCCED6677065FB4A6F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.47.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:fc:ce:d6:67:70:65:fb:4a:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=7b17d264-d40a-44fc-b191-d799fd6f53c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:d3:af:6a:37:e4:2f:1e:33:f8:d3:e8:e7: a8:27:86:bc:4e:b0:32:1d:16:67:1c:8b:37:ac:ba: 6f:ee:22:34:60:2c:1b:4b:f0:74:c0:2f:75:bb:48: e6:9d:18:b2:81:e0:ae:a8:1f:7f:e5:19:cf:18:83: 8c:a6:b2:39:03:9f:bf:70:42:8e:56:13:6a:29:15: f4:4b:01:3c:5a:48:25:48:4c:cf:a6:d4:bb:3c:b6: a4:5c:24:49:d5:66:67:33:81:92:89:e7:54:c8:05: 6d:b0:2a:56:0b:80:c8:25:7d:d7:93:db:b1:51:b9: 0d:26:3b:25:b8:4e:ea:d8:30:2b:52:55:a2:96:5c: ad:cb:78:9f:24:79:f9:28:b3:b7:0b:32:84:45:89: 40:f1:3c:24:fb:d1:30:76:68:89:38:00:6d:33:05: f4:17:c8:b0:51:9e:9b:f1:37:d7:9c:c0:af:f4:b8: 4c:8f:00:e9:77:3c:6c:bc:da:47:9e:d8:cd:78:95: ec:97:17:25:7d:b3:c5:34:06:80:d4:12:33:ff:0c: d9:05:af:ca:5a:e3:7b:09:54:2d:28:78:ce:4b:fa: 06:c2:5c:ac:a2:84:43:78:81:0d:72:af:43:01:c1: 7b:ea:ac:46:bb:87:a9:a2:0c:72:b0:25:36:9e:9f: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1E:73:37:8F:CD:83:70:65:E9:EA:49:A6:C5:25:C7:FE:9D:07:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e8:93:34:0d:4a:32:b1:12:99:95:8f:37:83:49:93:84:25: 1e:85:29:a0:17:cd:29:da:37:10:7b:2e:7e:6a:f5:0b:07:2b: e7:e4:7d:93:e1:2a:9d:b4:9f:72:c1:eb:4c:cf:59:97:d4:22: a2:60:36:88:3d:75:30:94:f4:7c:78:70:29:a7:b7:e6:7a:58: 57:8a:b7:77:48:02:b4:dc:1a:51:d1:4f:eb:86:a9:8c:d2:c3: e4:59:4f:0a:86:5c:67:78:3b:37:50:70:09:ef:9c:3e:9b:60: ef:80:10:ee:6c:46:2b:84:dc:b1:5c:14:73:64:04:07:d9:38: 9f:61:f3:99:5b:bd:70:a3:0c:5d:f6:04:53:58:41:e9:d8:00: 0b:d8:13:4f:d0:c8:60:0e:0d:ad:f7:73:eb:7a:c1:44:f6:48: d3:a6:36:ab:96:e1:4a:2e:f0:40:08:ed:ec:b4:99:87:05:dd: a8:bf:c5:fb:9f:7e:80:c6:1d:d2:11:1b:81:59:e0:d6:cd:5a: 10:04:d2:f4:ff:ea:c4:68:6b:ac:4a:71:54:3d:f3:2e:9d:b7: c4:dc:e5:9a:07:ae:0b:a2:c9:ed:e9:cd:3e:b0:cf:8e:27:d5: 67:a6:6e:fc:71:22:74:80:6d:cc:06:7f:58:b1:db:84:c8:32: d5:94:ac:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssfzO1mdwZftKbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2IxN2QyNjQtZDQwYS00NGZjLWIxOTEtZDc5OWZkNmY1M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58/Tr2o35C8eM/jT6OeoJ4a8TrAyHRZnHIs3 rLpv7iI0YCwbS/B0wC91u0jmnRiygeCuqB9/5RnPGIOMprI5A5+/cEKOVhNqKRX0 SwE8WkglSEzPptS7PLakXCRJ1WZnM4GSiedUyAVtsCpWC4DIJX3Xk9uxUbkNJjsl uE7q2DArUlWillyty3ifJHn5KLO3CzKERYlA8Twk+9EwdmiJOABtMwX0F8iwUZ6b 8TfXnMCv9LhMjwDpdzxsvNpHntjNeJXslxclfbPFNAaA1BIz/wzZBa/KWuN7CVQt KHjOS/oGwlysooRDeIENcq9DAcF76qxGu4epogxysCU2np8pKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkeczePzYNwZenqSabFJcf+nQcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M2MjVmODQtYjUyOS0z NDVkLThmNGEtYWNhMmIzZDE1ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYi+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7okzQNSjKxEpmVjzeDSZOEJR6FKaAXzSnaNxB7Ln5q9QsHK+fkfZPh Kp20n3LB60zPWZfUIqJgNog9dTCU9Hx4cCmnt+Z6WFeKt3dIArTcGlHRT+uGqYzS w+RZTwqGXGd4OzdQcAnvnD6bYO+AEO5sRiuE3LFcFHNkBAfZOJ9h85lbvXCjDF32 BFNYQenYAAvYE0/QyGAODa33c+t6wUT2SNOmNquW4Uou8EAI7ey0mYcF3ai/xfuf foDGHdIRG4FZ4NbNWhAE0vT/6sRoa6xKcVQ98y6dt8Tc5ZoHrguiye3pzT6wz44n 1WembvxxInSAbcwGf1ix24TIMtWUrAk= -----END CERTIFICATE-----Generated at Mon Apr 7 09:33:42 2025 by rpki-client