$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c705cc7-9bc3-3eb1-8f0a-7d946a914c64.roa File: 3c705cc7-9bc3-3eb1-8f0a-7d946a914c64.roa (raw, json) Hash identifier: aPkic1DL6LE55sL4baJWhRHcWZshn38Qu1gJd5p0MHQ= Subject key identifier: E2:25:22:07:1E:BB:D1:B8:12:7C:E5:F0:F7:85:F9:2D:86:3F:AD:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D1BC19A5AE4065E7E480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c705cc7-9bc3-3eb1-8f0a-7d946a914c64.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.250.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d1:bc:19:a5:ae:40:65:e7:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=86f35849-78f6-482b-b2a7-cae18baadcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:34:a0:ed:b8:62:d0:95:4b:15:41:7d:cf: 64:f4:67:1e:e3:12:86:60:0c:42:ae:13:0a:ab:9f: 28:f4:99:de:ee:ce:12:52:59:45:27:9c:c8:78:22: 99:ee:93:09:90:8c:b8:2a:cd:82:d7:97:54:76:82: b0:13:8a:e8:97:dd:f5:00:e4:36:d8:62:07:38:56: 30:c5:3b:4e:92:05:5e:19:de:c6:76:ad:15:d9:92: 77:5f:47:6a:14:8c:1f:82:26:65:fe:c1:a5:5d:9c: 9a:a9:04:43:c4:59:36:f3:c2:f2:64:1d:90:65:30: ae:08:c6:5d:0b:ec:9e:a6:f1:b2:3d:08:d4:df:0d: b1:b7:a7:da:27:f8:b2:50:be:37:3a:69:77:9b:74: 26:15:4b:c3:76:03:ee:48:59:33:66:48:c9:29:2a: 1d:9c:bd:99:d9:0f:c8:ce:d5:32:46:43:ff:d6:d0: 5f:af:df:33:c4:c1:56:57:54:a8:a6:4c:23:d4:51: d8:66:9f:6b:36:54:b7:85:e1:6b:6e:dd:05:0f:b1: 07:f1:8a:4a:f4:ab:08:c6:7c:4f:b6:b6:76:d7:21: ee:c5:c7:16:e6:85:61:df:fb:63:3a:c7:9d:12:36: 39:ea:f2:c7:59:d0:79:99:c5:2d:c3:36:57:d1:d8: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:25:22:07:1E:BB:D1:B8:12:7C:E5:F0:F7:85:F9:2D:86:3F:AD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c705cc7-9bc3-3eb1-8f0a-7d946a914c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:dc:31:a1:12:13:68:2e:6e:dc:26:b6:65:50:a8:83:ac:69: 59:b0:cb:f8:4d:d3:49:06:3a:e5:8f:e7:4b:91:82:db:23:19: 32:1f:9e:3b:2e:07:a5:e7:1a:50:aa:eb:be:1e:2b:52:1e:0d: f6:97:ce:3f:b9:6e:18:f1:a8:c1:12:59:dc:a0:5b:b5:27:10: 53:d3:b8:ad:49:82:51:e1:63:20:3f:5e:84:87:b2:66:c3:ce: ac:cd:a3:1c:ec:07:47:ea:6a:97:93:75:4f:2a:0e:3c:2a:67: 34:49:23:e0:51:50:79:07:6e:40:d8:9c:1c:98:9c:af:c1:3f: 7c:bc:1f:fc:45:0e:b9:85:c6:18:90:e3:14:b7:b1:f5:99:40: 30:0b:8c:c5:6d:39:1f:ee:fa:c4:77:74:a8:51:d6:05:60:a3: 0b:31:28:fa:f9:05:95:5c:db:01:35:7c:d6:7e:cf:99:41:f1: 8f:53:84:5c:7a:10:61:e2:2b:64:7b:86:cc:cb:9a:09:74:66: f4:37:a0:fe:51:c1:85:61:cd:73:29:d0:c9:53:04:26:d8:a4: d1:ea:0f:a0:b6:71:18:fc:e1:ac:dd:f9:13:3a:f9:73:52:00: c8:90:27:32:d1:bc:57:ff:cd:db:df:29:b4:07:d0:bf:5f:15: 69:7c:c1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099G8GaWuQGXn5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ODZmMzU4NDktNzhmNi00ODJiLWIyYTctY2FlMThiYWFkY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OM0oO24YtCVSxVBfc9k9Gce4xKGYAxCrhMK q58o9Jne7s4SUllFJ5zIeCKZ7pMJkIy4Ks2C15dUdoKwE4rol931AOQ22GIHOFYw xTtOkgVeGd7Gdq0V2ZJ3X0dqFIwfgiZl/sGlXZyaqQRDxFk288LyZB2QZTCuCMZd C+yepvGyPQjU3w2xt6faJ/iyUL43Oml3m3QmFUvDdgPuSFkzZkjJKSodnL2Z2Q/I ztUyRkP/1tBfr98zxMFWV1Sopkwj1FHYZp9rNlS3heFrbt0FD7EH8YpK9KsIxnxP trZ21yHuxccW5oVh3/tjOsedEjY56vLHWdB5mcUtwzZX0dhNcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIlIgceu9G4Enzl8PeF+S2GP62aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M3MDVjYzctOWJjMy0z ZWIxLThmMGEtN2Q5NDZhOTE0YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLcMaESE2gubtwmtmVQqIOsaVmwy/hN00kGOuWP50uRgtsjGTIfnjsu B6XnGlCq674eK1IeDfaXzj+5bhjxqMESWdygW7UnEFPTuK1JglHhYyA/XoSHsmbD zqzNoxzsB0fqapeTdU8qDjwqZzRJI+BRUHkHbkDYnByYnK/BP3y8H/xFDrmFxhiQ 4xS3sfWZQDALjMVtOR/u+sR3dKhR1gVgowsxKPr5BZVc2wE1fNZ+z5lB8Y9ThFx6 EGHiK2R7hszLmgl0ZvQ3oP5RwYVhzXMp0MlTBCbYpNHqD6C2cRj84azd+RM6+XNS AMiQJzLRvFf/zdvfKbQH0L9fFWl8wec= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:26 2025 by rpki-client