$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c22a09-e977-3c72-a040-2c4a0f110f78.roa File: 42c22a09-e977-3c72-a040-2c4a0f110f78.roa (raw, json) Hash identifier: 3+/9/LoVLkNT8FGrCJmhgkSN/oNzN24hsUGONkUjusM= Subject key identifier: D3:5C:8E:D8:2B:A1:21:94:69:FE:1C:7F:54:3C:63:0E:B9:08:71:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06C37A46B601C3CC247E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c22a09-e977-3c72-a040-2c4a0f110f78.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.63.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:c3:7a:46:b6:01:c3:cc:24:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=72ce57ab-f789-4e6b-b21d-82d78686979e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:46:33:b0:20:bb:be:47:a2:ac:d7:46:59: 11:97:a3:15:cd:61:66:e3:9f:14:d7:cb:89:63:ac: 9b:ae:cf:2e:2b:3e:95:58:02:e4:47:9b:5c:23:11: 2d:07:57:a5:29:6d:ea:c8:8b:37:1a:b4:35:fb:18: 00:c9:5e:ae:71:ba:3c:c9:26:f6:46:36:8e:4c:55: bf:a7:29:b4:0b:f5:3b:1d:03:f5:22:af:e5:f4:5c: c1:fc:4e:73:d5:ae:3e:3f:25:05:f8:23:ec:58:62: c7:ed:77:8b:b9:48:2b:e2:e4:5c:ed:10:3b:f8:bd: 5a:9a:52:ac:86:38:05:36:b3:85:d1:02:c4:65:9b: 87:c6:cf:93:25:b8:6b:74:ce:d4:5f:a6:fe:df:ef: cd:b2:20:fd:14:55:05:4d:40:77:b2:2f:9d:a5:cc: 52:85:0b:ef:62:ee:1e:34:80:c6:44:b6:c8:61:1a: c5:8c:f7:de:62:04:34:dc:70:f4:11:aa:0a:d6:0f: 3a:72:99:68:9d:17:11:c0:3d:20:25:b2:0a:f2:e8: ed:23:9c:71:3b:72:be:0f:34:98:c8:03:0c:1e:ca: 1a:12:5a:8a:3c:0a:ce:28:9f:67:bc:80:86:a7:0e: 93:74:9b:57:85:14:68:54:9e:9e:44:7e:87:0e:25: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5C:8E:D8:2B:A1:21:94:69:FE:1C:7F:54:3C:63:0E:B9:08:71:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c22a09-e977-3c72-a040-2c4a0f110f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.63.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:29:48:38:62:e3:2d:82:7b:e7:91:ea:0a:d8:60:d2:22:6e: 12:d0:f7:fb:19:37:80:05:4b:d0:4f:c3:f8:ca:59:73:90:02: 60:f2:de:44:c5:a0:6b:da:78:f2:c3:46:af:b7:e0:de:54:53: 9f:8d:ef:ee:ea:a7:7b:18:9e:d5:91:40:d1:0d:e2:53:b2:1c: ac:07:9e:e0:ba:78:22:31:5c:89:bd:fd:13:5a:9b:57:4f:7b: 26:ef:a8:84:a6:a9:72:a0:41:24:e8:2a:d0:24:2c:8b:3f:0e: a2:6f:50:bb:47:65:84:ab:b0:4e:17:e4:5e:d3:66:4e:e4:8e: 46:c2:22:52:de:d3:16:5a:8c:46:4b:b4:e7:a9:76:a1:45:8e: 6a:00:99:81:a8:3e:90:b6:41:01:90:d4:71:f0:b4:a4:dc:4b: 6e:fe:6e:91:2e:0c:06:be:e4:b8:d9:5a:5d:33:d3:5e:cf:a1: 0a:51:aa:3a:9a:80:f7:95:45:26:47:de:b3:12:80:19:19:68: b4:1a:d2:6b:fb:cd:21:d6:e9:ad:2b:ce:e5:38:ce:0a:ba:cc: 1e:65:c9:b4:37:40:c7:20:ad:09:e6:97:dc:e1:a8:55:78:13: 2a:4b:62:e4:32:49:16:9e:17:4a:93:a5:fc:13:f5:75:e0:8c: 70:2e:8c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBsN6RrYBw8wkfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NzJjZTU3YWItZjc4OS00ZTZiLWIyMWQtODJkNzg2ODY5NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvJGM7Agu75HoqzXRlkRl6MVzWFm458U18uJ Y6ybrs8uKz6VWALkR5tcIxEtB1elKW3qyIs3GrQ1+xgAyV6ucbo8ySb2RjaOTFW/ pym0C/U7HQP1Iq/l9FzB/E5z1a4+PyUF+CPsWGLH7XeLuUgr4uRc7RA7+L1amlKs hjgFNrOF0QLEZZuHxs+TJbhrdM7UX6b+3+/NsiD9FFUFTUB3si+dpcxShQvvYu4e NIDGRLbIYRrFjPfeYgQ03HD0EaoK1g86cplonRcRwD0gJbIK8ujtI5xxO3K+DzSY yAMMHsoaElqKPArOKJ9nvICGpw6TdJtXhRRoVJ6eRH6HDiUUqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNcjtgroSGUaf4cf1Q8Yw65CHGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJjMjJhMDktZTk3Ny0z YzcyLWEwNDAtMmM0YTBmMTEwZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYj8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQpSDhi4y2Ce+eR6grYYNIibhLQ9/sZN4AFS9BPw/jKWXOQAmDy3kTF oGvaePLDRq+34N5UU5+N7+7qp3sYntWRQNEN4lOyHKwHnuC6eCIxXIm9/RNam1dP eybvqISmqXKgQSToKtAkLIs/DqJvULtHZYSrsE4X5F7TZk7kjkbCIlLe0xZajEZL tOepdqFFjmoAmYGoPpC2QQGQ1HHwtKTcS27+bpEuDAa+5LjZWl0z017PoQpRqjqa gPeVRSZH3rMSgBkZaLQa0mv7zSHW6a0rzuU4zgq6zB5lybQ3QMcgrQnml9zhqFV4 EypLYuQySRaeF0qTpfwT9XXgjHAujL4= -----END CERTIFICATE-----Generated at Tue Jun 3 05:03:44 2025 by rpki-client