$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d5e5e2-a4a2-37a6-8fa7-be9b017e4c7c.roa File: 42d5e5e2-a4a2-37a6-8fa7-be9b017e4c7c.roa (raw, json) Hash identifier: dXg6VK97+dJNEKKxY5oTMwPehdWtZjGd8b2yPhMS2ZA= Subject key identifier: 16:28:81:25:7E:E3:6D:7C:25:CD:89:D1:6F:03:CA:20:AE:9B:2D:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F96B655AF9321EA3DBCB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d5e5e2-a4a2-37a6-8fa7-be9b017e4c7c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.40.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:6b:65:5a:f9:32:1e:a3:db:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ad6457d3-035f-46ed-bc7e-37ecd7220fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:d9:06:62:5f:bc:68:7f:b7:db:99:e8:ad: 24:74:76:85:7b:88:1e:a2:ba:9b:bd:e3:05:ac:ea: 6a:91:ce:9a:45:2a:d0:74:3d:bc:ba:69:ba:33:33: 8c:3f:8a:5d:b1:1a:ae:9b:a6:12:13:68:57:6a:dd: ba:2b:da:f2:16:c0:67:0c:6d:f3:70:d3:a1:d2:75: 56:cd:0a:a2:10:57:80:8a:2e:b5:11:82:3c:93:fc: 8b:c7:61:d9:91:26:7f:16:0c:f8:0e:ef:da:19:28: 30:2d:40:0c:84:73:53:e5:42:53:e2:18:0e:5f:33: 5d:36:77:49:84:bd:3a:42:76:3a:7a:41:56:a3:69: 34:59:ac:7a:1a:75:61:0c:a3:40:72:1c:b0:35:5a: 5b:06:aa:4a:b4:1c:a6:66:01:dd:9b:de:ae:25:97: 85:45:62:f2:cb:60:0f:1c:62:47:13:a3:e2:a4:11: af:a2:8d:fc:ee:e7:cf:f0:b5:db:c2:ef:4f:2d:0a: 8b:7a:0c:f4:52:63:e9:f2:e4:a7:83:37:4f:e5:51: 76:98:42:6e:3a:5f:d1:4b:28:bd:4c:12:42:36:c3: 29:91:e4:ef:33:a5:c1:0c:c8:d4:f4:c8:6b:bd:b1: a7:2f:3a:15:3f:e5:19:7f:51:a1:a0:3d:42:64:2f: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:81:25:7E:E3:6D:7C:25:CD:89:D1:6F:03:CA:20:AE:9B:2D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d5e5e2-a4a2-37a6-8fa7-be9b017e4c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:36:af:a8:08:d9:3a:df:46:1b:12:9a:29:b2:61:83:34:a8: dd:3d:e7:09:ad:98:80:9c:ec:9b:0a:28:f2:06:90:fb:5d:85: 1c:49:ce:9c:9a:cc:a8:1c:25:14:f0:dd:70:a1:15:fd:14:9f: 29:2b:6f:24:2e:18:1e:47:e8:58:f9:cd:71:9f:65:08:02:41: 25:d2:49:12:d6:84:d2:ef:65:0f:65:c9:89:56:90:39:e7:73: 70:73:84:35:8e:27:14:b6:4a:b2:d7:98:a4:58:c2:85:e0:d2: d9:36:7e:55:75:cc:26:e9:8d:60:71:22:d3:54:df:db:bc:bd: 30:de:79:7b:07:54:dd:ad:fe:80:0a:c2:c3:0a:91:51:af:83: c7:46:77:bd:15:04:e8:6a:10:2f:02:7c:8c:58:bc:5f:01:30: f2:3d:ed:36:61:5c:46:1e:b0:dc:7a:f9:d3:46:8b:fb:04:a6: 67:ea:02:99:24:36:63:8c:ad:1f:a3:5e:7f:cd:57:d3:54:f5: f9:b1:b3:40:12:18:50:76:2f:70:ca:c5:54:5c:6a:69:a0:a1: 88:cd:26:20:7b:b6:62:09:0a:cc:40:ea:e2:7c:48:0a:12:a7: 28:7f:b7:4b:19:b6:e7:dd:5a:6e:8a:ba:40:98:5d:6b:e2:ac: 74:7c:7a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+WtlWvkyHqPby4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWQ2NDU3ZDMtMDM1Zi00NmVkLWJjN2UtMzdlY2Q3MjIwZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mTZBmJfvGh/t9uZ6K0kdHaFe4georqbveMF rOpqkc6aRSrQdD28umm6MzOMP4pdsRqum6YSE2hXat26K9ryFsBnDG3zcNOh0nVW zQqiEFeAii61EYI8k/yLx2HZkSZ/Fgz4Du/aGSgwLUAMhHNT5UJT4hgOXzNdNndJ hL06QnY6ekFWo2k0Wax6GnVhDKNAchywNVpbBqpKtBymZgHdm96uJZeFRWLyy2AP HGJHE6PipBGvoo387ufP8LXbwu9PLQqLegz0UmPp8uSngzdP5VF2mEJuOl/RSyi9 TBJCNsMpkeTvM6XBDMjU9MhrvbGnLzoVP+UZf1GhoD1CZC+EoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYogSV+4218Jc2J0W8DyiCumy1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJkNWU1ZTItYTRhMi0z N2E2LThmYTctYmU5YjAxN2U0YzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg2r6gI2TrfRhsSmimyYYM0qN095wmtmICc7JsKKPIGkPtdhRxJzpya zKgcJRTw3XChFf0UnykrbyQuGB5H6Fj5zXGfZQgCQSXSSRLWhNLvZQ9lyYlWkDnn c3BzhDWOJxS2SrLXmKRYwoXg0tk2flV1zCbpjWBxItNU39u8vTDeeXsHVN2t/oAK wsMKkVGvg8dGd70VBOhqEC8CfIxYvF8BMPI97TZhXEYesNx6+dNGi/sEpmfqApkk NmOMrR+jXn/NV9NU9fmxs0ASGFB2L3DKxVRcammgoYjNJiB7tmIJCsxA6uJ8SAoS pyh/t0sZtufdWm6KukCYXWvirHR8ehE= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:00 2025 by rpki-client