$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43596a76-6e35-3666-b422-f7cb6aa6c9b1.roa File: 43596a76-6e35-3666-b422-f7cb6aa6c9b1.roa (raw, json) Hash identifier: KeFsEV3Lcj57YA+T4+VFvumGbXAKV71XDpDMp0HpgFk= Subject key identifier: 24:CA:E7:8F:5C:6A:B6:D8:8F:E3:CF:F7:75:4E:41:3F:31:48:00:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D16584F1D825370E5F79F180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43596a76-6e35-3666-b422-f7cb6aa6c9b1.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22258 IP address blocks: 98.54.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:84:f1:d8:25:37:0e:5f:79:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=ea1e110d-bcbd-4cfc-a35d-e08616a1a963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:76:b8:7d:1c:eb:58:9c:3a:d7:30:21:29: 30:fc:16:cb:d6:4a:bf:34:84:65:8c:4d:b4:f0:9e: ab:5e:7a:1e:bc:4b:39:74:ef:1e:0f:43:61:61:9a: ea:b2:da:3e:f7:b5:63:c4:74:b9:bf:79:30:e0:ab: cf:90:50:fa:74:2e:a3:f9:6b:57:e6:d1:28:36:37: 22:b5:77:ab:1a:7c:d2:36:e8:b1:ed:36:3f:96:bf: bb:03:31:ad:13:d5:f6:19:a6:b5:e4:ac:2e:7d:80: 80:16:b0:6b:56:83:19:f9:89:a5:90:e5:84:46:e2: 8f:51:ec:bb:5c:30:b7:81:3d:0e:5f:3d:ee:14:9b: 47:c6:1e:2b:76:15:81:a8:44:d6:fe:c3:0e:c3:0f: 78:f7:1a:ae:97:24:f5:bc:1c:27:16:35:cf:b8:f8: d3:99:6c:d2:eb:b9:59:75:3c:3f:1a:b9:84:35:42: 43:c1:99:81:63:ab:c9:6d:57:04:92:7b:1f:4c:10: 05:10:78:b4:24:e3:e7:cd:6d:20:11:24:68:fd:2e: 8f:01:45:99:7b:25:5a:0f:93:85:d3:e2:c3:b4:00: 03:40:de:a4:10:90:37:a1:13:78:c0:ac:6f:d8:39: 22:7f:80:95:14:e8:ee:a0:d7:54:64:f7:2e:16:e5: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:E7:8F:5C:6A:B6:D8:8F:E3:CF:F7:75:4E:41:3F:31:48:00:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43596a76-6e35-3666-b422-f7cb6aa6c9b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.54.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7c:ae:d9:96:de:2d:ce:fe:0d:fb:b8:5e:91:9f:60:0c:05: 9f:0b:e6:e0:7b:94:d1:8c:55:f6:fd:e8:19:f5:8d:17:e8:32: 04:6e:a1:d3:ee:73:77:2e:27:63:c9:5e:05:81:67:af:9e:f4: 87:af:f6:a4:c6:50:41:7c:e6:5d:80:5b:77:3e:07:e4:83:be: 81:be:e2:16:ac:5a:4f:c9:c4:e7:96:d9:c4:a5:a9:f1:b8:eb: f9:cb:e2:3d:15:00:9f:de:94:cd:e0:d7:df:49:c6:fc:51:f8: c5:ec:f2:27:be:e7:48:a6:0a:3d:9d:14:89:93:f6:a8:a2:8b: 25:96:da:2e:56:7b:1f:43:84:28:5b:f1:ee:6a:69:bd:8a:8c: 85:38:59:7c:d5:7a:34:46:a8:dd:dd:15:a6:fe:96:ad:c7:ff: de:7d:91:7a:1d:f8:35:94:6a:9a:9b:49:22:6f:9c:7f:86:d7: 30:1e:86:77:43:e1:0c:9d:52:a1:69:ae:30:11:fd:db:08:2d: 3c:73:e1:3d:85:a3:4f:7b:b4:8a:47:9a:92:c5:de:f7:3d:e3: b9:e4:0b:1f:9f:3a:a8:50:25:59:f4:52:f1:0a:cd:1d:23:52: 25:2c:d7:4a:cb:39:c8:3d:66:a2:34:bd:8e:9a:92:6b:d3:ce: f6:5a:43:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYTx2CU3Dl958YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZWExZTExMGQtYmNiZC00Y2ZjLWEzNWQtZTA4NjE2YTFhOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnp2uH0c61icOtcwISkw/BbL1kq/NIRljE20 8J6rXnoevEs5dO8eD0NhYZrqsto+97VjxHS5v3kw4KvPkFD6dC6j+WtX5tEoNjci tXerGnzSNuix7TY/lr+7AzGtE9X2Gaa15KwufYCAFrBrVoMZ+YmlkOWERuKPUey7 XDC3gT0OXz3uFJtHxh4rdhWBqETW/sMOww949xqulyT1vBwnFjXPuPjTmWzS67lZ dTw/GrmENUJDwZmBY6vJbVcEknsfTBAFEHi0JOPnzW0gESRo/S6PAUWZeyVaD5OF 0+LDtAADQN6kEJA3oRN4wKxv2Dkif4CVFOjuoNdUZPcuFuW5fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTK549carbYj+PP93VOQT8xSAD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM1OTZhNzYtNmUzNS0z NjY2LWI0MjItZjdjYjZhYTZjOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd8rtmW3i3O/g37uF6Rn2AMBZ8L5uB7lNGMVfb96Bn1jRfoMgRuodPu c3cuJ2PJXgWBZ6+e9Iev9qTGUEF85l2AW3c+B+SDvoG+4hasWk/JxOeW2cSlqfG4 6/nL4j0VAJ/elM3g199JxvxR+MXs8ie+50imCj2dFImT9qiiiyWW2i5Wex9DhChb 8e5qab2KjIU4WXzVejRGqN3dFab+lq3H/959kXod+DWUapqbSSJvnH+G1zAehndD 4QydUqFprjAR/dsILTxz4T2Fo097tIpHmpLF3vc947nkCx+fOqhQJVn0UvEKzR0j UiUs10rLOcg9ZqI0vY6akmvTzvZaQ5I= -----END CERTIFICATE-----Generated at Tue Jun 3 07:37:34 2025 by rpki-client