$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa File: 47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa (raw, json) Hash identifier: j0SJnOjGpiRDPgM1kBLd9MoWl4q/NmrtQwtJJJIh1SI= Subject key identifier: 5A:08:F6:02:55:2E:D9:E2:94:70:06:99:EE:A4:98:5B:40:F7:F3:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB156676A67DEF95ABE4A10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.215.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:56:67:6a:67:de:f9:5a:be:4a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f467c277-3f59-4716-94f4-a23e66fdfbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:0b:9e:d6:6d:2f:b6:34:91:2f:75:92:ac: f1:c9:5d:7f:d2:25:fd:83:c0:e0:f0:95:32:1a:98: c0:2b:8e:ba:98:6f:6d:44:5c:83:08:37:81:45:cb: 40:90:e8:52:0f:da:7d:bb:20:1f:2a:4a:99:8a:48: 43:6a:02:bb:e0:34:29:63:8b:8d:7d:39:1a:81:f4: 13:d1:f4:82:77:bd:f4:13:96:66:99:e1:e0:63:ec: 2a:d9:50:ee:21:24:72:d3:0b:b1:6d:be:67:35:63: 8d:99:51:fd:26:56:7f:3f:bc:3a:62:89:00:20:38: 5a:2e:cd:61:5f:ec:b6:6c:71:47:6c:78:cb:36:4f: 7b:4f:b2:c4:52:44:e4:e1:71:8c:1a:17:e1:86:6c: 2c:4e:3d:4f:aa:96:46:e9:b3:3e:3c:09:8c:df:19: b0:44:14:e6:2e:95:c8:83:b6:08:50:6d:61:72:0c: 54:dc:9b:77:d0:b5:ea:1e:ce:62:60:90:21:44:45: b8:a9:40:54:16:be:c8:1b:a6:e5:4d:ec:8e:82:db: 27:0b:2e:ae:15:a1:db:f9:2d:69:20:dc:87:95:ab: 1f:49:01:65:16:61:a4:cf:77:d7:04:c0:ea:2d:3b: 71:4f:dd:a9:63:ff:8e:6b:b5:d7:57:91:51:fa:dc: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:08:F6:02:55:2E:D9:E2:94:70:06:99:EE:A4:98:5B:40:F7:F3:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47a3c669-93e0-3cb6-80a7-a2e5819f1d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.215.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:09:58:0e:28:31:93:11:14:ae:a7:56:70:9c:18:cc:17:1f: 71:37:55:37:c9:2d:f9:94:42:e1:f7:ad:05:64:00:41:77:df: cc:3f:f2:74:8e:c4:8d:92:94:5f:76:21:27:7c:c3:96:c9:88: 49:ca:a6:e6:9f:d8:f9:88:3f:96:b6:1f:d7:35:3e:64:89:70: 4b:bd:3c:96:cf:d9:d4:17:41:d8:47:d8:75:26:b6:67:4c:2c: 38:36:80:1f:d5:dd:50:d0:62:f2:a8:fb:ad:c6:b4:a8:5b:f5: 64:fb:45:95:dd:95:09:c5:76:b5:be:88:d0:f0:f5:81:bd:ad: d9:85:30:e3:ed:cd:da:bf:55:f7:2d:c2:26:39:03:2c:4e:b4: b4:45:6b:53:57:d7:31:aa:c3:25:5f:3e:24:5c:0e:06:78:5f: a2:90:b2:f3:3f:a4:cd:22:8f:f9:38:0a:8a:6d:70:d7:bb:77: 42:7f:c5:62:57:c6:97:bd:9c:7d:d3:81:70:5a:44:8f:61:bf: 93:76:73:63:99:ef:de:98:71:e2:b8:34:40:b7:dd:41:1b:84: 10:c7:c3:b0:f8:f1:e2:82:3c:71:d3:cb:2d:db:2a:7d:1a:23: ab:0e:c9:15:4e:90:16:fe:02:6c:4d:69:53:b8:d9:ee:66:65: 72:5f:f0:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssVZnamfe+Vq+ShAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ2N2MyNzctM2Y1OS00NzE2LTk0ZjQtYTIzZTY2ZmRmYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk80LntZtL7Y0kS91kqzxyV1/0iX9g8Dg8JUy GpjAK466mG9tRFyDCDeBRctAkOhSD9p9uyAfKkqZikhDagK74DQpY4uNfTkagfQT 0fSCd730E5ZmmeHgY+wq2VDuISRy0wuxbb5nNWONmVH9JlZ/P7w6YokAIDhaLs1h X+y2bHFHbHjLNk97T7LEUkTk4XGMGhfhhmwsTj1PqpZG6bM+PAmM3xmwRBTmLpXI g7YIUG1hcgxU3Jt30LXqHs5iYJAhREW4qUBUFr7IG6blTeyOgtsnCy6uFaHb+S1p INyHlasfSQFlFmGkz3fXBMDqLTtxT92pY/+Oa7XXV5FR+txA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoI9gJVLtnilHAGme6kmFtA9/PIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDdhM2M2NjktOTNlMC0z Y2I2LTgwYTctYTJlNTgxOWYxZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtfFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEJWA4oMZMRFK6nVnCcGMwXH3E3VTfJLfmUQuH3rQVkAEF338w/8nSO xI2SlF92ISd8w5bJiEnKpuaf2PmIP5a2H9c1PmSJcEu9PJbP2dQXQdhH2HUmtmdM LDg2gB/V3VDQYvKo+63GtKhb9WT7RZXdlQnFdrW+iNDw9YG9rdmFMOPtzdq/Vfct wiY5AyxOtLRFa1NX1zGqwyVfPiRcDgZ4X6KQsvM/pM0ij/k4CoptcNe7d0J/xWJX xpe9nH3TgXBaRI9hv5N2c2OZ796YceK4NEC33UEbhBDHw7D48eKCPHHTyy3bKn0a I6sOyRVOkBb+AmxNaVO42e5mZXJf8PM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:51 2025 by rpki-client