$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4851ccac-8de0-3a91-b73d-1951ff710e97.roa File: 4851ccac-8de0-3a91-b73d-1951ff710e97.roa (raw, json) Hash identifier: UJDDvkEImfMiNQ8sdXX4dSI3456ce2OZev4F02+Jl6o= Subject key identifier: 64:67:C6:EC:DB:65:35:D1:C2:11:9D:81:83:D4:ED:A3:43:55:FC:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB157BB525FC46506937800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4851ccac-8de0-3a91-b73d-1951ff710e97.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.220.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:57:bb:52:5f:c4:65:06:93:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3e691219-83aa-4152-acdd-9d7428c35ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:ab:38:c2:63:3e:08:b7:a7:7a:31:53:c1: fc:71:de:e2:c9:20:64:19:ae:2f:21:1c:f3:27:0c: 9d:73:81:22:54:5f:cd:45:dc:1e:8c:7a:27:20:0a: e6:ba:92:e2:63:a2:31:18:0a:8e:7b:ed:22:7f:7f: 7e:f1:92:1b:26:e2:80:9f:81:46:90:08:7c:cc:4c: 8b:8f:05:08:c6:28:77:28:f6:00:df:aa:2d:40:ac: f4:de:c3:ce:51:0b:97:e6:e4:ea:62:d5:cf:7c:82: fa:d8:0f:68:41:8d:e9:b4:7a:5a:de:90:94:6f:e0: b5:76:57:9b:67:4e:24:00:48:78:e6:1a:16:6e:e0: 2d:5e:c0:ba:8f:19:da:5d:c4:ab:82:dc:fa:89:91: de:12:1c:51:ae:5e:6c:2a:d8:e6:c6:62:5b:e3:22: 17:67:a0:6e:91:bd:0a:71:fb:d5:c7:b4:90:c1:9e: a0:0b:f3:fe:a8:d0:8f:3c:62:d6:f8:8c:43:74:fb: 52:7d:b6:b0:19:99:9d:cd:a9:07:c7:63:d8:1c:37: 7c:3a:0a:0b:1e:38:d0:1a:65:aa:b9:a8:1a:48:db: a3:7b:29:07:dd:26:4d:1a:69:d8:79:4d:dd:7c:ca: a2:ca:c8:b1:bd:98:7b:e0:53:e6:99:cd:b1:37:bc: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:C6:EC:DB:65:35:D1:C2:11:9D:81:83:D4:ED:A3:43:55:FC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4851ccac-8de0-3a91-b73d-1951ff710e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:5b:b4:9e:84:a6:06:7a:66:a8:6f:b1:68:02:4b:0b:82:9a: 64:26:95:66:c2:7b:fb:f0:a2:90:7f:cf:0f:c2:5c:d6:1f:a3: bb:c4:e4:1b:c6:db:c5:d4:d5:6d:e6:a3:b3:56:39:f5:05:29: f1:f8:42:0f:f4:87:70:33:57:51:df:2f:a9:b9:33:16:11:ad: b1:83:54:aa:3b:9a:87:f1:8b:73:a3:d5:7d:d0:ad:b4:e7:f4: fa:57:13:c3:8f:9b:aa:0a:7a:af:00:38:12:0c:91:c4:ad:46: ef:2b:b0:cd:32:6b:4e:f8:9a:4d:0f:8d:dd:59:7d:6e:d3:48: 19:78:0c:f2:ea:4b:22:7c:cc:14:94:43:cf:7c:a0:db:46:24: e2:6d:59:0c:0c:5e:3d:de:b4:98:86:b8:0f:01:a6:85:20:6f: 79:16:c2:f3:7f:9e:01:27:d2:50:5a:b9:16:2e:28:51:31:26: 1c:ee:5e:9f:68:5b:54:7b:32:83:bb:9c:62:52:c2:04:aa:31: 6f:6b:83:40:ae:2b:be:32:be:5f:6d:37:48:c3:45:44:5f:1f: 27:91:61:c3:36:93:e9:ab:ba:56:c6:98:cd:85:e5:4c:c5:b4: 3d:1c:55:4a:fb:7a:d2:53:60:c2:d5:64:ca:46:e3:e0:45:d2: fc:79:98:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssVe7Ul/EZQaTeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2U2OTEyMTktODNhYS00MTUyLWFjZGQtOWQ3NDI4YzM1ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6urOMJjPgi3p3oxU8H8cd7iySBkGa4vIRzz Jwydc4EiVF/NRdwejHonIArmupLiY6IxGAqOe+0if39+8ZIbJuKAn4FGkAh8zEyL jwUIxih3KPYA36otQKz03sPOUQuX5uTqYtXPfIL62A9oQY3ptHpa3pCUb+C1dleb Z04kAEh45hoWbuAtXsC6jxnaXcSrgtz6iZHeEhxRrl5sKtjmxmJb4yIXZ6Bukb0K cfvVx7SQwZ6gC/P+qNCPPGLW+IxDdPtSfbawGZmdzakHx2PYHDd8OgoLHjjQGmWq uagaSNujeykH3SZNGmnYeU3dfMqiysixvZh74FPmmc2xN7yYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRnxuzbZTXRwhGdgYPU7aNDVfxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg1MWNjYWMtOGRlMC0z YTkxLWI3M2QtMTk1MWZmNzEwZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJbtJ6EpgZ6ZqhvsWgCSwuCmmQmlWbCe/vwopB/zw/CXNYfo7vE5BvG 28XU1W3mo7NWOfUFKfH4Qg/0h3AzV1HfL6m5MxYRrbGDVKo7mofxi3Oj1X3QrbTn 9PpXE8OPm6oKeq8AOBIMkcStRu8rsM0ya074mk0Pjd1ZfW7TSBl4DPLqSyJ8zBSU Q898oNtGJOJtWQwMXj3etJiGuA8BpoUgb3kWwvN/ngEn0lBauRYuKFExJhzuXp9o W1R7MoO7nGJSwgSqMW9rg0CuK74yvl9tN0jDRURfHyeRYcM2k+mrulbGmM2F5UzF tD0cVUr7etJTYMLVZMpG4+BF0vx5mM0= -----END CERTIFICATE-----Generated at Mon Apr 7 18:42:53 2025 by rpki-client