$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48801bae-6526-3cc2-b764-68efb4a319fe.roa File: 48801bae-6526-3cc2-b764-68efb4a319fe.roa (raw, json) Hash identifier: V5y7XYUHTPyyAc2XrWAnYgP/iwDC1Yvug9xkXpc7v/o= Subject key identifier: 86:BE:70:E9:08:80:3F:8F:DA:99:E1:32:48:89:54:16:69:53:BD:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430D630980AD988FCF18780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48801bae-6526-3cc2-b764-68efb4a319fe.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.209.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:d6:30:98:0a:d9:88:fc:f1:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d821dd67-be48-465e-9254-1615bc01982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:aa:d8:87:05:e0:0e:4c:11:25:5e:57:e5:cd: 03:29:57:21:d7:6d:cd:44:f8:79:18:90:72:35:ee: f5:fb:0b:c0:c4:13:3b:e9:fa:a0:1d:63:79:cf:2d: b9:1b:d0:ad:a2:ac:53:b7:15:1c:73:80:ee:f1:97: 63:1a:95:e5:9e:05:3d:75:cf:95:05:e3:d4:4d:34: 75:54:9c:87:cf:9c:6d:84:70:96:2e:37:a0:e6:16: 1c:2b:8b:1a:7c:fe:19:a6:65:46:9a:3f:00:80:24: f2:7e:4c:aa:db:93:5a:30:f1:a2:2a:6d:bb:a0:16: 04:53:fd:7b:30:54:ba:43:0e:47:cf:e3:df:b6:ee: ce:76:34:af:06:79:e3:fa:ac:7c:13:2e:98:56:4f: 6b:62:5b:4d:52:52:d4:12:64:a6:0f:4e:bf:3b:fd: 3b:ab:5e:59:71:02:4d:46:e5:53:4b:1b:0c:16:c9: 52:d6:56:50:cf:a8:f6:a4:0c:a3:6c:1e:d9:91:0a: 04:8a:f0:3c:23:3d:cb:b9:e8:3e:f6:26:08:f0:fd: 94:e5:48:f4:e0:f7:7a:e2:ff:ec:82:ff:db:86:88: f1:4e:aa:e9:80:ec:31:68:9a:fc:47:cf:d7:90:8e: 8b:cf:72:c4:2c:30:58:43:b9:02:97:8a:51:c0:54: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BE:70:E9:08:80:3F:8F:DA:99:E1:32:48:89:54:16:69:53:BD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48801bae-6526-3cc2-b764-68efb4a319fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:4f:2b:dc:84:6e:bc:22:b5:3f:ab:a9:20:b7:7e:01:41:5d: e6:8b:c8:7d:d1:2e:b9:60:44:f8:57:29:47:bb:42:c6:1c:34: 68:07:fa:e8:23:ef:f3:d8:2d:c0:1a:2b:08:58:f4:30:4b:6c: 72:95:b9:5e:b2:e0:c1:0d:91:b3:54:f3:93:38:c6:98:a8:06: 8e:bb:4c:54:9e:b4:9e:a5:d0:77:70:30:42:88:c3:31:8f:88: ee:ae:e4:3f:a1:7d:58:9e:1f:f1:19:dc:46:b5:3d:07:d9:70: 52:10:46:fc:24:7d:30:84:a9:27:c0:58:02:d4:d9:19:54:eb: f3:9f:7f:b7:e6:bf:ba:10:28:74:07:df:85:d1:82:7a:2a:72: e1:b9:98:be:a2:9f:48:9d:26:8d:5c:f1:79:36:0d:e9:37:c4: 96:eb:aa:dc:3a:ee:aa:9f:c1:ac:41:69:4f:fb:8a:90:85:06: c4:c4:22:1f:04:de:5d:1f:80:a9:59:b7:b5:20:af:9e:67:c5: bc:79:a8:31:94:e4:7f:b3:ce:a5:74:f0:bf:f8:4a:e6:f9:9a: 0f:c6:d7:60:db:88:4f:57:9c:ee:ee:56:b1:41:4f:d8:44:ee: 1c:22:1b:51:0a:6f:6f:ad:1f:47:33:39:bc:53:2c:e4:e6:65: d7:b7:50:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMNYwmArZiPzxh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDgyMWRkNjctYmU0OC00NjVlLTkyNTQtMTYxNWJjMDE5ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KrYhwXgDkwRJV5X5c0DKVch123NRPh5GJBy Ne71+wvAxBM76fqgHWN5zy25G9CtoqxTtxUcc4Du8ZdjGpXlngU9dc+VBePUTTR1 VJyHz5xthHCWLjeg5hYcK4safP4ZpmVGmj8AgCTyfkyq25NaMPGiKm27oBYEU/17 MFS6Qw5Hz+Pftu7OdjSvBnnj+qx8Ey6YVk9rYltNUlLUEmSmD06/O/07q15ZcQJN RuVTSxsMFslS1lZQz6j2pAyjbB7ZkQoEivA8Iz3Lueg+9iYI8P2U5Uj04Pd64v/s gv/bhojxTqrpgOwxaJr8R8/XkI6Lz3LELDBYQ7kCl4pRwFS8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa+cOkIgD+P2pnhMkiJVBZpU72SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg4MDFiYWUtNjUyNi0z Y2MyLWI3NjQtNjhlZmI0YTMxOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNPK9yEbrwitT+rqSC3fgFBXeaLyH3RLrlgRPhXKUe7QsYcNGgH+ugj 7/PYLcAaKwhY9DBLbHKVuV6y4MENkbNU85M4xpioBo67TFSetJ6l0HdwMEKIwzGP iO6u5D+hfVieH/EZ3Ea1PQfZcFIQRvwkfTCEqSfAWALU2RlU6/Off7fmv7oQKHQH 34XRgnoqcuG5mL6in0idJo1c8Xk2Dek3xJbrqtw67qqfwaxBaU/7ipCFBsTEIh8E 3l0fgKlZt7Ugr55nxbx5qDGU5H+zzqV08L/4Sub5mg/G12DbiE9XnO7uVrFBT9hE 7hwiG1EKb2+tH0czObxTLOTmZde3UGE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:45:57 2025 by rpki-client