$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa File: 4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa (raw, json) Hash identifier: lWUVWFaUCK9ATy1X/A1hXSf3XTgQSS7S6nVDx6Fa12k= Subject key identifier: 95:0D:5E:3B:4A:33:19:C0:9C:B8:FE:54:BD:1E:66:C6:2B:F5:C9:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8115C084546B894FDD66C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.200.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:11:5c:08:45:46:b8:94:fd:d6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=00bf42c5-e47e-4d0c-a91c-b7a63db099c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:a4:98:3f:58:7e:76:67:24:c8:d2:4e:ca: b4:2d:87:dd:d9:bf:fb:1d:ca:ef:1b:67:07:c5:c4: fa:fa:76:10:0c:fc:59:64:ff:6b:03:da:6d:09:01: 0e:31:91:5d:44:c3:e6:74:31:b0:b5:7f:e5:2e:f2: f2:99:84:12:d2:06:19:6f:9d:2f:7b:fe:4f:15:71: 5f:b1:59:b1:d0:6e:0b:ef:60:2f:20:44:70:4a:5b: dc:fe:48:d8:a6:74:78:d0:87:3a:13:a8:1c:80:4c: 0f:10:c2:09:23:b6:12:26:3e:3d:7b:34:dc:c7:15: 27:4d:37:0a:1f:ee:ae:5c:b1:00:31:27:96:c9:bf: 3e:aa:14:f8:be:2a:01:35:8e:5a:92:37:e5:ab:18: 56:d5:9c:ec:39:10:86:12:11:55:96:d4:9c:e1:03: 71:9d:25:c2:48:74:9c:20:6f:0b:58:ca:2c:32:7f: e5:5a:dc:60:f3:ba:60:de:36:4f:06:86:4f:a8:94: bc:af:e6:b0:54:95:36:4e:b6:ff:b5:a0:68:b5:57: 94:a4:72:cd:ec:ab:72:64:9a:2c:c1:bb:46:50:7e: 08:85:31:e9:68:a3:aa:57:6f:93:96:6c:33:a6:55: 00:5f:16:c2:85:0c:91:5c:76:ce:d5:7f:1f:79:b2: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0D:5E:3B:4A:33:19:C0:9C:B8:FE:54:BD:1E:66:C6:2B:F5:C9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8a:ee:ac:6b:de:d5:80:58:7d:e7:a3:4c:ad:dc:04:2e:c1: 2c:cd:44:d7:dd:ac:f5:f0:64:15:80:0b:44:a7:d8:2c:c8:89: a4:fb:e9:df:74:6f:e6:53:f8:bc:f4:5c:ac:b2:09:0a:f3:94: 2b:32:78:2a:70:9a:6d:82:c7:1b:69:04:62:f0:ff:73:48:22: ea:78:52:90:75:33:c0:08:63:bf:53:b9:b5:12:76:06:ca:4a: 0f:8c:08:f0:85:b3:67:a3:61:09:e7:f7:a7:65:88:ff:30:b7: 7f:95:c3:bc:43:1a:a2:9e:09:fa:6f:ab:86:df:97:5d:f3:b3: c0:8a:a1:05:3e:26:10:75:a0:09:a1:c0:74:0e:73:da:d4:4b: 5b:85:be:26:b2:f5:2f:94:4d:19:ea:f6:0a:d6:84:d9:85:86: 20:3b:cc:a4:09:bb:bb:5c:62:1f:32:45:63:09:a3:59:a4:4e: 84:f6:fc:a4:ca:06:02:0c:b6:4b:a9:18:84:3f:ad:2e:7e:24: 69:e9:c4:59:60:60:ad:4e:85:45:17:a7:97:a7:30:ad:34:b8: 8d:45:25:e7:b4:bc:b5:22:ba:db:13:b0:b2:58:6a:e1:51:3a: 02:9c:f1:37:18:8e:d9:19:5e:ed:f3:c4:22:5f:d1:35:bb:37: 59:2e:b4:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+BFcCEVGuJT91mwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDBiZjQyYzUtZTQ3ZS00ZDBjLWE5MWMtYjdhNjNkYjA5OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg2kmD9YfnZnJMjSTsq0LYfd2b/7HcrvG2cH xcT6+nYQDPxZZP9rA9ptCQEOMZFdRMPmdDGwtX/lLvLymYQS0gYZb50ve/5PFXFf sVmx0G4L72AvIERwSlvc/kjYpnR40Ic6E6gcgEwPEMIJI7YSJj49ezTcxxUnTTcK H+6uXLEAMSeWyb8+qhT4vioBNY5akjflqxhW1ZzsORCGEhFVltSc4QNxnSXCSHSc IG8LWMosMn/lWtxg87pg3jZPBoZPqJS8r+awVJU2Trb/taBotVeUpHLN7KtyZJos wbtGUH4IhTHpaKOqV2+TlmwzplUAXxbChQyRXHbO1X8febK6lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUNXjtKMxnAnLj+VL0eZsYr9cnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE4N2Q5MDUtNTAwYi0z YjQyLTk2YjgtYzNhYWY1NTJiZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6K7qxr3tWAWH3no0yt3AQuwSzNRNfdrPXwZBWAC0Sn2CzIiaT76d90 b+ZT+Lz0XKyyCQrzlCsyeCpwmm2CxxtpBGLw/3NIIup4UpB1M8AIY79TubUSdgbK Sg+MCPCFs2ejYQnn96dliP8wt3+Vw7xDGqKeCfpvq4bfl13zs8CKoQU+JhB1oAmh wHQOc9rUS1uFviay9S+UTRnq9grWhNmFhiA7zKQJu7tcYh8yRWMJo1mkToT2/KTK BgIMtkupGIQ/rS5+JGnpxFlgYK1OhUUXp5enMK00uI1FJee0vLUiutsTsLJYauFR OgKc8TcYjtkZXu3zxCJf0TW7N1kutNE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:41 2025 by rpki-client