$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa File: 4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa (raw, json) Hash identifier: gKcSzzvri3vGO5LX7/NGTyernLbLL30jXIA/9p27rcU= Subject key identifier: 6A:F9:E3:75:EB:DE:88:8C:AA:56:EA:C4:4D:C8:5C:D6:CB:74:04:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4327B31DADD3384520EF440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.200.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:7b:31:da:dd:33:84:52:0e:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=445f47b4-307c-4df4-9dad-bd3a18299a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:71:37:0b:90:c2:cf:92:60:1a:a3:1e:e1: 09:e3:f6:88:5a:8d:60:3c:61:5a:83:29:47:a4:42: 53:15:36:fe:00:7c:df:c6:bb:2b:f8:d5:42:b1:37: 04:5b:ff:3c:89:c3:39:3d:90:63:cb:89:c1:dc:aa: 89:02:18:77:9f:cc:87:5f:d0:00:c3:7c:77:82:b4: 85:0d:7e:54:9f:e3:71:00:b2:3a:4a:0d:bd:75:cd: 85:37:41:24:a3:31:c8:0d:25:c6:7d:1b:1b:8b:19: 0f:15:37:41:18:3d:dd:4d:c6:b8:c0:ec:1c:4b:c8: 52:96:72:74:6e:86:74:58:df:8e:45:77:78:2b:e7: bd:2d:33:ab:8b:e4:f3:b9:a2:d3:82:8b:40:2f:b5: 95:bb:72:32:3e:18:4e:4b:cd:e9:c5:d4:f3:cb:4f: 2d:32:72:81:12:f2:6e:ed:df:f9:bf:65:76:23:04: e7:44:52:4b:1c:74:68:86:9f:90:1c:31:18:ca:b5: fc:8f:1b:d6:29:d9:71:31:da:18:59:16:ca:19:43: d3:8d:09:1a:6b:0d:52:a5:76:4a:2a:39:25:18:67: 77:66:d5:6d:fe:19:d2:bd:97:e2:6c:ac:9e:7b:56: 1f:0c:63:c5:96:ed:d6:d4:b3:2a:ec:00:78:5a:b9: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:E3:75:EB:DE:88:8C:AA:56:EA:C4:4D:C8:5C:D6:CB:74:04:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:e5:0d:5c:e5:cb:96:fa:25:ec:7e:0e:96:97:97:6b:49:ea: b5:d3:d9:95:3f:94:fe:a3:2f:59:8d:59:e0:75:f7:00:93:21: 29:b4:8f:d8:95:b0:69:cc:19:46:55:6a:94:7a:73:b2:37:05: f0:6e:ec:d4:51:81:ce:c6:57:bd:7c:6a:47:29:0f:94:62:b9: e5:3e:54:f2:77:e9:ec:23:d8:7d:f4:83:73:a6:41:8d:f1:17: fd:47:c6:ab:e1:d6:f7:5d:d3:2a:59:aa:e5:e2:98:7a:fc:b3: 52:48:e0:c0:a0:c1:59:2c:a8:18:50:25:e7:80:f0:d6:ac:d3: 12:e3:ac:07:63:dd:ba:85:3c:9f:be:b3:d7:16:67:76:7e:f0: f1:61:40:13:fe:6f:37:33:60:95:97:6e:0c:38:a7:4a:1d:6f: 4a:fb:fb:17:1e:a8:60:33:bf:44:8b:21:3d:2a:12:84:3c:1f: 94:51:5a:b3:1c:47:12:72:54:52:b8:bb:25:c2:7c:b3:ff:12: 18:e1:78:3c:c5:a9:69:06:a7:5c:4b:1a:c5:20:cd:d4:5b:fe: cf:7f:51:d5:47:67:1c:3a:f2:0f:99:6a:67:51:4d:30:a9:29: 79:89:25:6e:87:d7:fe:45:d0:09:48:90:c9:cc:0b:b0:fc:03: 41:d8:56:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMnsx2t0zhFIO9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDQ1ZjQ3YjQtMzA3Yy00ZGY0LTlkYWQtYmQzYTE4Mjk5YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVxxNwuQws+SYBqjHuEJ4/aIWo1gPGFagylH pEJTFTb+AHzfxrsr+NVCsTcEW/88icM5PZBjy4nB3KqJAhh3n8yHX9AAw3x3grSF DX5Un+NxALI6Sg29dc2FN0EkozHIDSXGfRsbixkPFTdBGD3dTca4wOwcS8hSlnJ0 boZ0WN+ORXd4K+e9LTOri+TzuaLTgotAL7WVu3IyPhhOS83pxdTzy08tMnKBEvJu 7d/5v2V2IwTnRFJLHHRohp+QHDEYyrX8jxvWKdlxMdoYWRbKGUPTjQkaaw1SpXZK KjklGGd3ZtVt/hnSvZfibKyee1YfDGPFlu3W1LMq7AB4WrlBgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr543Xr3oiMqlbqxE3IXNbLdAQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI1YTFjOWQtNzgxNy0z ZGMyLWI2ZDgtMmM1YThlOGRiNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3lDVzly5b6Jex+DpaXl2tJ6rXT2ZU/lP6jL1mNWeB19wCTISm0j9iV sGnMGUZVapR6c7I3BfBu7NRRgc7GV718akcpD5RiueU+VPJ36ewj2H30g3OmQY3x F/1Hxqvh1vdd0ypZquXimHr8s1JI4MCgwVksqBhQJeeA8Nas0xLjrAdj3bqFPJ++ s9cWZ3Z+8PFhQBP+bzczYJWXbgw4p0odb0r7+xceqGAzv0SLIT0qEoQ8H5RRWrMc RxJyVFK4uyXCfLP/EhjheDzFqWkGp1xLGsUgzdRb/s9/UdVHZxw68g+ZamdRTTCp KXmJJW6H1/5F0AlIkMnMC7D8A0HYVl8= -----END CERTIFICATE-----Generated at Wed Jun 4 23:23:55 2025 by rpki-client