$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701e36-85df-3857-bf9d-497dc75d1756.roa File: 4f701e36-85df-3857-bf9d-497dc75d1756.roa (raw, json) Hash identifier: KZbCccihjbLZDENKeRXM1/EkZF4PZdYyuAs+q06IEyM= Subject key identifier: 94:47:3E:FC:7D:68:71:4D:A1:67:E7:0F:70:89:DF:5E:34:BC:C1:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0907D5BC91C3E94453EB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701e36-85df-3857-bf9d-497dc75d1756.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 98.47.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:09:07:d5:bc:91:c3:e9:44:53:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=98c57ef7-d631-421a-abac-7d0ee75179bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:14:4c:c8:98:d7:f9:34:fb:b1:ef:db:a2: bb:ca:2c:9b:24:60:d9:75:86:e5:2d:05:4e:f2:45: 00:ae:a4:5f:5a:82:f8:0e:e9:4b:6c:f7:d5:4a:57: 5b:a0:91:dd:a3:3b:88:e7:e6:c0:66:e6:77:9b:4f: 92:39:3a:ed:7c:89:96:30:ff:8b:cf:e2:3c:88:67: 69:7f:66:40:2b:62:94:fb:51:c7:4b:ab:39:b6:9d: db:c4:34:cd:d0:50:3c:97:71:53:42:b1:0a:16:ea: 76:65:dc:08:cf:45:1b:72:c9:c8:b5:b3:a4:d8:d9: 32:57:a5:e3:59:ce:6f:a2:3b:a5:50:10:94:9c:19: 58:87:a7:2d:da:0c:11:b0:57:e5:3f:b3:fd:1d:b2: a1:62:8f:f4:18:c8:46:00:7e:da:bd:13:ae:7a:59: 37:81:ae:ce:8f:59:94:f5:0e:90:10:c2:73:12:67: 1d:4d:3a:9e:65:3c:36:34:55:01:49:3a:2f:a3:43: fd:52:6d:1a:af:40:37:7c:7d:28:bc:99:a7:71:7b: 35:95:5c:be:4b:70:76:4c:d7:24:f9:23:42:0e:18: 05:7c:75:ba:ba:a1:e7:02:a9:88:77:1b:5b:78:ff: ff:cc:83:ac:30:50:85:a4:8b:8d:f9:99:20:90:0a: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:3E:FC:7D:68:71:4D:A1:67:E7:0F:70:89:DF:5E:34:BC:C1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701e36-85df-3857-bf9d-497dc75d1756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:36:ce:45:2e:64:d9:ce:8b:61:fd:56:82:fb:d9:a0:a3:68: c4:3f:ad:b9:ec:54:bc:52:54:d1:79:87:6a:06:41:9b:89:fc: 0f:86:c8:24:59:9d:37:bf:c8:9e:c2:c7:4d:8b:d9:b4:c4:b8: a5:bf:5d:34:27:2d:b9:d6:b8:d1:ba:d4:d6:f6:f6:dd:36:f1: 26:27:2c:c4:81:d1:dc:07:8b:e5:6e:0a:ff:c1:12:25:87:7a: 42:f5:9b:21:95:29:f8:22:98:74:21:19:e8:12:2c:9f:ca:0c: fd:fd:a5:f1:21:a9:21:2a:42:fa:45:19:2c:87:8a:a9:2e:0f: a6:96:83:34:65:a5:29:e4:89:c9:9f:ea:e9:40:23:a0:92:11: 86:76:14:4b:a0:2b:8e:67:af:60:0b:65:7d:a4:ff:17:b8:2b: a2:80:38:af:0f:2f:44:f1:df:3a:cb:9f:22:36:e2:26:b8:e0: 61:66:11:e5:30:81:b8:2c:01:8a:a6:fa:98:67:be:c2:ff:2c: f8:68:0d:f3:94:29:77:ff:b8:d7:71:8c:8e:82:91:da:55:7d: 7f:90:c9:4c:3d:7c:1f:93:86:4c:56:d9:78:50:1f:0d:37:9b: ad:a1:c7:d3:59:ff:f3:ec:45:0f:3e:e1:e3:89:33:cc:71:b6: 44:b3:33:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCQfVvJHD6URT6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OThjNTdlZjctZDYzMS00MjFhLWFiYWMtN2QwZWU3NTE3OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWsUTMiY1/k0+7Hv26K7yiybJGDZdYblLQVO 8kUArqRfWoL4DulLbPfVSldboJHdozuI5+bAZuZ3m0+SOTrtfImWMP+Lz+I8iGdp f2ZAK2KU+1HHS6s5tp3bxDTN0FA8l3FTQrEKFup2ZdwIz0UbcsnItbOk2NkyV6Xj Wc5vojulUBCUnBlYh6ct2gwRsFflP7P9HbKhYo/0GMhGAH7avROuelk3ga7Oj1mU 9Q6QEMJzEmcdTTqeZTw2NFUBSTovo0P9Um0ar0A3fH0ovJmncXs1lVy+S3B2TNck +SNCDhgFfHW6uqHnAqmIdxtbeP//zIOsMFCFpIuN+ZkgkArE/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRHPvx9aHFNoWfnD3CJ3140vMGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY3MDFlMzYtODVkZi0z ODU3LWJmOWQtNDk3ZGM3NWQxNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYi9CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE2zkUuZNnOi2H9VoL72aCjaMQ/rbnsVLxSVNF5h2oGQZuJ/A+GyCRZ nTe/yJ7Cx02L2bTEuKW/XTQnLbnWuNG61Nb29t028SYnLMSB0dwHi+VuCv/BEiWH ekL1myGVKfgimHQhGegSLJ/KDP39pfEhqSEqQvpFGSyHiqkuD6aWgzRlpSnkicmf 6ulAI6CSEYZ2FEugK45nr2ALZX2k/xe4K6KAOK8PL0Tx3zrLnyI24ia44GFmEeUw gbgsAYqm+phnvsL/LPhoDfOUKXf/uNdxjI6CkdpVfX+QyUw9fB+ThkxW2XhQHw03 m62hx9NZ//PsRQ8+4eOJM8xxtkSzM7Y= -----END CERTIFICATE-----Generated at Tue Jun 3 06:08:40 2025 by rpki-client