$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa File: 4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa (raw, json) Hash identifier: iejbSlCp8wKL6YfidSkzk3q+St/oSMLqcsc1DM0HOcw= Subject key identifier: C3:C0:D5:65:CE:C6:E0:C0:54:5E:71:E4:30:47:9C:AA:BE:B5:85:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F906B8C7C10E1E0657D480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.209.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:06:b8:c7:c1:0e:1e:06:57:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f0906909-5f93-4af6-b916-ec8425b58022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:7e:52:7c:6f:c0:a6:c3:78:49:40:0f:7b: 9a:6b:34:ab:8e:3a:94:55:c7:bf:3a:5c:25:06:56: a6:89:6c:b3:fd:9c:57:0d:36:05:5e:fc:ab:df:b3: 8a:7f:0c:c5:47:97:cf:77:9a:ee:20:41:49:f4:cd: 09:8f:15:03:4d:57:cb:47:4e:02:e7:db:4d:17:bb: 5f:f0:b3:4c:25:96:2d:2b:bf:05:dc:b7:1f:c7:47: 4c:47:80:3c:ce:29:e6:73:55:ec:83:ab:8e:be:a6: cc:d3:0c:85:c9:71:b7:f8:b9:ab:8d:a7:18:d7:34: 09:d0:5e:0f:66:23:02:e9:cf:2b:3d:9b:6e:2e:52: c0:79:f3:8e:c4:ba:82:8b:b9:cd:db:ac:00:50:1a: d9:18:57:32:2b:cf:19:40:f6:e7:48:11:19:c7:69: d1:4a:44:20:65:26:ae:4d:de:8f:93:f3:f1:ba:b6: 71:49:5c:bc:5e:54:e3:79:e6:39:ac:2f:54:c5:43: f4:5b:61:bb:bd:e1:1b:25:6e:10:d6:57:4b:68:23: a0:38:a2:40:60:b2:74:86:04:8d:1f:2a:2a:73:e0: e6:b4:76:b4:0d:9b:aa:23:44:54:a3:c7:d7:95:a7: ea:eb:80:2c:76:54:8a:98:11:25:f5:dc:15:ca:8b: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C0:D5:65:CE:C6:E0:C0:54:5E:71:E4:30:47:9C:AA:BE:B5:85:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:9f:fe:26:cc:49:f5:63:53:f7:e6:b1:df:72:a5:75:a5:c4: eb:c0:d7:e7:d2:96:d0:16:a2:d9:69:fe:24:ae:da:63:87:92: 30:b4:a9:46:7e:ec:bc:8f:c9:3e:12:3c:57:a6:2e:02:88:dd: 32:bb:f4:2f:62:b3:6e:73:8f:f2:86:2c:98:01:01:0f:9d:bb: ff:3b:9e:58:92:36:99:2c:1a:45:61:41:b7:bc:9b:db:99:73: 75:25:94:13:ae:19:c3:9a:1c:d6:18:cb:7b:15:d8:1a:b4:af: 37:a9:09:d9:14:64:79:9a:9c:2d:cf:51:58:01:ab:e0:be:a2: 14:07:24:4e:a2:14:20:7e:38:7f:42:f3:d7:0b:ac:de:52:18: f9:d2:26:3c:c7:00:ae:f8:68:0e:14:d6:76:11:52:9d:38:4c: 82:0d:4b:ed:64:55:73:59:17:a1:50:c9:f4:be:55:3a:08:3c: 48:6a:57:a3:13:8a:d2:a5:ec:a4:6b:b3:49:16:11:b8:e6:27: 88:83:71:1a:04:3a:00:8d:98:f3:e0:e3:41:4f:59:0c:b8:16: c4:95:32:8d:1f:da:55:46:95:24:ff:29:76:e8:d2:43:5d:86: aa:f9:e4:e3:42:d6:73:32:a8:82:c1:4c:84:63:78:b4:88:14: 61:91:1b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Qa4x8EOHgZX1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjA5MDY5MDktNWY5My00YWY2LWI5MTYtZWM4NDI1YjU4MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxx+UnxvwKbDeElAD3uaazSrjjqUVce/Olwl BlamiWyz/ZxXDTYFXvyr37OKfwzFR5fPd5ruIEFJ9M0JjxUDTVfLR04C59tNF7tf 8LNMJZYtK78F3Lcfx0dMR4A8zinmc1Xsg6uOvqbM0wyFyXG3+LmrjacY1zQJ0F4P ZiMC6c8rPZtuLlLAefOOxLqCi7nN26wAUBrZGFcyK88ZQPbnSBEZx2nRSkQgZSau Td6Pk/PxurZxSVy8XlTjeeY5rC9UxUP0W2G7veEbJW4Q1ldLaCOgOKJAYLJ0hgSN Hyoqc+DmtHa0DZuqI0RUo8fXlafq64AsdlSKmBEl9dwVyot78QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPA1WXOxuDAVF5x5DBHnKq+tYWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY3NTY4YzQtOWIyNC0z Zjg1LWFjMWItM2QzYTliYTBkNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaf/ibMSfVjU/fmsd9ypXWlxOvA1+fSltAWotlp/iSu2mOHkjC0qUZ+ 7LyPyT4SPFemLgKI3TK79C9is25zj/KGLJgBAQ+du/87nliSNpksGkVhQbe8m9uZ c3UllBOuGcOaHNYYy3sV2Bq0rzepCdkUZHmanC3PUVgBq+C+ohQHJE6iFCB+OH9C 89cLrN5SGPnSJjzHAK74aA4U1nYRUp04TIINS+1kVXNZF6FQyfS+VToIPEhqV6MT itKl7KRrs0kWEbjmJ4iDcRoEOgCNmPPg40FPWQy4FsSVMo0f2lVGlST/KXbo0kNd hqr55ONC1nMyqILBTIRjeLSIFGGRG1A= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:31 2025 by rpki-client