$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538288ea-f57a-3050-ac8e-c659bbeb9933.roa File: 538288ea-f57a-3050-ac8e-c659bbeb9933.roa (raw, json) Hash identifier: NXhFbh+5Sp7fE1xBLjpsx+gohEcwe86RSnKavwo+LFA= Subject key identifier: B5:9E:FB:8F:FE:FA:82:10:C5:6E:ED:8B:BA:18:C8:09:37:6E:86:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323604808EF6654705C500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538288ea-f57a-3050-ac8e-c659bbeb9933.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.250.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:36:04:80:8e:f6:65:47:05:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7b459354-a96f-40b0-8f9e-4072164c7dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:96:05:45:aa:38:3b:21:eb:8d:53:5d:03: 9f:3a:8e:cb:9a:b0:74:02:3a:bd:af:80:40:a4:bb: 34:15:51:e8:f8:e1:7b:74:2f:f4:1b:2f:8b:c9:7f: bd:9e:32:e0:ca:0f:45:96:94:16:28:71:a1:66:a0: a0:52:a3:ae:3e:1c:8c:2e:73:d3:63:be:7b:47:5a: 9c:5a:01:f7:9d:8b:b1:06:cb:ea:e8:0c:58:95:46: 48:2f:2d:24:03:db:ce:0b:01:1b:03:b6:91:e6:b1: f4:3d:f3:97:ee:81:00:34:59:e5:c4:05:1b:dd:d6: 8e:03:42:91:8f:0f:bb:fa:ca:bd:4c:81:2f:64:5e: 9a:ac:88:05:d1:e0:b2:7c:d1:7b:02:f9:4e:ae:09: 10:81:09:71:77:5d:bf:3a:d7:97:78:56:58:f8:d8: 31:a7:4d:5a:a0:ba:45:71:7c:ed:97:ad:bd:fb:0b: 01:f3:22:c2:e7:db:07:7b:85:4a:9f:f2:4a:c8:33: 33:7a:c0:4a:06:ed:c6:fb:e0:e5:66:d3:d5:c7:6a: 11:4a:37:e7:a2:96:1f:29:b6:e1:6d:e8:90:6e:f0: c6:80:be:a1:6b:72:a4:f0:ab:15:50:3f:bb:df:4d: cb:93:79:67:6e:bb:4c:6f:51:dd:88:8e:3a:56:21: b1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9E:FB:8F:FE:FA:82:10:C5:6E:ED:8B:BA:18:C8:09:37:6E:86:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538288ea-f57a-3050-ac8e-c659bbeb9933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:49:1e:88:a3:b2:30:1a:fe:2e:ef:dc:bf:d3:5d:f9:d3:8a: 08:32:92:6a:b7:89:94:d2:ca:d3:e7:25:63:c9:2c:58:05:d4: b0:87:9a:5f:9b:fc:07:33:00:de:de:e3:c2:ec:69:fc:fe:5a: b7:dc:69:9f:a9:2e:4c:f2:14:c6:2f:ac:1c:ed:cf:d5:a4:71: 05:ce:02:b9:f9:7d:15:9d:05:1d:eb:af:93:81:82:d9:1d:99: 79:db:e5:d3:b8:c0:1f:37:9c:a4:f1:e7:28:a5:62:d1:bc:01: c9:c2:e5:d8:4c:91:07:e7:77:a9:52:dc:b7:60:3b:a8:ce:d2: 9f:88:8c:93:2d:a4:95:ca:69:3a:0c:01:bf:35:31:8c:12:19: be:7f:50:8f:87:e1:b2:05:6c:18:b3:1e:2a:9c:4d:b4:80:86: ad:d7:00:b1:8e:95:ea:39:ce:46:44:15:a2:4e:3f:e8:c9:4d: 9a:d1:55:08:8d:86:54:ed:8b:71:b0:55:ba:e2:65:46:b4:49: 22:10:ea:10:0b:8f:89:68:23:2d:e5:fc:b6:17:20:69:36:87: 77:87:14:14:18:41:4d:b3:21:6f:09:ee:cd:2a:51:8b:90:22: 50:0e:98:ab:1e:83:12:8d:91:95:e6:49:3a:21:b4:0a:a1:ec: b9:09:57:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjYEgI72ZUcFxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2I0NTkzNTQtYTk2Zi00MGIwLThmOWUtNDA3MjE2NGM3ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsyWBUWqODsh641TXQOfOo7LmrB0Ajq9r4BA pLs0FVHo+OF7dC/0Gy+LyX+9njLgyg9FlpQWKHGhZqCgUqOuPhyMLnPTY757R1qc WgH3nYuxBsvq6AxYlUZILy0kA9vOCwEbA7aR5rH0PfOX7oEANFnlxAUb3daOA0KR jw+7+sq9TIEvZF6arIgF0eCyfNF7AvlOrgkQgQlxd12/OteXeFZY+Ngxp01aoLpF cXztl629+wsB8yLC59sHe4VKn/JKyDMzesBKBu3G++DlZtPVx2oRSjfnopYfKbbh beiQbvDGgL6ha3Kk8KsVUD+7303Lk3lnbrtMb1HdiI46ViGxIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWe+4/++oIQxW7ti7oYyAk3boaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM4Mjg4ZWEtZjU3YS0z MDUwLWFjOGUtYzY1OWJiZWI5OTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZJHoijsjAa/i7v3L/TXfnTiggykmq3iZTSytPnJWPJLFgF1LCHml+b /AczAN7e48Lsafz+WrfcaZ+pLkzyFMYvrBztz9WkcQXOArn5fRWdBR3rr5OBgtkd mXnb5dO4wB83nKTx5yilYtG8AcnC5dhMkQfnd6lS3LdgO6jO0p+IjJMtpJXKaToM Ab81MYwSGb5/UI+H4bIFbBizHiqcTbSAhq3XALGOleo5zkZEFaJOP+jJTZrRVQiN hlTti3GwVbriZUa0SSIQ6hALj4loIy3l/LYXIGk2h3eHFBQYQU2zIW8J7s0qUYuQ IlAOmKsegxKNkZXmSTohtAqh7LkJV3I= -----END CERTIFICATE-----Generated at Tue Jun 3 06:44:09 2025 by rpki-client