$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf01ea-b1cc-30aa-b790-1d6b11c2d633.roa File: 5ddf01ea-b1cc-30aa-b790-1d6b11c2d633.roa (raw, json) Hash identifier: rPICDnTDOcql+qljG9LGj58VWWKmRsREtMAhnoIEsqM= Subject key identifier: 2A:38:E6:9E:25:A5:60:AC:B1:E1:13:D2:64:F1:B4:D6:EC:1E:6D:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43117FBA6C66ED77C6AFE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf01ea-b1cc-30aa-b790-1d6b11c2d633.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.198.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:17:fb:a6:c6:6e:d7:7c:6a:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=398ca190-fa80-4b1c-b236-7da302ec46ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:31:c7:0e:7e:dd:8b:df:8f:61:b5:90:19: 62:5d:1c:a5:cc:fd:05:9c:2d:3a:a6:c6:b6:b3:0e: d0:b3:6e:fe:9d:4b:65:a2:f5:e6:1b:78:bc:59:84: c4:b2:4b:5e:b9:f8:4f:1a:f7:e2:57:31:64:6d:62: 1e:48:3c:70:eb:18:90:e8:ec:02:49:87:6a:ad:97: 70:3b:ff:3a:35:2b:a0:85:26:84:e3:22:23:8b:21: 09:a7:85:8b:06:d1:65:9c:72:e5:71:79:3a:4a:da: 15:87:14:66:fa:c9:0e:96:9d:1a:09:e0:92:4e:0e: 88:a6:e2:e7:06:ee:47:c2:1c:85:06:df:22:dd:84: d0:24:41:1b:09:35:92:15:de:e2:85:8a:b6:93:bf: 5e:41:e5:11:a4:cc:25:15:f4:b7:f2:c2:b5:b1:26: 1e:39:e6:c1:e5:50:e9:09:6d:91:7c:98:33:29:f7: 21:e3:66:cb:52:de:3b:c9:23:ae:ac:ed:c6:53:8a: 82:c4:14:25:50:8e:68:34:7a:e3:d3:c1:fd:e1:40: a9:03:93:82:5b:fa:70:64:13:e2:ab:04:94:46:10: 3d:2a:33:03:8e:f7:9b:9a:9a:aa:1a:a4:83:5a:d7: 2c:02:92:50:c0:01:58:08:9f:27:4e:67:29:fd:0b: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:38:E6:9E:25:A5:60:AC:B1:E1:13:D2:64:F1:B4:D6:EC:1E:6D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ddf01ea-b1cc-30aa-b790-1d6b11c2d633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.198.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ee:e2:50:93:03:a4:9e:27:d3:d8:43:9b:2a:80:c8:b6:3c: 64:ab:14:33:89:30:9b:d1:fb:bd:b2:3b:60:cc:11:5d:9a:cf: c5:ff:9c:b1:1f:55:c8:c1:63:8e:99:0f:1d:fb:74:23:9f:c3: 1d:26:e4:e7:1c:29:23:d4:58:2a:9e:08:54:ec:f1:37:74:c5: 50:4a:83:5b:d0:5d:47:0a:ba:51:e3:89:c5:c4:8c:56:2b:ea: 94:fd:92:ec:b8:ce:8e:5d:f9:79:17:6f:ea:35:a0:15:e7:11: 5f:aa:6a:6a:4b:a6:52:28:fa:99:0a:a6:57:bc:9d:b0:4f:af: 8d:a7:0c:14:32:f1:d6:67:e2:18:cf:17:ac:06:49:68:3a:f8: e5:fc:a3:19:fb:05:d2:16:f5:af:10:af:1f:b8:99:1b:d5:b3: 3a:42:0c:e6:cc:57:9b:dc:d0:14:ec:ce:3d:7d:97:9f:49:b2: 3a:13:02:dd:25:78:72:2b:08:bb:98:c4:f6:bc:9e:44:e2:1a: 1f:c0:51:f5:bb:b0:37:80:f6:39:ee:2d:bd:0b:0a:fa:06:50: 08:ae:c1:9e:da:ad:87:04:40:8c:3e:4a:74:6f:82:06:cc:87: db:98:ae:dc:5a:6d:6c:d8:f0:f2:21:5d:4d:2d:2e:23:45:06: 47:c4:76:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMRf7psZu13xq/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Mzk4Y2ExOTAtZmE4MC00YjFjLWIyMzYtN2RhMzAyZWM0NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Mxxw5+3Yvfj2G1kBliXRylzP0FnC06psa2 sw7Qs27+nUtlovXmG3i8WYTEskteufhPGvfiVzFkbWIeSDxw6xiQ6OwCSYdqrZdw O/86NSughSaE4yIjiyEJp4WLBtFlnHLlcXk6StoVhxRm+skOlp0aCeCSTg6IpuLn Bu5HwhyFBt8i3YTQJEEbCTWSFd7ihYq2k79eQeURpMwlFfS38sK1sSYeOebB5VDp CW2RfJgzKfch42bLUt47ySOurO3GU4qCxBQlUI5oNHrj08H94UCpA5OCW/pwZBPi qwSURhA9KjMDjvebmpqqGqSDWtcsApJQwAFYCJ8nTmcp/QuBQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo45p4lpWCsseET0mTxtNbsHm0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRkZjAxZWEtYjFjYy0z MGFhLWI3OTAtMWQ2YjExYzJkNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATu4lCTA6SeJ9PYQ5sqgMi2PGSrFDOJMJvR+72yO2DMEV2az8X/nLEf VcjBY46ZDx37dCOfwx0m5OccKSPUWCqeCFTs8Td0xVBKg1vQXUcKulHjicXEjFYr 6pT9kuy4zo5d+XkXb+o1oBXnEV+qampLplIo+pkKple8nbBPr42nDBQy8dZn4hjP F6wGSWg6+OX8oxn7BdIW9a8Qrx+4mRvVszpCDObMV5vc0BTszj19l59JsjoTAt0l eHIrCLuYxPa8nkTiGh/AUfW7sDeA9jnuLb0LCvoGUAiuwZ7arYcEQIw+SnRvggbM h9uYrtxabWzY8PIhXU0tLiNFBkfEdtQ= -----END CERTIFICATE-----Generated at Tue Jun 3 06:39:16 2025 by rpki-client