$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cfddb5-a9a1-34cf-a464-60dcf1af8c61.roa File: 60cfddb5-a9a1-34cf-a464-60dcf1af8c61.roa (raw, json) Hash identifier: tvE/HVEBpiiiv/t30Qiszs7octZHDDUG3wRl66GSttQ= Subject key identifier: C0:52:B0:10:FB:E3:09:41:CA:85:D8:08:35:59:0F:21:27:BD:2B:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB02C50F8D69D6D0AA18400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cfddb5-a9a1-34cf-a464-60dcf1af8c61.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.42.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:2c:50:f8:d6:9d:6d:0a:a1:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=cad74d51-65f5-41ed-b2ca-32a5b3b2a404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:24:7d:f7:47:bd:e5:f7:85:95:d6:52:29: e0:e5:d1:91:76:b9:c8:96:9d:2b:3d:2c:c4:55:11: d5:9a:29:f2:f7:63:4c:19:7d:82:53:cd:b4:a6:50: 16:94:3a:74:cb:7d:f5:9f:2a:60:7e:68:0e:2f:c9: 49:5b:95:a3:06:58:11:1f:01:c6:fb:fc:55:7f:2e: 1c:f1:b5:ad:54:37:eb:80:e4:7c:26:cf:f1:68:ee: 10:d3:d2:fb:b9:0c:43:0b:2b:78:0d:06:10:33:ef: 19:82:84:89:cc:4d:a6:d2:72:83:a0:3f:2e:4b:38: 71:bf:55:fc:64:8b:dc:e8:97:d4:d1:e4:22:59:26: 4e:d1:1a:d6:2f:c9:44:76:5e:30:d2:53:9c:b8:2f: 59:08:72:c8:38:d4:d8:69:46:73:43:84:7c:79:ac: a9:08:07:fb:a8:bc:db:e5:64:2f:1e:ae:1d:dd:1f: b4:d6:e5:63:00:5a:5e:8b:81:29:1f:bf:9b:fc:11: b6:35:32:03:44:6f:12:54:f9:02:27:7c:c6:ef:0b: 26:21:d6:19:63:09:10:da:17:42:dc:a7:a6:1e:d8: 03:96:0b:5a:ea:31:50:24:40:cf:24:ce:dc:70:67: 59:c5:f9:8e:f1:87:c4:00:91:90:64:03:cc:72:58: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:B0:10:FB:E3:09:41:CA:85:D8:08:35:59:0F:21:27:BD:2B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cfddb5-a9a1-34cf-a464-60dcf1af8c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:91:14:46:97:5a:0f:07:cb:85:59:36:59:07:5c:0c:dc:15: 7d:75:00:e5:4f:0f:82:df:24:d0:22:fd:fd:51:d2:0a:74:16: a1:c3:2c:52:f2:c6:e7:74:60:7d:46:fc:63:94:21:57:2b:85: 3d:45:3c:65:f8:25:78:fb:de:ec:2f:11:ad:70:8e:b5:21:1d: 64:79:01:fa:5b:86:be:1a:8d:6a:f7:7b:76:33:70:d5:78:c5: 39:62:30:66:b4:ba:1a:92:30:4d:99:f4:0d:bc:69:22:7b:0a: a1:73:6d:1c:a7:bb:35:b2:ee:ac:f0:0d:ea:9f:1e:ce:a6:1c: 11:ba:4b:8c:5a:4b:b7:f3:b9:1f:8f:2a:90:4f:44:1b:c4:b3: 97:b4:df:29:50:32:e5:89:31:e7:e8:f1:d2:90:d6:d8:ea:c8: 8a:38:5c:e1:55:ac:1a:63:fe:41:b9:c1:ec:79:5a:87:5c:d1: fb:9b:33:7f:53:05:29:1a:ff:5e:13:31:79:1f:bc:e6:ec:f0: 76:f2:25:c4:12:ee:bd:61:f1:9d:e7:9b:c1:06:ab:94:1d:d1: 32:dc:15:87:ab:ed:dc:91:fb:f8:e5:f1:17:2d:ed:29:b2:68: 4e:e5:d3:5f:de:27:52:30:d5:89:9e:fc:94:7d:a4:d5:79:56: df:84:8a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssCxQ+NadbQqhhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2FkNzRkNTEtNjVmNS00MWVkLWIyY2EtMzJhNWIzYjJhNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz4kffdHveX3hZXWUing5dGRdrnIlp0rPSzE VRHVminy92NMGX2CU820plAWlDp0y331nypgfmgOL8lJW5WjBlgRHwHG+/xVfy4c 8bWtVDfrgOR8Js/xaO4Q09L7uQxDCyt4DQYQM+8ZgoSJzE2m0nKDoD8uSzhxv1X8 ZIvc6JfU0eQiWSZO0RrWL8lEdl4w0lOcuC9ZCHLIONTYaUZzQ4R8eaypCAf7qLzb 5WQvHq4d3R+01uVjAFpei4EpH7+b/BG2NTIDRG8SVPkCJ3zG7wsmIdYZYwkQ2hdC 3KemHtgDlgta6jFQJEDPJM7ccGdZxfmO8YfEAJGQZAPMcliBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBSsBD74wlByoXYCDVZDyEnvStTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBjZmRkYjUtYTlhMS0z NGNmLWE0NjQtNjBkY2YxYWY4YzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYir0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICRFEaXWg8Hy4VZNlkHXAzcFX11AOVPD4LfJNAi/f1R0gp0FqHDLFLy xud0YH1G/GOUIVcrhT1FPGX4JXj73uwvEa1wjrUhHWR5Afpbhr4ajWr3e3YzcNV4 xTliMGa0uhqSME2Z9A28aSJ7CqFzbRynuzWy7qzwDeqfHs6mHBG6S4xaS7fzuR+P KpBPRBvEs5e03ylQMuWJMefo8dKQ1tjqyIo4XOFVrBpj/kG5wex5Wodc0fubM39T BSka/14TMXkfvObs8HbyJcQS7r1h8Z3nm8EGq5Qd0TLcFYer7dyR+/jl8Rct7Smy aE7l01/eJ1Iw1Yme/JR9pNV5Vt+Einw= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:05 2025 by rpki-client