$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628b9ddf-ab16-3149-b7dd-e1c81dd765a9.roa File: 628b9ddf-ab16-3149-b7dd-e1c81dd765a9.roa (raw, json) Hash identifier: YinTRiDIOS7VKxJHm17mC7t7Zy7B+kMBdCyG9f3D0oo= Subject key identifier: 3D:65:1E:CD:1D:72:BF:6C:6E:DE:95:50:0A:E7:B0:C9:9A:B5:64:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F9603005F8D8BCB347D280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628b9ddf-ab16-3149-b7dd-e1c81dd765a9.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.199.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:60:30:05:f8:d8:bc:b3:47:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a2486868-4482-4489-b1e8-80bccc5546ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:9a:90:bb:14:ac:a3:35:1a:21:5c:34:d1: c4:f6:e1:0f:fb:92:d2:47:cc:59:85:4f:08:1e:f3: 76:04:5a:e3:ad:26:c1:d5:95:a7:ae:39:43:7c:52: d5:00:10:28:26:d3:02:66:a9:ca:43:63:8f:73:69: 24:ba:0c:0d:9b:14:f7:f0:dd:67:68:22:5d:bc:35: 61:d3:8b:4b:cb:61:3c:ac:97:0d:d5:a1:f2:3e:86: 48:b2:4f:6d:91:60:84:6c:68:13:d6:a4:09:4c:8c: 55:f3:3c:e2:10:f3:e4:88:a0:0b:5d:11:64:1c:d9: 10:7a:16:2d:48:a3:60:6a:7c:65:06:e1:d3:95:ea: 5f:9d:88:6f:12:8b:3f:bf:f4:18:dd:69:d8:26:fa: 00:7c:6d:29:72:c5:9b:3b:12:88:f6:4b:55:14:09: 44:65:09:f7:d3:1c:8b:d8:cb:a7:0b:97:ac:8f:c1: a8:36:c9:55:b8:60:04:8a:5a:05:45:17:ec:a3:2b: e3:f4:df:14:23:3a:86:5e:ac:7f:ad:28:1f:96:a9: b6:5a:6d:5a:7b:9a:ef:26:db:44:89:5e:c7:d7:e5: 37:2c:5c:54:25:b7:95:a2:28:d6:0d:50:38:82:23: 5f:25:b3:86:6b:72:e8:3d:00:f5:e6:6a:50:9f:62: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:65:1E:CD:1D:72:BF:6C:6E:DE:95:50:0A:E7:B0:C9:9A:B5:64:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628b9ddf-ab16-3149-b7dd-e1c81dd765a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7b:41:20:d5:59:dd:e5:25:12:d0:96:81:29:b2:1f:a4:f3: 01:5d:6b:25:dd:a1:f9:f7:30:92:ab:b5:14:79:60:41:23:b4: f9:fa:60:96:36:fa:7e:0d:ae:71:88:a4:f6:57:96:97:0d:c9: d9:07:86:fc:5e:a0:1b:a2:f1:43:be:33:98:19:0a:ff:0b:96: 2a:69:4d:8b:5c:ee:56:6d:83:1d:2f:17:c9:09:69:83:c3:9d: 3a:e5:f7:f2:fc:d5:a5:08:9c:91:28:42:81:af:b0:f0:72:9b: 3b:ea:cc:db:d1:8a:ab:53:33:51:39:45:7c:ce:d1:d3:a0:5f: ff:c4:b5:1a:15:9b:1a:54:1b:21:a3:d1:5c:fb:6e:51:3b:4a: 94:a6:b5:a8:41:d5:e2:0e:47:64:52:1c:0d:32:a3:58:ab:f6: 11:0b:44:8d:89:2f:0d:c2:19:3f:9b:5b:03:f5:f3:aa:51:91: 91:d7:59:44:78:ac:f7:96:d1:71:7a:d2:9a:1e:22:a7:52:fe: 41:a9:55:28:30:a1:64:1e:c7:30:6f:9c:0d:cc:9c:af:04:64: 3b:42:eb:52:99:85:4a:28:e4:2d:3e:db:0f:f5:b1:96:7e:ff: 86:30:08:2a:38:20:30:d9:5a:08:97:15:f2:ff:bb:9a:5f:aa: 9a:d8:10:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+WAwBfjYvLNH0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTI0ODY4NjgtNDQ4Mi00NDg5LWIxZTgtODBiY2NjNTU0NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupGakLsUrKM1GiFcNNHE9uEP+5LSR8xZhU8I HvN2BFrjrSbB1ZWnrjlDfFLVABAoJtMCZqnKQ2OPc2kkugwNmxT38N1naCJdvDVh 04tLy2E8rJcN1aHyPoZIsk9tkWCEbGgT1qQJTIxV8zziEPPkiKALXRFkHNkQehYt SKNganxlBuHTlepfnYhvEos/v/QY3WnYJvoAfG0pcsWbOxKI9ktVFAlEZQn30xyL 2MunC5esj8GoNslVuGAEiloFRRfsoyvj9N8UIzqGXqx/rSgflqm2Wm1ae5rvJttE iV7H1+U3LFxUJbeVoijWDVA4giNfJbOGa3LoPQD15mpQn2Kd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1lHs0dcr9sbt6VUArnsMmatWRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI4YjlkZGYtYWIxNi0z MTQ5LWI3ZGQtZTFjODFkZDc2NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR7QSDVWd3lJRLQloEpsh+k8wFdayXdofn3MJKrtRR5YEEjtPn6YJY2 +n4NrnGIpPZXlpcNydkHhvxeoBui8UO+M5gZCv8LlippTYtc7lZtgx0vF8kJaYPD nTrl9/L81aUInJEoQoGvsPBymzvqzNvRiqtTM1E5RXzO0dOgX//EtRoVmxpUGyGj 0Vz7blE7SpSmtahB1eIOR2RSHA0yo1ir9hELRI2JLw3CGT+bWwP186pRkZHXWUR4 rPeW0XF60poeIqdS/kGpVSgwoWQexzBvnA3MnK8EZDtC61KZhUoo5C0+2w/1sZZ+ /4YwCCo4IDDZWgiXFfL/u5pfqprYEHk= -----END CERTIFICATE-----Generated at Sat Apr 12 15:18:56 2025 by rpki-client