$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641dda43-2222-3804-9b66-d675d679fcf4.roa File: 641dda43-2222-3804-9b66-d675d679fcf4.roa (raw, json) Hash identifier: kE3NgmDYZD7ccOuOHx2Tw1AmbUoXwAmDzkaHJt+iLkY= Subject key identifier: 25:18:7E:70:F9:9F:B0:2F:FC:75:5F:BC:0C:C1:72:10:7A:9F:4B:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7CA0DDDA19E990D844D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641dda43-2222-3804-9b66-d675d679fcf4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:ca:0d:dd:a1:9e:99:0d:84:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=18f0444f-ab37-47ce-9b67-567f7c296af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:41:93:7e:7b:3f:2c:ad:ec:ee:5d:1f:73: ec:c1:7d:9d:74:a9:5f:d3:43:24:ca:a0:6a:4c:84: a6:36:a8:02:3b:c7:1e:60:36:df:f3:2f:fa:57:0e: ef:d8:c2:ab:23:0a:74:41:28:c8:ab:9c:62:c9:5c: eb:37:56:f1:39:70:66:fd:46:87:53:3b:60:c8:4e: 22:23:84:a0:d9:5f:25:0c:f4:30:63:4f:67:b2:26: 21:88:3f:42:ee:14:48:c4:07:01:b0:73:ce:56:1b: a9:e5:32:e5:81:4e:3b:f1:7a:61:d8:e2:41:f6:28: 7e:e9:1b:84:98:e2:bc:1a:3c:37:00:f5:c9:af:10: 47:e5:5f:65:17:18:38:e9:64:12:71:f5:02:c7:a7: c5:69:8b:26:5e:e0:ce:82:df:b5:81:c6:4d:c4:c2: ff:27:e7:1e:e7:d5:cb:79:6c:3b:4a:b3:08:cb:ea: 8a:0d:31:0d:0c:dd:38:11:df:b4:14:c8:dd:0b:52: 3a:fc:0b:a8:46:7f:74:5f:95:f8:23:d0:b7:ae:5b: c3:7d:c3:a8:02:ea:7c:5d:63:82:21:51:10:77:0d: 6e:98:fa:78:52:2e:1a:22:e6:22:ec:3f:70:b2:e6: f1:cb:e1:10:2b:61:3e:71:46:86:c1:49:5f:24:b5: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:7E:70:F9:9F:B0:2F:FC:75:5F:BC:0C:C1:72:10:7A:9F:4B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641dda43-2222-3804-9b66-d675d679fcf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:be:b9:f5:43:39:01:df:58:fa:5e:48:65:56:12:b4:82:4f: a6:7d:cd:6d:ce:84:fb:a8:3a:e1:81:2c:88:cf:a9:c3:b8:c3: 63:b3:e5:8d:08:7d:a6:fd:bf:80:e6:80:48:25:7e:ae:63:2c: e4:55:86:bc:95:ad:5e:85:6c:9a:1c:e9:d8:3e:7e:d3:86:4d: 2c:a1:ed:3d:b1:04:39:56:55:06:73:e8:a8:16:44:f1:b9:ac: 98:d9:53:5d:be:78:6c:96:8a:04:60:f6:c7:53:23:66:fa:8e: 0e:73:30:d8:3d:f4:de:79:7b:41:6f:27:a4:5d:e1:6b:70:25: f9:98:36:7e:ec:93:ee:8b:82:41:27:9a:aa:f0:51:34:fc:27: b6:0e:65:ab:ed:20:ff:93:7f:c4:52:23:74:04:c1:96:ed:08: 21:08:a1:6b:bb:78:9e:7b:c0:95:df:57:53:6d:34:cc:f8:d1: 9d:83:71:65:ab:16:6d:9e:fe:9d:b5:f8:c5:27:55:2b:51:d3: e2:7e:c7:4a:a5:38:36:3b:d3:a1:0d:db:f7:10:5a:a4:fc:ad: ea:69:0e:e1:af:ed:64:fb:0b:b1:f3:62:57:29:c9:5d:e1:5f: 51:a5:0c:aa:81:b7:e7:7a:bb:26:ce:60:7e:5b:30:99:10:4c: f3:84:7b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj098oN3aGemQ2ETUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MThmMDQ0NGYtYWIzNy00N2NlLTliNjctNTY3ZjdjMjk2YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVpBk357Pyyt7O5dH3PswX2ddKlf00MkyqBq TISmNqgCO8ceYDbf8y/6Vw7v2MKrIwp0QSjIq5xiyVzrN1bxOXBm/UaHUztgyE4i I4Sg2V8lDPQwY09nsiYhiD9C7hRIxAcBsHPOVhup5TLlgU478Xph2OJB9ih+6RuE mOK8Gjw3APXJrxBH5V9lFxg46WQScfUCx6fFaYsmXuDOgt+1gcZNxML/J+ce59XL eWw7SrMIy+qKDTENDN04Ed+0FMjdC1I6/AuoRn90X5X4I9C3rlvDfcOoAup8XWOC IVEQdw1umPp4Ui4aIuYi7D9wsubxy+EQK2E+cUaGwUlfJLUETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUYfnD5n7Av/HVfvAzBchB6n0tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQxZGRhNDMtMjIyMi0z ODA0LTliNjYtZDY3NWQ2NzlmY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6+ufVDOQHfWPpeSGVWErSCT6Z9zW3OhPuoOuGBLIjPqcO4w2Oz5Y0I fab9v4DmgEglfq5jLORVhryVrV6FbJoc6dg+ftOGTSyh7T2xBDlWVQZz6KgWRPG5 rJjZU12+eGyWigRg9sdTI2b6jg5zMNg99N55e0FvJ6Rd4WtwJfmYNn7sk+6LgkEn mqrwUTT8J7YOZavtIP+Tf8RSI3QEwZbtCCEIoWu7eJ57wJXfV1NtNMz40Z2DcWWr Fm2e/p21+MUnVStR0+J+x0qlODY706EN2/cQWqT8reppDuGv7WT7C7HzYlcpyV3h X1GlDKqBt+d6uybOYH5bMJkQTPOEe7M= -----END CERTIFICATE-----Generated at Mon Apr 7 06:33:33 2025 by rpki-client