$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d6a6abf-b2dc-32ba-bc72-b20c22a9f4e5.roa File: 7d6a6abf-b2dc-32ba-bc72-b20c22a9f4e5.roa (raw, json) Hash identifier: Qf6DOpFMP16go0A0eH8esmCXBVfjGwQ3qBnUVPPsW6g= Subject key identifier: 26:C8:6C:9B:E9:2C:12:C5:32:AF:2E:D0:11:C9:C4:18:B5:96:A8:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB026A75FC4BD291C9DDA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d6a6abf-b2dc-32ba-bc72-b20c22a9f4e5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.248.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:26:a7:5f:c4:bd:29:1c:9d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a6200541-3868-46e7-b821-ceedc726ff8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:8f:26:fc:6a:2e:24:08:1f:4a:a1:0f:98: e0:28:3d:ae:18:69:79:41:21:57:c5:1f:df:77:a4: 1c:8c:6b:ca:a4:91:34:3c:69:ca:56:e5:5e:c0:3a: 7d:db:15:ad:cc:a1:c4:b4:ac:38:6a:21:dd:5c:a7: 92:29:26:db:78:09:38:7b:ef:9d:8e:06:45:6a:17: 50:63:f8:da:2c:05:c7:f9:d1:6c:c0:ed:a3:05:27: 89:cf:ff:33:6f:a5:a4:97:21:99:86:54:52:36:02: 0a:1a:f7:a9:e6:08:3a:6e:7d:78:19:5d:a3:d7:c0: 7f:5c:b3:81:15:fe:7c:a3:be:78:d4:13:4a:12:b6: cf:fd:89:84:ff:ba:31:e7:c4:f3:03:d0:64:25:be: 10:37:ce:71:97:8a:69:1d:d3:4f:be:53:6c:72:2d: 90:39:ca:1f:54:04:e8:99:04:31:f0:45:8d:42:b2: e2:5c:91:0f:4e:79:aa:be:2c:c5:2f:44:e1:10:3c: 1f:4f:30:0f:e4:3b:b8:c1:e2:a9:87:e0:ad:6f:e9: c8:ad:25:59:67:53:f7:e2:70:f2:39:a5:74:36:26: c2:55:30:e3:41:46:a1:45:ba:d1:18:61:57:7e:c2: 56:5b:a3:20:be:d5:8b:20:0d:09:20:dd:ec:30:09: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C8:6C:9B:E9:2C:12:C5:32:AF:2E:D0:11:C9:C4:18:B5:96:A8:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d6a6abf-b2dc-32ba-bc72-b20c22a9f4e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:d3:9b:95:07:9b:db:f4:a3:06:e9:8f:03:de:f5:20:b8:25: 51:5b:d2:2c:db:f8:39:ac:f2:94:03:ef:da:e5:0b:c9:ee:14: 35:9e:6c:79:12:09:35:4a:b3:28:de:b0:4b:02:d2:6d:6c:18: 20:bf:9e:8e:89:89:7c:05:ce:5b:c3:51:fb:1e:aa:d0:35:e8: 7a:90:72:5c:f1:d6:b0:07:b3:3e:87:28:2b:18:37:f2:13:72: 31:17:e5:ad:33:10:9e:18:66:b5:2d:57:77:0a:00:cf:45:1e: e1:81:d1:e2:8a:30:9d:f3:d0:1c:4a:56:49:71:82:5b:c0:ed: 88:c0:b8:a5:fa:36:fb:31:ac:f4:f1:35:1d:6c:2d:33:0c:7a: b4:bd:7e:4a:3b:c3:a7:e5:0b:df:c5:02:b0:68:a1:e8:73:a4: 86:c5:e1:cd:a7:6d:ac:17:aa:37:d5:b5:c1:e7:5a:9c:8d:5a: d5:09:22:47:ca:31:35:bc:d1:7e:77:78:67:bc:b5:2f:9f:34: 20:ab:07:40:66:33:5c:d7:04:b3:69:4c:11:fb:52:f9:22:b2: 4b:ca:aa:75:b2:52:b4:85:4d:59:26:49:28:cd:e0:12:eb:b6: 9f:fb:83:c3:18:94:b2:94:ec:3d:7f:76:ad:03:ab:8e:f0:ec: 6e:ad:ae:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssCanX8S9KRyd2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTYyMDA1NDEtMzg2OC00NmU3LWI4MjEtY2VlZGM3MjZmZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJKPJvxqLiQIH0qhD5jgKD2uGGl5QSFXxR/f d6QcjGvKpJE0PGnKVuVewDp92xWtzKHEtKw4aiHdXKeSKSbbeAk4e++djgZFahdQ Y/jaLAXH+dFswO2jBSeJz/8zb6WklyGZhlRSNgIKGvep5gg6bn14GV2j18B/XLOB Ff58o7541BNKErbP/YmE/7ox58TzA9BkJb4QN85xl4ppHdNPvlNsci2QOcofVATo mQQx8EWNQrLiXJEPTnmqvizFL0ThEDwfTzAP5Du4weKph+Ctb+nIrSVZZ1P34nDy OaV0NibCVTDjQUahRbrRGGFXfsJWW6MgvtWLIA0JIN3sMAmXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbIbJvpLBLFMq8u0BHJxBi1lqhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q2YTZhYmYtYjJkYy0z MmJhLWJjNzItYjIwYzIyYTlmNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHTm5UHm9v0owbpjwPe9SC4JVFb0izb+Dms8pQD79rlC8nuFDWebHkS CTVKsyjesEsC0m1sGCC/no6JiXwFzlvDUfseqtA16HqQclzx1rAHsz6HKCsYN/IT cjEX5a0zEJ4YZrUtV3cKAM9FHuGB0eKKMJ3z0BxKVklxglvA7YjAuKX6NvsxrPTx NR1sLTMMerS9fko7w6flC9/FArBooehzpIbF4c2nbawXqjfVtcHnWpyNWtUJIkfK MTW80X53eGe8tS+fNCCrB0BmM1zXBLNpTBH7UvkiskvKqnWyUrSFTVkmSSjN4BLr tp/7g8MYlLKU7D1/dq0Dq47w7G6trpw= -----END CERTIFICATE-----Generated at Mon Apr 7 05:57:57 2025 by rpki-client