$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed845a4-3ed3-3241-a95a-961dae53c217.roa File: 7ed845a4-3ed3-3241-a95a-961dae53c217.roa (raw, json) Hash identifier: xKIVeNq+54N80lBnUJGw/a1fKm/sw9b1iTX4tUBOVS0= Subject key identifier: CD:71:7B:6E:82:CD:6D:E0:52:E6:90:FD:21:3B:4E:11:53:2E:07:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C1B3D5701F90B83D5FD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed845a4-3ed3-3241-a95a-961dae53c217.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 98.239.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:1b:3d:57:01:f9:0b:83:d5:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=4fa5c1d0-c37f-42a6-a3d2-b1dc303b459d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:71:9e:54:73:04:a2:a9:19:c8:f6:7f:47: c9:51:6e:8a:b4:cd:5e:e8:96:b5:71:6c:d9:95:f3: a1:b9:23:07:62:3b:81:aa:35:58:aa:b2:9c:0b:db: 3d:7c:b2:f2:71:02:21:61:ee:0d:e8:fb:c6:da:69: 2e:a9:29:13:41:2e:0f:c2:ad:c7:89:66:5b:f9:6c: 9c:61:45:87:d1:f8:f8:cc:95:59:e9:2d:05:3f:1f: 2e:a4:3a:6e:38:26:17:d3:36:44:31:eb:24:74:fc: 87:48:e3:7d:0c:03:75:ad:89:a2:4a:6a:38:ba:1f: 26:a9:3b:c1:8b:8e:a9:e1:4d:a7:b6:0c:64:4d:99: b9:4d:f2:a5:85:f5:97:f3:43:1d:06:20:13:4c:9a: 5e:39:e8:1e:d9:ba:c8:ee:9d:cd:75:2c:fb:89:1f: ad:5f:7f:34:c8:b1:fd:22:b4:65:a5:20:53:bb:3f: 6d:81:8e:a2:a1:0c:40:38:bf:7c:2e:00:19:3c:37: 9f:c2:63:70:32:c8:c9:e1:08:69:63:71:ab:48:c2: a7:9a:45:17:06:cc:5b:46:f7:10:2e:a0:4e:db:a9: 30:03:a2:ec:70:20:64:e6:ed:7c:56:c0:73:36:37: 1f:1b:0a:57:ca:2f:a3:d6:f5:c1:6e:b6:9b:20:71: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:71:7B:6E:82:CD:6D:E0:52:E6:90:FD:21:3B:4E:11:53:2E:07:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed845a4-3ed3-3241-a95a-961dae53c217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.239.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:44:ce:c6:78:be:fb:50:25:a1:7a:33:ed:c8:81:c5:92:cd: 1e:75:e0:5f:db:2a:9b:f9:11:ec:85:05:11:f6:a8:bc:43:3f: e7:d0:1f:8b:60:2d:2e:cf:5b:4e:e1:d1:d4:5c:04:15:a9:c7: 81:da:e0:3b:39:06:24:e6:b3:d5:e4:d2:b9:e0:ed:5d:b1:37: 38:63:72:97:ee:ac:5c:dd:16:c7:4f:f7:64:d3:44:e4:cc:d2: e2:5c:db:49:b8:41:06:eb:dc:07:09:e8:1f:fb:43:af:51:b5: f2:b8:2b:8d:c2:0d:d2:df:ab:85:3a:a2:0f:67:63:33:08:b1: 00:2e:35:81:24:e8:1c:d8:2f:cb:89:49:fa:58:b1:64:90:0d: fe:43:0f:e0:0b:6c:6c:c4:d8:37:03:75:d7:5d:98:b6:50:0b: 03:21:cc:a7:33:e5:17:30:a8:85:92:a9:cb:f9:f9:14:dd:f4: e7:53:bf:f7:dc:3f:84:00:cf:be:30:f8:e0:c0:cf:b2:f9:a4: 8d:57:c2:2b:b1:8b:3c:a9:2f:6b:d2:f8:ce:20:b4:c0:5b:da: c7:20:59:f2:d4:34:13:43:81:51:38:d4:e1:71:cb:93:3d:01: 19:44:2b:13:28:36:4c:46:79:f5:b5:2f:fb:49:64:d8:c0:39: 0e:57:11:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLBs9VwH5C4PV/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NGZhNWMxZDAtYzM3Zi00MmE2LWEzZDItYjFkYzMwM2I0NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1hxnlRzBKKpGcj2f0fJUW6KtM1e6Ja1cWzZ lfOhuSMHYjuBqjVYqrKcC9s9fLLycQIhYe4N6PvG2mkuqSkTQS4Pwq3HiWZb+Wyc YUWH0fj4zJVZ6S0FPx8upDpuOCYX0zZEMeskdPyHSON9DAN1rYmiSmo4uh8mqTvB i46p4U2ntgxkTZm5TfKlhfWX80MdBiATTJpeOege2brI7p3NdSz7iR+tX380yLH9 IrRlpSBTuz9tgY6ioQxAOL98LgAZPDefwmNwMsjJ4QhpY3GrSMKnmkUXBsxbRvcQ LqBO26kwA6LscCBk5u18VsBzNjcfGwpXyi+j1vXBbrabIHGX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1xe26CzW3gUuaQ/SE7ThFTLgf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2VkODQ1YTQtM2VkMy0z MjQxLWE5NWEtOTYxZGFlNTNjMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYu8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItEzsZ4vvtQJaF6M+3IgcWSzR514F/bKpv5EeyFBRH2qLxDP+fQH4tg LS7PW07h0dRcBBWpx4Ha4Ds5BiTms9Xk0rng7V2xNzhjcpfurFzdFsdP92TTROTM 0uJc20m4QQbr3AcJ6B/7Q69RtfK4K43CDdLfq4U6og9nYzMIsQAuNYEk6BzYL8uJ SfpYsWSQDf5DD+ALbGzE2DcDddddmLZQCwMhzKcz5RcwqIWSqcv5+RTd9OdTv/fc P4QAz74w+ODAz7L5pI1XwiuxizypL2vS+M4gtMBb2scgWfLUNBNDgVE41OFxy5M9 ARlEKxMoNkxGefW1L/tJZNjAOQ5XEYU= -----END CERTIFICATE-----Generated at Mon Apr 7 09:36:11 2025 by rpki-client