$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f3cac2f-520a-3a82-b569-52594d848a97.roa File: 7f3cac2f-520a-3a82-b569-52594d848a97.roa (raw, json) Hash identifier: 3nSz/B4//U0s9Wj+Svm6vQQ8JrPrXVjjo03QuK+XOXc= Subject key identifier: 63:F9:31:27:A5:96:7C:D5:33:57:78:9F:67:58:37:03:8E:3C:47:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F9673DB70905139B3C0280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f3cac2f-520a-3a82-b569-52594d848a97.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.201.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:67:3d:b7:09:05:13:9b:3c:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1c7ad27d-ad80-4254-bd34-689906745a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:b4:f9:6e:16:73:59:77:3d:30:63:c1:f6: 25:09:5a:c9:de:da:cd:e6:dd:6b:19:aa:24:be:45: 45:b5:29:c3:1c:8b:68:b5:f6:b6:7a:10:39:07:3a: 3f:b7:5a:f3:28:8e:ce:79:14:5f:09:c9:d6:2d:a4: d3:98:4e:da:42:ec:33:dd:1e:b0:2b:ed:12:75:2f: 4f:da:c1:70:12:0b:bf:c9:d6:fc:9d:62:47:76:70: a9:59:a3:0f:1e:ea:ad:37:a5:2e:f6:da:80:f5:17: f1:06:ad:65:45:57:fe:5a:49:53:d7:d1:3d:f7:e7: 19:b2:27:11:43:c3:64:76:c9:dd:6a:d9:97:cd:34: 36:df:5f:08:3e:08:44:c3:41:96:8c:a1:7d:8f:d0: 9a:f1:55:5d:8e:96:e1:ca:98:30:8e:55:9c:8a:0f: 3a:68:f1:77:b6:1a:a1:77:63:ab:be:b3:06:21:a6: 4c:74:8b:34:3e:41:d0:1d:21:59:5c:d9:db:c8:c7: b8:9b:a9:a4:8a:2b:2a:86:24:81:c1:b4:38:6f:10: fc:13:96:a0:63:d4:05:a7:c6:f3:bc:bb:7a:66:89: b6:2b:ea:cc:2b:15:6c:cf:9d:ab:6d:8b:3e:07:e0: 1a:71:5c:0f:2f:aa:35:2d:fc:42:97:c5:65:6e:a9: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F9:31:27:A5:96:7C:D5:33:57:78:9F:67:58:37:03:8E:3C:47:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f3cac2f-520a-3a82-b569-52594d848a97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:66:cb:91:cd:30:da:4d:2f:2b:2e:ec:73:b8:e0:0b:ca:c1: d6:11:4f:f9:db:4a:41:53:87:3b:03:45:c8:20:03:1b:f2:35: ff:b9:0f:98:1d:4c:9d:93:b2:0f:e1:ca:cf:f8:8e:58:8b:38: 0f:31:28:79:c0:06:c2:34:08:6f:33:29:0e:e2:7a:34:14:0a: da:80:5b:37:37:c3:ee:cf:9a:7a:f3:5a:52:f2:00:bd:63:9f: d2:c9:4e:cc:f0:0f:59:ea:3f:5f:07:9e:39:e9:ef:e7:db:4a: 01:c9:46:49:7e:25:f5:64:f7:81:1c:f0:42:de:ea:6e:0b:e4: df:e0:f7:c4:83:21:f9:69:5e:57:b9:b2:1f:ba:9d:07:55:d7: 3c:2c:c0:84:d4:30:2f:f6:0d:ae:bd:c6:62:85:14:68:36:df: 76:e0:15:0b:cc:67:d1:f3:4f:11:a9:ae:71:c6:28:ac:8c:02: c2:ca:00:80:d2:58:22:45:5a:7c:83:44:93:5b:cf:65:a5:34: 7c:87:9a:4d:aa:74:53:38:37:b3:36:b5:c9:c9:71:5d:be:e4: 6b:66:63:24:84:f8:14:0e:72:ba:37:a6:a8:c5:a1:3f:02:a6: 64:67:28:5e:f2:ed:9b:72:c0:26:2f:67:7f:f2:4e:98:75:6e: 1b:64:f0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Wc9twkFE5s8AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWM3YWQyN2QtYWQ4MC00MjU0LWJkMzQtNjg5OTA2NzQ1YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0K0+W4Wc1l3PTBjwfYlCVrJ3trN5t1rGaok vkVFtSnDHItotfa2ehA5Bzo/t1rzKI7OeRRfCcnWLaTTmE7aQuwz3R6wK+0SdS9P 2sFwEgu/ydb8nWJHdnCpWaMPHuqtN6Uu9tqA9RfxBq1lRVf+WklT19E99+cZsicR Q8NkdsndatmXzTQ2318IPghEw0GWjKF9j9Ca8VVdjpbhypgwjlWcig86aPF3thqh d2OrvrMGIaZMdIs0PkHQHSFZXNnbyMe4m6mkiisqhiSBwbQ4bxD8E5agY9QFp8bz vLt6Zom2K+rMKxVsz52rbYs+B+AacVwPL6o1LfxCl8VlbqlZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP5MSellnzVM1d4n2dYNwOOPEc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2YzY2FjMmYtNTIwYS0z YTgyLWI1NjktNTI1OTRkODQ4YTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBmy5HNMNpNLysu7HO44AvKwdYRT/nbSkFThzsDRcggAxvyNf+5D5gd TJ2Tsg/hys/4jliLOA8xKHnABsI0CG8zKQ7iejQUCtqAWzc3w+7PmnrzWlLyAL1j n9LJTszwD1nqP18Hnjnp7+fbSgHJRkl+JfVk94Ec8ELe6m4L5N/g98SDIflpXle5 sh+6nQdV1zwswITUMC/2Da69xmKFFGg233bgFQvMZ9HzTxGprnHGKKyMAsLKAIDS WCJFWnyDRJNbz2WlNHyHmk2qdFM4N7M2tcnJcV2+5GtmYySE+BQOcro3pqjFoT8C pmRnKF7y7ZtywCYvZ3/yTph1bhtk8Fs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:18:32 2025 by rpki-client