$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8239e7d9-c3db-3193-98c5-f6f54e304a42.roa File: 8239e7d9-c3db-3193-98c5-f6f54e304a42.roa (raw, json) Hash identifier: Sv27rPUUj/lJ+jMgQbsVlPZofMCLEJ7b+MOKDgIlcYY= Subject key identifier: 9C:21:B1:C6:5B:4F:91:C8:CB:7D:99:D5:C3:A8:00:44:05:3A:E2:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431205D46F6D58E49B4D340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8239e7d9-c3db-3193-98c5-f6f54e304a42.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.201.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:20:5d:46:f6:d5:8e:49:b4:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bf10abb2-a629-47ab-978a-0299da2166ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:65:f7:87:69:f7:5c:bb:47:b6:1d:a8:bc: 76:eb:98:22:ec:f1:ca:eb:03:5c:fc:25:e5:91:65: 8c:2c:3e:50:cf:e3:f1:4c:51:42:f0:f0:39:03:19: e2:fa:0c:f5:29:c3:1c:12:75:4d:90:c8:ea:6d:27: db:70:38:68:b3:f9:cf:1a:3c:49:83:18:ce:13:9e: e5:37:27:bb:55:76:ef:32:62:a7:77:10:fc:3c:d9: 04:da:2d:a6:d7:7c:d7:83:ae:83:99:1d:7f:1a:e7: 38:7c:5c:d9:88:c9:9b:e0:1f:bf:6d:74:04:69:56: ab:82:99:8a:04:9d:4f:5a:6c:7c:7f:ce:3c:50:38: 76:0a:df:ed:7c:b3:f3:1f:41:a7:86:42:2e:2c:cd: fe:56:63:2d:7b:fc:fb:42:be:6d:c9:6f:84:2b:ba: 0f:14:0b:30:b7:69:3f:d4:c1:e5:c6:a8:8d:69:f2: 42:2b:0a:b5:2a:c3:ea:07:86:36:31:5f:ef:a5:e7: 0d:0e:92:ce:92:d1:ab:4c:41:f3:e7:29:c9:06:4d: 90:65:5c:c7:aa:a7:87:b0:b8:82:cd:dc:21:f8:f0: 1c:b1:60:70:a7:1d:97:c0:85:08:31:46:35:d0:38: 02:80:60:f7:04:16:b1:25:bd:95:4e:9f:ab:3f:bd: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:21:B1:C6:5B:4F:91:C8:CB:7D:99:D5:C3:A8:00:44:05:3A:E2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8239e7d9-c3db-3193-98c5-f6f54e304a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:c9:5e:be:04:5c:7f:08:f3:36:60:20:70:d6:2a:f0:3e:2d: 67:28:74:9e:c8:ea:a0:a5:f1:98:5b:4c:57:ea:fd:b9:90:f9: 8f:a8:27:bd:77:dd:b0:ec:2f:c8:7a:98:74:6c:79:ec:f6:72: 7c:88:0c:4f:a4:40:52:2f:c9:24:ca:6d:3b:a0:26:ef:ce:42: 41:4a:73:62:b7:58:41:9d:d5:c5:bb:7d:03:d7:c6:e9:b1:fd: 40:9b:77:cb:9f:be:c7:d6:1e:76:d3:a3:cf:1b:2e:eb:3e:cb: fd:fa:7b:30:f9:f7:56:fb:cb:40:a3:06:d6:29:ff:22:b2:da: f5:14:f4:1c:38:f1:fb:58:1a:7b:7c:33:5e:2e:94:1c:56:21: 5a:1d:52:06:17:21:aa:33:a0:ba:ca:58:46:cf:3d:9e:89:43: 56:18:88:ac:c3:2d:0a:d3:88:f0:75:ac:b4:5f:58:e5:56:af: e7:9c:f7:b1:a7:04:6c:2f:2e:06:31:84:63:c3:b0:85:5a:7c: 5c:b5:c9:d2:12:61:70:e2:05:3c:1f:ee:1a:ba:9b:22:4e:73: db:8f:fc:c2:73:0c:f0:81:35:30:7b:a5:94:7f:1e:e5:43:f3: 40:bc:b3:78:c4:07:5d:78:a9:71:16:92:59:45:31:76:af:0d: f9:38:12:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSBdRvbVjkm000AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmYxMGFiYjItYTYyOS00N2FiLTk3OGEtMDI5OWRhMjE2NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdl94dp91y7R7YdqLx265gi7PHK6wNc/CXl kWWMLD5Qz+PxTFFC8PA5Axni+gz1KcMcEnVNkMjqbSfbcDhos/nPGjxJgxjOE57l Nye7VXbvMmKndxD8PNkE2i2m13zXg66DmR1/Guc4fFzZiMmb4B+/bXQEaVargpmK BJ1PWmx8f848UDh2Ct/tfLPzH0GnhkIuLM3+VmMte/z7Qr5tyW+EK7oPFAswt2k/ 1MHlxqiNafJCKwq1KsPqB4Y2MV/vpecNDpLOktGrTEHz5ynJBk2QZVzHqqeHsLiC zdwh+PAcsWBwpx2XwIUIMUY10DgCgGD3BBaxJb2VTp+rP72UlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwhscZbT5HIy32Z1cOoAEQFOuLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODIzOWU3ZDktYzNkYi0z MTkzLTk4YzUtZjZmNTRlMzA0YTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYskDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLJXr4EXH8I8zZgIHDWKvA+LWcodJ7I6qCl8ZhbTFfq/bmQ+Y+oJ713 3bDsL8h6mHRseez2cnyIDE+kQFIvySTKbTugJu/OQkFKc2K3WEGd1cW7fQPXxumx /UCbd8ufvsfWHnbTo88bLus+y/36ezD591b7y0CjBtYp/yKy2vUU9Bw48ftYGnt8 M14ulBxWIVodUgYXIaozoLrKWEbPPZ6JQ1YYiKzDLQrTiPB1rLRfWOVWr+ec97Gn BGwvLgYxhGPDsIVafFy1ydISYXDiBTwf7hq6myJOc9uP/MJzDPCBNTB7pZR/HuVD 80C8s3jEB114qXEWkllFMXavDfk4Egg= -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:31 2025 by rpki-client