$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa File: 86c6e679-2b34-330e-a1ec-10d58446b1c3.roa (raw, json) Hash identifier: S2MWbkqwTjUw8cwKZPiofII1rSnhUvIjWcNnLXDh7U0= Subject key identifier: 66:1A:EF:AE:EB:97:3D:8D:B2:DA:73:57:A3:9E:FD:43:ED:8B:F5:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8083FF05F133F7ACB8FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.196.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:08:3f:f0:5f:13:3f:7a:cb:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a182e0e2-7210-4b73-b84e-3286bb32cdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:fe:d2:bc:7a:ce:78:33:09:47:ec:f8:03: fb:56:70:59:87:b4:36:a0:9c:96:c3:16:45:59:87: 82:e2:25:9b:d5:29:83:21:f4:7d:ff:4d:99:ee:09: 68:e5:5f:66:30:a7:b4:7b:74:a1:0b:60:b3:20:98: 52:75:c8:84:be:3c:c7:c0:ac:35:bd:c4:82:09:a5: 4e:8a:e8:69:6f:f0:b5:a6:95:e0:1b:57:6e:4e:ba: 8d:60:73:a8:a3:5d:c2:23:3c:05:c2:a5:a1:ea:7f: ae:88:7f:d3:c4:84:e1:5b:c5:3d:1f:e4:f1:45:cc: 1d:80:fb:ae:4a:bd:86:76:50:f0:e2:4a:a7:28:46: d8:99:b1:b2:ed:d8:e0:1f:d1:5b:dd:53:1f:27:f7: 52:dc:ea:0c:34:6a:78:46:aa:49:a7:b5:ff:77:69: ec:31:bd:34:b3:c2:7f:8d:44:a0:2f:c7:a7:3e:e4: d0:c8:ae:10:be:e3:35:7c:43:6c:93:f0:30:f0:0e: e5:d3:96:d9:f1:6b:eb:d9:5a:4c:2b:52:d9:47:0d: 87:0b:5c:88:64:b9:e5:87:1e:07:7f:44:b8:f7:e0: aa:f1:00:59:37:34:d8:83:90:37:b0:ed:0f:e4:ca: a7:c8:67:c1:b0:1b:36:96:61:9f:99:72:3d:9f:26: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1A:EF:AE:EB:97:3D:8D:B2:DA:73:57:A3:9E:FD:43:ED:8B:F5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d7:f1:63:5d:c5:02:04:ec:31:8b:2a:44:50:a3:07:4c:7a: b9:f4:bf:e4:3f:1d:6c:bd:db:52:20:6c:39:4e:6c:a2:a9:c0: 14:67:66:47:a9:e6:ab:4c:4e:82:71:d1:1a:00:8a:da:b5:67: 4c:8c:b2:42:de:32:aa:48:5c:9e:32:3b:a6:b8:b0:34:63:ac: e8:c8:25:29:57:53:c0:03:90:0b:8b:b0:3f:41:a2:35:f8:87: 17:03:ca:7e:9f:25:77:5c:e8:1a:1e:ee:11:dc:0a:52:47:40: 05:38:af:1e:6e:bf:7c:19:5f:31:2c:e4:c5:bc:74:8d:f7:5e: 9f:f3:a2:48:67:a5:f7:a3:a1:e4:04:e7:bc:99:6e:5f:44:57: 68:02:5a:93:ab:c7:30:d1:d1:2c:dd:5b:e2:8d:7d:06:a3:09: 32:9c:8c:c6:66:75:31:9c:ed:a0:bd:1f:e3:51:9b:e5:5c:cd: c3:3b:3a:51:3a:cd:00:47:82:cb:74:5a:c9:b1:45:f5:57:08: 08:41:58:6f:b4:58:2e:74:8a:84:04:4e:c8:86:20:4f:b1:3a: ad:51:b3:87:bb:35:29:09:34:2b:16:68:a7:ec:d1:54:45:59: f5:c4:76:55:34:f0:7c:02:a0:22:17:9b:38:70:4c:d7:97:91: ad:38:22:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Ag/8F8TP3rLj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTE4MmUwZTItNzIxMC00YjczLWI4NGUtMzI4NmJiMzJjZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z7+0rx6zngzCUfs+AP7VnBZh7Q2oJyWwxZF WYeC4iWb1SmDIfR9/02Z7glo5V9mMKe0e3ShC2CzIJhSdciEvjzHwKw1vcSCCaVO iuhpb/C1ppXgG1duTrqNYHOoo13CIzwFwqWh6n+uiH/TxIThW8U9H+TxRcwdgPuu Sr2GdlDw4kqnKEbYmbGy7djgH9Fb3VMfJ/dS3OoMNGp4RqpJp7X/d2nsMb00s8J/ jUSgL8enPuTQyK4QvuM1fENsk/Aw8A7l05bZ8Wvr2VpMK1LZRw2HC1yIZLnlhx4H f0S49+Cq8QBZNzTYg5A3sO0P5MqnyGfBsBs2lmGfmXI9nya9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYa767rlz2NstpzV6Oe/UPti/UaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZjNmU2NzktMmIzNC0z MzBlLWExZWMtMTBkNTg0NDZiMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/X8WNdxQIE7DGLKkRQowdMern0v+Q/HWy921IgbDlObKKpwBRnZkep 5qtMToJx0RoAitq1Z0yMskLeMqpIXJ4yO6a4sDRjrOjIJSlXU8ADkAuLsD9BojX4 hxcDyn6fJXdc6Boe7hHcClJHQAU4rx5uv3wZXzEs5MW8dI33Xp/zokhnpfejoeQE 57yZbl9EV2gCWpOrxzDR0SzdW+KNfQajCTKcjMZmdTGc7aC9H+NRm+VczcM7OlE6 zQBHgst0WsmxRfVXCAhBWG+0WC50ioQETsiGIE+xOq1Rs4e7NSkJNCsWaKfs0VRF WfXEdlU08HwCoCIXmzhwTNeXka04InQ= -----END CERTIFICATE-----Generated at Sat Apr 12 19:51:17 2025 by rpki-client