$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c60d5a-4eb3-3c35-8b04-1881002af774.roa File: 89c60d5a-4eb3-3c35-8b04-1881002af774.roa (raw, json) Hash identifier: YZxzIOQT5Idcwjv15vbnPrYxD9jlJAFBNkNZ/DiTr38= Subject key identifier: B5:35:D4:26:2A:00:70:8B:74:C1:1D:90:2C:EA:03:24:93:C5:24:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BE3E491A1C20207F6FE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c60d5a-4eb3-3c35-8b04-1881002af774.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33489 IP address blocks: 98.244.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:e3:e4:91:a1:c2:02:07:f6:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f1eda01b-d876-41af-a052-730a28244e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:56:4c:ec:12:b0:86:86:d0:80:c8:35:aa: 62:b8:f5:d4:9a:8d:22:23:2c:b4:4f:3a:f5:d5:06: 1e:0f:8a:db:e7:80:96:f0:de:26:e5:f0:ec:0f:b0: ed:96:99:91:4e:27:e8:ee:40:d7:4c:49:ec:84:2c: c3:41:30:fd:2c:73:a3:1f:b0:16:38:69:2d:51:f5: 62:ad:80:62:96:72:d6:da:ef:69:ac:49:e1:69:df: 9a:c0:4f:34:49:f7:5c:12:b9:5c:17:97:f6:f0:33: 30:3c:62:06:7f:9f:5e:c8:9a:47:16:0d:e9:cc:6c: c9:a6:7a:b8:36:58:d7:6a:c9:2f:b5:73:45:c3:22: 47:60:a9:86:5c:54:f9:5b:10:51:21:5e:7f:92:9c: 10:81:92:04:f3:20:27:59:ed:a2:7b:2e:64:0f:31: f9:8e:a4:c1:04:76:97:8b:9b:5d:ee:15:0e:73:2a: 92:c2:3c:12:cf:5a:a3:db:15:98:bc:d4:01:57:a4: 14:f0:c7:45:71:45:1c:c8:b9:f9:19:69:c6:36:73: 41:24:ef:8a:77:c4:10:cc:7c:ba:4a:ad:6e:5a:75: a2:0f:fc:e0:4a:4c:0e:ea:40:52:63:6e:79:a2:41: 61:0f:35:44:66:3c:16:71:1a:6c:58:0f:52:85:fd: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:D4:26:2A:00:70:8B:74:C1:1D:90:2C:EA:03:24:93:C5:24:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c60d5a-4eb3-3c35-8b04-1881002af774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.244.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:63:f1:68:0d:d6:ba:9e:2d:75:69:f0:ef:2c:73:b3:6f:12: f9:3d:ef:9e:16:06:7d:a4:43:38:e6:15:bb:00:2b:54:5d:bc: 93:82:0a:30:8c:82:37:bd:26:39:5c:3e:55:be:7e:ce:30:4d: 51:7e:4c:98:4e:05:d2:35:4d:a9:d4:4b:6e:a1:ac:f7:63:4e: d1:f9:04:7b:f4:06:15:cc:db:08:00:5e:1f:71:98:ff:81:40: b4:7b:de:50:4a:5a:ba:ed:95:3f:cb:ca:e9:ec:52:9e:8f:9e: c8:e5:5d:fd:31:6f:8c:5e:ee:e4:98:48:f0:2e:ca:d1:98:29: 41:d4:b3:eb:b4:fb:e2:ec:3c:e0:b8:82:5d:2c:d9:f0:e6:55: 9d:87:48:d3:37:49:26:01:e4:88:6a:fb:6f:90:a6:dd:6d:b2: 89:97:14:ac:fb:62:29:a1:a7:8e:ae:57:ac:2a:83:2f:f4:dd: af:8c:65:d3:cd:05:18:8a:a4:6a:a6:d4:0b:b7:c6:f1:03:6f: db:79:96:89:42:ed:41:15:7b:63:99:a4:71:c4:25:1d:7a:c2: 84:1e:b1:c3:93:c6:00:3c:9f:ff:d1:bd:1a:50:ea:88:d3:8a: 4c:6c:06:24:9c:9b:43:e2:36:c6:70:87:92:08:06:67:30:7f: d0:01:5e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea+PkkaHCAgf2/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjFlZGEwMWItZDg3Ni00MWFmLWEwNTItNzMwYTI4MjQ0ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo15WTOwSsIaG0IDINapiuPXUmo0iIyy0Tzr1 1QYeD4rb54CW8N4m5fDsD7DtlpmRTifo7kDXTEnshCzDQTD9LHOjH7AWOGktUfVi rYBilnLW2u9prEnhad+awE80SfdcErlcF5f28DMwPGIGf59eyJpHFg3pzGzJpnq4 NljXaskvtXNFwyJHYKmGXFT5WxBRIV5/kpwQgZIE8yAnWe2iey5kDzH5jqTBBHaX i5td7hUOcyqSwjwSz1qj2xWYvNQBV6QU8MdFcUUcyLn5GWnGNnNBJO+Kd8QQzHy6 Sq1uWnWiD/zgSkwO6kBSY255okFhDzVEZjwWcRpsWA9Shf1rVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU11CYqAHCLdMEdkCzqAySTxSRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODljNjBkNWEtNGViMy0z YzM1LThiMDQtMTg4MTAwMmFmNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYvSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlj8WgN1rqeLXVp8O8sc7NvEvk9754WBn2kQzjmFbsAK1RdvJOCCjCM gje9JjlcPlW+fs4wTVF+TJhOBdI1TanUS26hrPdjTtH5BHv0BhXM2wgAXh9xmP+B QLR73lBKWrrtlT/LyunsUp6PnsjlXf0xb4xe7uSYSPAuytGYKUHUs+u0++LsPOC4 gl0s2fDmVZ2HSNM3SSYB5Ihq+2+Qpt1tsomXFKz7Yimhp46uV6wqgy/03a+MZdPN BRiKpGqm1Au3xvEDb9t5lolC7UEVe2OZpHHEJR16woQescOTxgA8n//RvRpQ6ojT ikxsBiScm0PiNsZwh5IIBmcwf9ABXiQ= -----END CERTIFICATE-----Generated at Mon Apr 7 09:38:33 2025 by rpki-client