$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e0ab43a-5ee7-3f56-af21-e8609b04851c.roa File: 8e0ab43a-5ee7-3f56-af21-e8609b04851c.roa (raw, json) Hash identifier: 39rKOmZHdBz1EqsaRQWGy7EGyB+I2zkk7k03OGrdkio= Subject key identifier: 97:0D:DA:13:6B:0B:13:4A:5F:88:74:68:19:17:53:D9:84:0D:34:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0861C0352A723AF8D7A100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e0ab43a-5ee7-3f56-af21-e8609b04851c.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.223.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:61:c0:35:2a:72:3a:f8:d7:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=c7200f43-f125-4c44-9354-1865fb1a5eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:84:1b:b6:30:84:d3:75:9c:b7:44:d5:67: c8:51:1e:39:7e:18:42:3a:63:05:25:08:da:41:c9: cb:e7:5a:5a:a0:0d:bd:c2:3b:40:96:3c:79:e0:0e: 63:b6:06:b2:70:fd:f5:5a:52:fa:3d:3a:e5:d3:ab: 7e:b2:77:99:ec:e5:15:66:9b:cb:13:64:72:4f:bd: 16:cb:6b:9c:bc:89:17:e5:46:cc:2c:3e:07:7b:21: 9a:fe:0a:f7:c4:8f:d1:90:b1:73:94:f3:53:b0:0c: 77:85:3c:05:05:f2:6a:e7:cb:e8:e3:c5:c9:ca:43: b2:23:34:d7:19:25:2d:16:76:a2:be:45:52:0e:85: 6d:26:e1:fa:04:e8:2a:39:cb:df:9a:7e:14:04:f2: 03:f2:41:a9:5c:7b:33:7b:4d:45:79:56:d7:7e:89: d8:f8:b3:f6:49:73:02:91:8e:a3:38:98:3e:40:25: 64:f3:f8:63:e6:fd:3d:53:d4:fa:e9:a0:e4:c9:10: 38:7d:c9:d7:4a:4c:a8:ad:ae:21:cb:2f:7a:e3:7d: 18:b6:c1:01:f5:2d:67:5b:fe:f5:e8:41:aa:03:83: 71:5b:9d:7c:f1:96:19:64:d2:fa:e4:86:21:29:a3: 9a:db:af:e4:8e:09:e9:91:11:bf:59:9d:d2:42:e6: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0D:DA:13:6B:0B:13:4A:5F:88:74:68:19:17:53:D9:84:0D:34:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e0ab43a-5ee7-3f56-af21-e8609b04851c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d2:9d:2c:dc:1d:cf:6a:e6:fb:82:3c:b4:ea:88:d8:af:04: 95:95:77:84:1f:bf:6f:b8:aa:61:0c:03:ca:91:31:69:55:57: d5:18:d7:7a:50:59:4f:a8:ce:0a:c0:4d:eb:83:b6:14:c7:73: 90:ae:8a:67:db:c2:38:74:cb:90:10:82:2a:3d:1e:0e:70:87: e2:34:2a:2c:81:0d:9f:cd:b7:9d:c7:64:0e:10:48:f4:93:45: b2:c9:20:7f:7c:8c:cf:5c:18:6c:95:ed:ff:14:3c:40:85:7b: 0e:bc:97:3b:38:58:91:a1:ee:b9:64:68:7a:a5:73:bd:e8:bf: 67:dd:0d:15:85:e0:86:d4:97:c5:66:56:77:ac:cf:d3:fd:ea: 9a:8d:dc:07:06:38:f1:07:e0:2e:13:fe:30:b6:df:66:ce:7e: 4a:cd:fe:49:99:26:ae:54:0c:fa:b3:79:1b:6a:1a:b8:e7:70: 01:3d:87:f3:61:fc:57:73:75:5a:83:7c:89:91:54:2b:28:d3: 53:95:b2:21:64:51:4c:12:56:a1:b5:a7:eb:30:f8:fa:19:21: 22:d1:78:32:92:c1:32:28:c6:8e:16:63:a0:27:9d:ec:15:3b: 59:b2:11:b3:9a:bd:77:33:c3:4b:4b:91:32:5b:03:02:29:fe: 57:99:3d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCGHANSpyOvjXoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YzcyMDBmNDMtZjEyNS00YzQ0LTkzNTQtMTg2NWZiMWE1ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmEG7YwhNN1nLdE1WfIUR45fhhCOmMFJQja QcnL51paoA29wjtAljx54A5jtgaycP31WlL6PTrl06t+sneZ7OUVZpvLE2RyT70W y2ucvIkX5UbMLD4HeyGa/gr3xI/RkLFzlPNTsAx3hTwFBfJq58vo48XJykOyIzTX GSUtFnaivkVSDoVtJuH6BOgqOcvfmn4UBPID8kGpXHsze01FeVbXfonY+LP2SXMC kY6jOJg+QCVk8/hj5v09U9T66aDkyRA4fcnXSkyora4hyy96430YtsEB9S1nW/71 6EGqA4NxW5188ZYZZNL65IYhKaOa26/kjgnpkRG/WZ3SQuY5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcN2hNrCxNKX4h0aBkXU9mEDTQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUwYWI0M2EtNWVlNy0z ZjU2LWFmMjEtZTg2MDliMDQ4NTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt8/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrSnSzcHc9q5vuCPLTqiNivBJWVd4Qfv2+4qmEMA8qRMWlVV9UY13pQ WU+ozgrATeuDthTHc5Cuimfbwjh0y5AQgio9Hg5wh+I0KiyBDZ/Nt53HZA4QSPST RbLJIH98jM9cGGyV7f8UPECFew68lzs4WJGh7rlkaHqlc73ov2fdDRWF4IbUl8Vm Vnesz9P96pqN3AcGOPEH4C4T/jC232bOfkrN/kmZJq5UDPqzeRtqGrjncAE9h/Nh /FdzdVqDfImRVCso01OVsiFkUUwSVqG1p+sw+PoZISLReDKSwTIoxo4WY6AnnewV O1myEbOavXczw0tLkTJbAwIp/leZPSE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:41:52 2025 by rpki-client