$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e4b85d-a399-3451-b0e2-b99eaee8a4b5.roa File: 91e4b85d-a399-3451-b0e2-b99eaee8a4b5.roa (raw, json) Hash identifier: 8MMTPR1g/vHmZBLdHBBN2GEc6vmonft5l5l66nov08E= Subject key identifier: 11:60:8B:CB:30:C8:88:B7:CC:5A:7C:C1:63:CC:12:94:43:F0:F0:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430D6D9AEC2F7629F5DAC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e4b85d-a399-3451-b0e2-b99eaee8a4b5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.209.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:d6:d9:ae:c2:f7:62:9f:5d:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=940ddd99-8ec1-4f15-9ef8-1a69e0d8bab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:8b:01:62:67:5d:5c:b4:7d:d6:ab:3a:6a: 3e:8e:70:f4:f9:e2:17:70:8d:5e:c2:73:5a:31:85: e6:7c:4a:7a:d4:45:e6:f6:f2:f4:0b:23:7d:66:35: 1a:25:0f:47:02:74:26:92:52:47:b4:56:a1:e9:ba: 54:ee:0b:07:d4:29:f0:d6:f2:bb:7a:80:59:93:7c: 5e:26:d5:af:4b:d0:86:b1:31:09:e7:e3:27:cf:5b: 78:dc:1c:67:88:27:2e:83:38:ad:fd:dc:f6:f9:1a: 1c:a3:58:4a:11:5f:65:c8:67:81:c4:ca:46:11:66: 63:cd:c6:74:98:4b:70:82:13:b0:a1:64:e3:89:67: 3e:43:2f:16:d7:27:c0:91:b2:26:78:59:1e:e5:2c: 85:6f:ad:3a:f7:c8:b2:01:9f:35:4d:e3:e0:a8:36: 3c:ce:50:98:1b:7a:a8:52:13:e8:6d:e0:96:f4:32: 04:55:98:73:b4:56:36:74:66:de:db:ee:ea:12:12: 4c:b1:df:05:45:24:b0:0a:d6:f7:76:31:92:4d:b4: 11:9d:ae:f8:2d:2c:ec:7f:61:26:79:4d:f4:c9:ff: a9:e6:99:41:b1:30:32:ac:b0:77:76:e1:96:85:d2: 27:02:22:5f:71:d7:d0:a1:b0:4a:96:3d:cf:62:cb: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:60:8B:CB:30:C8:88:B7:CC:5A:7C:C1:63:CC:12:94:43:F0:F0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e4b85d-a399-3451-b0e2-b99eaee8a4b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ec:32:89:42:f0:41:99:67:23:a5:9c:ab:f7:ab:69:81:3e: 57:83:d5:20:e6:f0:9a:fc:0b:1e:28:6a:ad:62:7e:66:e6:87: b6:2a:a7:87:1b:8b:c4:fe:92:b6:ae:ec:e9:7e:15:33:dc:ae: 4c:a3:19:3b:05:d9:1e:ed:88:ba:14:08:cd:77:a5:33:69:e0: c3:70:c8:22:aa:4d:72:81:e4:1d:f6:34:a7:34:d0:45:25:4f: d1:60:74:da:ac:be:54:b1:1d:dd:40:a7:c0:2b:7d:3c:6e:78: 7a:32:f8:e8:0a:c4:ca:16:c2:24:fb:72:93:a5:42:5d:3a:7b: 47:e5:ad:13:2a:b1:4c:5c:33:42:8e:17:d8:34:be:03:21:b8: 05:32:60:17:4d:2d:e7:b3:b3:13:af:8e:a1:3b:40:a1:fc:7d: e6:e3:fc:a3:e0:53:4f:ee:e3:84:e9:82:a9:10:e6:d6:c4:1c: b5:87:97:22:e9:d9:bd:09:ee:d5:c9:e5:72:7d:16:d6:a4:90: cb:63:61:46:ca:c7:87:a1:74:72:d9:a3:61:c5:4c:c9:f9:34: 0b:78:ca:0a:2c:4b:72:5f:27:58:68:ea:37:99:94:52:2a:93: 7e:71:94:4e:5c:45:6b:9a:93:3b:f3:9b:24:cf:43:78:fd:ca: be:18:81:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMNbZrsL3Yp9drIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTQwZGRkOTktOGVjMS00ZjE1LTllZjgtMWE2OWUwZDhiYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwiLAWJnXVy0fdarOmo+jnD0+eIXcI1ewnNa MYXmfEp61EXm9vL0CyN9ZjUaJQ9HAnQmklJHtFah6bpU7gsH1Cnw1vK7eoBZk3xe JtWvS9CGsTEJ5+Mnz1t43BxniCcugzit/dz2+Roco1hKEV9lyGeBxMpGEWZjzcZ0 mEtwghOwoWTjiWc+Qy8W1yfAkbImeFke5SyFb60698iyAZ81TePgqDY8zlCYG3qo UhPobeCW9DIEVZhztFY2dGbe2+7qEhJMsd8FRSSwCtb3djGSTbQRna74LSzsf2Em eU30yf+p5plBsTAyrLB3duGWhdInAiJfcdfQobBKlj3PYssKyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFgi8swyIi3zFp8wWPMEpRD8PAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFlNGI4NWQtYTM5OS0z NDUxLWIwZTItYjk5ZWFlZThhNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbsMolC8EGZZyOlnKv3q2mBPleD1SDm8Jr8Cx4oaq1ifmbmh7Yqp4cb i8T+krau7Ol+FTPcrkyjGTsF2R7tiLoUCM13pTNp4MNwyCKqTXKB5B32NKc00EUl T9FgdNqsvlSxHd1Ap8ArfTxueHoy+OgKxMoWwiT7cpOlQl06e0flrRMqsUxcM0KO F9g0vgMhuAUyYBdNLeezsxOvjqE7QKH8febj/KPgU0/u44TpgqkQ5tbEHLWHlyLp 2b0J7tXJ5XJ9FtakkMtjYUbKx4ehdHLZo2HFTMn5NAt4ygosS3JfJ1ho6jeZlFIq k35xlE5cRWuakzvzmyTPQ3j9yr4Ygeo= -----END CERTIFICATE-----Generated at Tue Jun 3 05:21:25 2025 by rpki-client