$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b02be-ee50-3f1e-aa41-e23f9881990c.roa File: 933b02be-ee50-3f1e-aa41-e23f9881990c.roa (raw, json) Hash identifier: 3hxOGtmwlxFqEelar9xBkAQ5xGDiD2MynK2MYFK57BQ= Subject key identifier: 82:59:E5:18:23:DD:FD:89:36:3B:2B:60:F7:90:68:0F:EA:94:AE:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430D7462608EFEAB9BAD400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b02be-ee50-3f1e-aa41-e23f9881990c.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.209.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:d7:46:26:08:ef:ea:b9:ba:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9bde96bd-6184-4498-927a-a9a7f6af22fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:0d:61:0f:7a:81:4c:95:63:62:f7:c2:75: b5:c5:80:81:33:d8:8c:91:db:26:84:3a:b5:f8:0a: 3a:fd:6f:21:48:6a:aa:ce:69:46:eb:98:0c:02:3c: 8a:48:54:3a:f1:fa:86:84:80:1e:6c:c9:e0:af:46: 74:8d:7b:c3:ef:c9:29:b9:8f:60:c1:15:52:d1:08: 29:c6:b4:14:33:8c:0a:a0:46:2e:35:fc:4d:7e:5d: 39:49:4d:12:f7:28:86:9f:70:a1:a5:6b:f6:72:a8: e7:70:63:f2:1b:cf:80:84:7c:6b:cf:12:e7:50:9e: 70:cd:c1:ee:96:1c:3d:bb:bf:82:97:94:19:aa:a9: 8b:4f:f0:5b:3b:09:0e:17:31:7e:dd:1d:ac:f3:fb: 1b:e0:b4:8f:da:df:f5:68:a4:b7:d3:5f:5f:de:b9: 2a:42:64:c8:e4:4d:76:c8:95:45:e9:84:31:0d:71: 65:4d:4a:03:cf:96:8f:d2:5b:64:47:73:0a:c5:69: fb:f4:ea:09:8a:78:2b:48:74:d6:74:8b:9d:af:de: 11:29:89:2f:8a:60:01:e7:9a:e2:80:da:c2:04:5d: 00:48:b2:8a:7d:ff:40:9a:17:a1:5c:90:14:19:4f: 23:e9:34:8f:01:ee:c8:de:93:27:76:91:43:2c:f1: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:59:E5:18:23:DD:FD:89:36:3B:2B:60:F7:90:68:0F:EA:94:AE:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b02be-ee50-3f1e-aa41-e23f9881990c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:10:6e:61:98:78:2f:d5:25:9c:23:e5:30:5b:9b:92:a7:c8: b6:5d:d6:a8:d5:27:cb:6e:2e:0f:08:bd:90:38:f8:bb:1f:50: 26:d4:04:42:ca:65:1d:cd:7f:7b:05:28:da:ae:e0:77:a0:8c: 4d:cf:1c:cf:31:16:3d:87:b2:02:d4:14:91:c3:c4:59:82:3c: 4b:e8:1c:21:5f:1e:ed:24:c3:75:8b:a5:b7:12:fa:c9:3d:08: 4e:d6:90:59:dc:c7:62:8c:2e:bd:52:df:93:81:63:3b:29:38: 11:af:0d:15:d7:51:4d:6d:c0:f7:5e:93:01:28:45:86:3a:5c: a2:13:ab:97:66:0a:44:3e:35:a5:e3:d6:81:bd:21:92:8e:a6: 28:0e:67:7b:f2:90:2e:f2:63:03:f5:e5:00:4f:b1:31:2b:b4: 08:22:d3:e8:86:12:7b:f2:d8:bf:ab:09:66:4e:78:0f:52:9c: 77:72:e8:30:49:94:28:d6:d5:98:eb:68:e7:5e:ec:7e:ef:2c: 89:67:2a:4c:5a:65:dc:3d:9b:74:03:9f:5c:54:20:d5:4a:34: 92:19:88:99:0a:e7:b2:a4:98:1c:21:35:ec:86:e2:55:24:77: b5:95:b8:c2:4b:da:40:dc:5f:30:b9:73:a0:aa:df:d1:a0:f1: d0:71:9d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMNdGJgjv6rm61AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWJkZTk2YmQtNjE4NC00NDk4LTkyN2EtYTlhN2Y2YWYyMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu0NYQ96gUyVY2L3wnW1xYCBM9iMkdsmhDq1 +Ao6/W8hSGqqzmlG65gMAjyKSFQ68fqGhIAebMngr0Z0jXvD78kpuY9gwRVS0Qgp xrQUM4wKoEYuNfxNfl05SU0S9yiGn3ChpWv2cqjncGPyG8+AhHxrzxLnUJ5wzcHu lhw9u7+Cl5QZqqmLT/BbOwkOFzF+3R2s8/sb4LSP2t/1aKS3019f3rkqQmTI5E12 yJVF6YQxDXFlTUoDz5aP0ltkR3MKxWn79OoJingrSHTWdIudr94RKYkvimAB55ri gNrCBF0ASLKKff9AmhehXJAUGU8j6TSPAe7I3pMndpFDLPEHEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJZ5Rgj3f2JNjsrYPeQaA/qlK7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTMzYjAyYmUtZWU1MC0z ZjFlLWFhNDEtZTIzZjk4ODE5OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMQbmGYeC/VJZwj5TBbm5KnyLZd1qjVJ8tuLg8IvZA4+LsfUCbUBELK ZR3Nf3sFKNqu4HegjE3PHM8xFj2HsgLUFJHDxFmCPEvoHCFfHu0kw3WLpbcS+sk9 CE7WkFncx2KMLr1S35OBYzspOBGvDRXXUU1twPdekwEoRYY6XKITq5dmCkQ+NaXj 1oG9IZKOpigOZ3vykC7yYwP15QBPsTErtAgi0+iGEnvy2L+rCWZOeA9SnHdy6DBJ lCjW1ZjraOde7H7vLIlnKkxaZdw9m3QDn1xUINVKNJIZiJkK57KkmBwhNeyG4lUk d7WVuMJL2kDcXzC5c6Cq39Gg8dBxnfY= -----END CERTIFICATE-----Generated at Wed Jun 4 22:57:12 2025 by rpki-client