$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/987b9d08-d87f-3472-a479-6298484727c2.roa File: 987b9d08-d87f-3472-a479-6298484727c2.roa (raw, json) Hash identifier: Ibq5npvw6/RxE1/F3Z2vJDBYUmYG5ZNJasAzS+wWO9o= Subject key identifier: 6E:2B:53:3A:7C:94:AC:64:E2:A4:92:D3:41:77:1F:4B:44:64:5C:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430D89D4B08EA44C6E70800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/987b9d08-d87f-3472-a479-6298484727c2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.243.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:d8:9d:4b:08:ea:44:c6:e7:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=54fd7a8e-bbe5-47ea-9b0b-1c3587ec8c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:cb:f8:26:8c:3c:47:6e:28:a7:a0:22:61: 91:ba:a1:ea:04:a6:aa:67:1f:92:7b:73:0a:7f:15: be:28:ca:fe:1f:27:83:27:dc:8e:8e:b1:96:c2:fa: da:aa:1d:3f:bd:62:d8:42:5e:ca:b1:62:87:10:fb: d2:e0:85:1a:ee:ae:6f:25:d0:46:16:46:55:fa:2e: 36:ca:7a:b6:0c:55:9b:d2:93:97:d7:8a:43:6e:cc: 5b:59:88:5d:71:7c:07:b2:af:8a:5e:00:bb:6d:bb: 65:64:23:e0:18:2f:b4:f9:2e:14:a0:f1:b1:7e:d2: 9c:f4:a9:21:21:1a:56:31:69:fc:ca:ba:77:98:80: f0:2d:7c:ac:58:f6:4d:7a:e5:84:d4:31:1a:ab:81: f0:4f:53:ca:92:72:aa:be:89:3f:85:b2:29:41:d1: 7a:4e:a2:2f:f5:06:ae:44:51:76:f9:17:e6:ac:8c: 68:1a:bd:5f:de:15:97:f7:25:88:ec:39:9a:95:de: a1:6b:39:7f:08:13:a2:be:9f:a1:3e:26:77:84:47: e0:72:2d:ce:80:93:7c:21:91:c5:89:de:43:09:96: 0e:0a:33:c0:b0:b4:49:d6:e5:de:af:69:cc:45:6f: 27:01:d4:71:f2:49:8e:05:0a:7b:c1:1c:97:94:55: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:53:3A:7C:94:AC:64:E2:A4:92:D3:41:77:1F:4B:44:64:5C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/987b9d08-d87f-3472-a479-6298484727c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a3:53:dc:5b:33:60:0b:d9:c2:e9:e2:2e:e0:ba:b9:63:f6: af:c4:2c:81:53:ba:4c:21:16:e1:73:31:6a:ce:01:91:a9:f4: e1:6f:e5:19:23:0f:9e:9c:6b:8f:1c:3f:db:58:a8:c3:f4:f6: ea:a1:50:3a:f6:95:31:a3:16:89:af:50:7f:75:dc:08:65:6f: 65:29:f8:a2:73:18:76:ec:8d:ce:cb:c3:4d:0a:04:64:f1:d1: d4:47:da:d8:64:14:cd:f4:d4:5c:94:8b:4d:ff:eb:93:14:43: 72:bf:50:00:13:ed:56:c3:86:b0:21:df:5d:81:a6:a3:ea:59: 01:af:fa:0b:3c:d1:aa:69:7e:1e:c9:c6:cb:2e:6d:90:90:c8: 19:3d:ca:fc:1f:36:c6:0c:44:75:c2:5a:e6:47:cf:d1:33:ea: 08:21:92:ff:fc:8d:c9:c1:d7:c1:11:36:20:70:1b:8f:d0:5a: a8:2a:04:ed:da:12:c7:8f:fb:20:9b:ea:ec:59:86:a1:d8:76: 43:52:1c:28:0a:eb:4e:9f:13:d1:db:a0:60:cc:d3:f0:bb:7a: 10:9d:13:81:da:20:e8:15:8a:19:96:8b:5b:ea:67:8a:e3:3e: 55:49:0e:75:85:c7:5e:36:35:7e:61:0e:04:90:76:f5:12:23: 73:2f:6a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMNidSwjqRMbnCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTRmZDdhOGUtYmJlNS00N2VhLTliMGItMWMzNTg3ZWM4YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8DL+CaMPEduKKegImGRuqHqBKaqZx+Se3MK fxW+KMr+HyeDJ9yOjrGWwvraqh0/vWLYQl7KsWKHEPvS4IUa7q5vJdBGFkZV+i42 ynq2DFWb0pOX14pDbsxbWYhdcXwHsq+KXgC7bbtlZCPgGC+0+S4UoPGxftKc9Kkh IRpWMWn8yrp3mIDwLXysWPZNeuWE1DEaq4HwT1PKknKqvok/hbIpQdF6TqIv9Qau RFF2+RfmrIxoGr1f3hWX9yWI7Dmald6hazl/CBOivp+hPiZ3hEfgci3OgJN8IZHF id5DCZYOCjPAsLRJ1uXer2nMRW8nAdRx8kmOBQp7wRyXlFVqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4rUzp8lKxk4qSS00F3H0tEZFy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg3YjlkMDgtZDg3Zi0z NDcyLWE0NzktNjI5ODQ4NDcyN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJejU9xbM2AL2cLp4i7gurlj9q/ELIFTukwhFuFzMWrOAZGp9OFv5Rkj D56ca48cP9tYqMP09uqhUDr2lTGjFomvUH913Ahlb2Up+KJzGHbsjc7Lw00KBGTx 0dRH2thkFM301FyUi03/65MUQ3K/UAAT7VbDhrAh312BpqPqWQGv+gs80appfh7J xssubZCQyBk9yvwfNsYMRHXCWuZHz9Ez6gghkv/8jcnB18ERNiBwG4/QWqgqBO3a EseP+yCb6uxZhqHYdkNSHCgK606fE9HboGDM0/C7ehCdE4HaIOgVihmWi1vqZ4rj PlVJDnWFx142NX5hDgSQdvUSI3MvarY= -----END CERTIFICATE-----Generated at Tue Jun 3 05:55:43 2025 by rpki-client