$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99f34df4-357c-32fc-b645-39a44cfc3e00.roa File: 99f34df4-357c-32fc-b645-39a44cfc3e00.roa (raw, json) Hash identifier: 7e/NkiS9kQS4JfM0106Vp75xH63+Y8E6yZoxCb+wZ1A= Subject key identifier: DB:E3:B8:F6:8B:0E:89:4E:E7:A8:1A:DC:54:E2:41:8F:54:77:7F:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB155751CBBB26C51580E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99f34df4-357c-32fc-b645-39a44cfc3e00.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.214.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:55:75:1c:bb:b2:6c:51:58:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=782e5b56-5c29-4b6c-9d1b-274f2c3c79b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:6c:9e:1c:64:3a:62:cd:3a:5b:b8:3c:c5: 45:33:7d:d3:38:a6:ef:3e:a2:ec:c4:80:14:c1:5f: e9:2f:85:0e:5b:17:67:24:a6:3c:07:59:e1:ce:54: 10:08:91:83:7c:bb:2e:7b:88:2f:76:26:2b:ee:07: d3:19:94:da:f6:e6:55:6f:87:40:01:44:d5:70:3d: 1e:1e:81:53:29:13:b6:ea:5d:11:a2:1f:e2:05:45: d0:1e:a8:33:89:35:f0:ed:0f:55:f0:13:a3:e7:f2: 4f:38:03:d0:ce:75:e0:8e:1a:71:8d:24:b0:99:89: e1:b6:e0:5c:ea:25:3b:2e:07:b6:2e:56:1b:21:3c: 11:5b:00:eb:d2:87:cf:b1:ab:f0:66:7a:a9:b4:d4: 87:3e:10:d9:db:71:3e:c7:30:a5:e8:c6:e4:44:b1: 96:17:53:17:b0:d1:be:1f:31:ad:8a:d9:11:f3:9b: 1a:e3:e8:7d:c1:e3:22:f2:24:7e:d5:dc:fe:a7:c1: 88:14:96:97:45:e1:54:10:9d:8a:d2:f4:fb:7e:a9: b1:dd:40:91:89:ac:7d:1c:2e:03:79:17:cf:43:93: b4:8f:37:30:f2:75:08:f4:30:8e:17:c1:96:0b:df: 13:b5:c4:3a:f7:ff:97:ff:ec:3c:2b:c8:c0:77:12: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E3:B8:F6:8B:0E:89:4E:E7:A8:1A:DC:54:E2:41:8F:54:77:7F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99f34df4-357c-32fc-b645-39a44cfc3e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.214.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:75:42:66:21:ee:31:f1:c0:d7:06:33:9e:f4:cb:ed:50:cd: 93:56:cd:22:a6:fa:38:39:b6:1e:18:cf:0c:8d:41:47:b9:d2: b3:d6:17:58:29:59:db:37:55:8a:57:25:0c:eb:38:89:30:15: 91:a0:84:b2:c3:33:bb:cd:bc:1d:c4:5f:2d:ff:11:84:56:35: 8d:87:ff:a4:84:d0:f3:ed:d6:09:37:ca:da:e1:66:bb:d9:f6: e4:b4:19:cd:0c:e3:14:97:f3:40:6d:60:7c:2b:4b:b7:a0:2e: 87:24:20:42:c4:ee:ae:06:41:b1:75:a3:14:00:9e:79:06:f6: cf:c2:ac:8f:40:87:58:20:2d:d3:e3:f1:7d:6c:e0:22:fc:65: e8:96:bf:ba:42:82:fc:4f:ef:ec:13:83:dd:33:10:e9:0f:39: 41:26:23:2a:b4:78:ce:d9:0f:f9:b7:24:ca:32:25:e2:34:45: 51:9c:71:c5:14:d7:d7:dd:17:97:99:2e:4a:aa:0c:bc:86:18: 97:a5:2d:27:bb:2a:86:73:5c:58:f6:a9:f1:f0:02:5e:83:c3: 97:cf:8a:22:7e:92:72:34:20:e4:37:b5:4d:a2:0c:c9:16:33: 24:29:bd:45:33:06:03:cd:aa:31:3c:1c:c8:44:85:5a:6a:19: 73:a6:f1:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssVV1HLuybFFYDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzgyZTViNTYtNWMyOS00YjZjLTlkMWItMjc0ZjJjM2M3OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnBsnhxkOmLNOlu4PMVFM33TOKbvPqLsxIAU wV/pL4UOWxdnJKY8B1nhzlQQCJGDfLsue4gvdiYr7gfTGZTa9uZVb4dAAUTVcD0e HoFTKRO26l0Roh/iBUXQHqgziTXw7Q9V8BOj5/JPOAPQznXgjhpxjSSwmYnhtuBc 6iU7Lge2LlYbITwRWwDr0ofPsavwZnqptNSHPhDZ23E+xzCl6MbkRLGWF1MXsNG+ HzGtitkR85sa4+h9weMi8iR+1dz+p8GIFJaXReFUEJ2K0vT7fqmx3UCRiax9HC4D eRfPQ5O0jzcw8nUI9DCOF8GWC98TtcQ69/+X/+w8K8jAdxKNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvjuPaLDolO56ga3FTiQY9Ud3/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTlmMzRkZjQtMzU3Yy0z MmZjLWI2NDUtMzlhNDRjZmMzZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ1QmYh7jHxwNcGM570y+1QzZNWzSKm+jg5th4YzwyNQUe50rPWF1gp Wds3VYpXJQzrOIkwFZGghLLDM7vNvB3EXy3/EYRWNY2H/6SE0PPt1gk3ytrhZrvZ 9uS0Gc0M4xSX80BtYHwrS7egLockIELE7q4GQbF1oxQAnnkG9s/CrI9Ah1ggLdPj 8X1s4CL8ZeiWv7pCgvxP7+wTg90zEOkPOUEmIyq0eM7ZD/m3JMoyJeI0RVGcccUU 19fdF5eZLkqqDLyGGJelLSe7KoZzXFj2qfHwAl6Dw5fPiiJ+knI0IOQ3tU2iDMkW MyQpvUUzBgPNqjE8HMhEhVpqGXOm8Qs= -----END CERTIFICATE-----Generated at Mon Apr 7 09:35:43 2025 by rpki-client