$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dc36dad-6567-3c03-bc3d-463f2fc5b5e0.roa File: 9dc36dad-6567-3c03-bc3d-463f2fc5b5e0.roa (raw, json) Hash identifier: yoZF5jLX6iJCYN0nglD4+630Y1ozVuINbm0mvg/Zr5U= Subject key identifier: A8:B9:57:B2:85:F2:C6:7E:A4:7A:21:88:61:F4:5E:F8:98:3F:06:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1F42A820BD906713EB2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dc36dad-6567-3c03-bc3d-463f2fc5b5e0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.42.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:f4:2a:82:0b:d9:06:71:3e:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b443aaee-db4c-40be-b6a1-caeb28b9fa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:1c:2d:97:7f:cf:e5:eb:bf:46:81:8e:09: fc:66:17:2e:48:23:13:ad:4e:52:44:db:1a:60:da: b5:27:ac:88:e7:3d:61:e7:40:01:ac:e4:e4:c5:9c: 77:cb:d2:ee:28:42:b5:26:61:a4:5c:4c:2a:97:9a: b4:6e:36:c3:81:89:29:1b:7a:dd:e1:89:b7:5b:b0: 07:1d:c4:b1:be:10:8b:dd:41:97:55:48:81:55:76: 6f:1d:51:e5:88:a9:ec:aa:5c:8b:07:b3:35:5e:f6: e1:11:60:08:73:af:99:92:4f:70:72:96:c0:d1:74: 16:08:06:17:8f:5f:12:82:c1:00:d6:4c:10:96:72: 22:d1:88:85:37:72:e2:f4:1e:68:4a:56:3b:aa:e6: 45:6d:42:5f:00:44:3e:cf:97:b1:db:88:dc:a8:0b: 25:4a:d2:9d:08:0d:5e:ac:bf:d0:7f:b7:24:d4:53: 28:41:d3:2d:09:0d:44:55:75:0a:b8:b0:ec:2d:b0: 68:80:21:6e:e3:79:99:3d:aa:f6:e3:3e:8b:33:9e: 44:24:05:c5:24:da:33:cc:2a:d7:05:d8:00:d3:72: 11:5f:4b:d7:cc:d5:22:81:a0:27:86:e0:da:28:48: e2:4f:ad:5d:9e:70:51:86:7c:ac:94:3f:a4:df:4f: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B9:57:B2:85:F2:C6:7E:A4:7A:21:88:61:F4:5E:F8:98:3F:06:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dc36dad-6567-3c03-bc3d-463f2fc5b5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6c:a3:0a:52:3a:90:9a:35:af:c0:95:ca:89:87:a0:1e:b5: bb:b5:0c:87:b0:f4:f6:42:16:79:c5:b0:88:c7:8f:3c:2b:43: 51:88:43:70:c4:cb:95:44:54:70:31:e5:ba:bc:ab:54:12:25: 12:ed:60:6c:34:88:7e:ed:bf:54:55:42:a3:bb:d5:e9:93:0d: 89:c1:e3:bf:fd:6b:37:6b:1f:9b:8b:a5:99:7c:9c:08:11:0b: bc:09:5b:12:ad:2a:4b:fc:5e:30:6e:73:06:75:4a:74:5c:00: bf:44:03:64:7e:4e:2f:bd:dd:7e:ca:85:6c:0e:09:61:79:ce: d3:b9:00:93:7c:75:8d:0c:9e:5d:d4:ad:19:0b:dd:35:79:a6: 9d:89:21:4a:cc:71:96:84:45:c2:d4:0e:17:1c:c6:13:7f:05: 7b:5d:e2:95:55:ab:62:e8:79:2a:8c:9e:fb:4a:5b:86:ca:c4: b0:d0:b5:1a:83:ed:0b:1f:bb:a3:c7:39:dd:cc:9e:a1:d5:ca: 68:48:bf:18:cf:2a:5f:57:7d:a2:be:ac:81:94:d4:1f:54:e2: c3:84:57:e9:55:ba:1e:42:e4:e3:a8:b7:ca:92:17:ad:64:c1: 3d:61:d0:c1:52:2c:64:38:55:11:14:d1:8b:00:d4:e4:92:86: 8c:36:51:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssfQqggvZBnE+ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjQ0M2FhZWUtZGI0Yy00MGJlLWI2YTEtY2FlYjI4YjlmYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOEcLZd/z+Xrv0aBjgn8ZhcuSCMTrU5SRNsa YNq1J6yI5z1h50ABrOTkxZx3y9LuKEK1JmGkXEwql5q0bjbDgYkpG3rd4Ym3W7AH HcSxvhCL3UGXVUiBVXZvHVHliKnsqlyLB7M1XvbhEWAIc6+Zkk9wcpbA0XQWCAYX j18SgsEA1kwQlnIi0YiFN3Li9B5oSlY7quZFbUJfAEQ+z5ex24jcqAslStKdCA1e rL/Qf7ck1FMoQdMtCQ1EVXUKuLDsLbBogCFu43mZPar24z6LM55EJAXFJNozzCrX BdgA03IRX0vXzNUigaAnhuDaKEjiT61dnnBRhnyslD+k309/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi5V7KF8sZ+pHohiGH0XviYPwZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWRjMzZkYWQtNjU2Ny0z YzAzLWJjM2QtNDYzZjJmYzViNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYipfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRsowpSOpCaNa/AlcqJh6Aetbu1DIew9PZCFnnFsIjHjzwrQ1GIQ3DE y5VEVHAx5bq8q1QSJRLtYGw0iH7tv1RVQqO71emTDYnB47/9azdrH5uLpZl8nAgR C7wJWxKtKkv8XjBucwZ1SnRcAL9EA2R+Ti+93X7KhWwOCWF5ztO5AJN8dY0Mnl3U rRkL3TV5pp2JIUrMcZaERcLUDhccxhN/BXtd4pVVq2LoeSqMnvtKW4bKxLDQtRqD 7Qsfu6PHOd3MnqHVymhIvxjPKl9XfaK+rIGU1B9U4sOEV+lVuh5C5OOot8qSF61k wT1h0MFSLGQ4VREU0YsA1OSShow2UdI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:03:22 2025 by rpki-client