$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a494b065-54e0-35e6-a57a-a0df6b14381b.roa File: a494b065-54e0-35e6-a57a-a0df6b14381b.roa (raw, json) Hash identifier: nY2hGdXXX0wvm8JkGqHW4mCCbtokJ5GIIiGrxPtedzc= Subject key identifier: 69:DE:F6:C6:A8:4B:8A:C7:38:5A:6D:94:EB:B1:99:EE:32:A7:27:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C086A729D40D30C21E31AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a494b065-54e0-35e6-a57a-a0df6b14381b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.46.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:6a:72:9d:40:d3:0c:21:e3:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9d5d4f15-5c96-4a69-bb1d-35c0000981a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:34:56:e7:2d:6c:90:7d:75:0c:75:0d:0a: 41:ef:ab:46:15:6d:35:93:6a:7a:67:9b:ef:1f:3e: 0e:44:27:0c:e6:f3:0b:c1:f5:02:9d:c3:65:57:6c: 2a:e7:7c:5e:14:ee:fc:84:85:32:d9:26:eb:42:b2: 0a:23:47:7e:e3:0e:7c:64:71:1e:83:83:6d:20:cb: 20:fa:b9:2b:a7:a4:4f:e9:0e:71:96:de:61:8d:78: ea:b3:a8:5e:bd:10:2c:a9:f9:a8:dc:c4:85:f9:3e: 4e:2b:28:2a:5b:ec:04:01:84:9e:44:6d:43:0c:0d: 40:b5:a4:10:24:9e:34:56:c0:e3:94:11:eb:f7:0c: 64:42:a6:ac:04:10:3f:da:2d:ce:d1:16:50:31:2b: b6:5c:bb:47:c5:71:41:5a:82:e9:22:9c:5c:46:f9: 0a:23:02:52:06:57:77:16:6e:95:91:39:ff:ef:1e: 8a:9e:6c:33:24:d6:b7:3d:18:a5:24:24:66:2f:eb: bd:0e:8c:f1:15:68:95:2c:e2:92:fb:01:07:b5:79: c5:be:17:a8:2d:87:20:48:92:62:e4:f8:97:4d:2b: 29:7f:bd:e0:27:55:50:33:2c:79:05:fe:0d:e4:41: fb:f4:f1:4c:05:93:c8:a5:be:84:1d:ee:22:eb:29: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DE:F6:C6:A8:4B:8A:C7:38:5A:6D:94:EB:B1:99:EE:32:A7:27:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a494b065-54e0-35e6-a57a-a0df6b14381b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.46.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b0:05:13:d6:80:bb:1e:1c:43:2c:06:78:01:cb:2d:9a:7e: 78:e2:cd:b5:35:4f:c0:be:a0:21:8e:72:c4:e4:9c:27:cb:61: 14:75:04:fa:13:a7:c8:f1:33:83:0c:04:33:81:54:e2:83:a8: 37:f3:3c:3d:e9:68:95:f8:bd:c9:d7:b5:e2:42:b6:e6:47:2b: 59:96:00:52:9c:51:3f:9f:4a:0c:0e:84:42:49:84:cd:42:6b: 1f:bd:bf:6f:b3:c6:a0:2e:fe:33:90:74:bd:50:93:5e:4a:61: ea:e8:be:6e:1d:8d:1e:45:bf:d1:1c:13:06:8a:a4:4b:18:04: bb:4a:ed:68:ac:f4:83:10:db:e0:11:e3:b0:ae:a3:9c:53:55: 11:cb:a8:ee:81:0c:13:5e:84:a2:99:fd:99:96:20:7e:56:49: 5e:3f:f2:cd:47:d4:73:e9:d3:ae:a6:dc:6f:dd:c7:dd:a4:b3: c8:5a:5a:51:83:1b:d5:fc:d0:79:57:30:dc:ec:ea:c1:ea:2a: 77:ba:64:12:62:b1:6e:d2:86:0d:40:1d:8e:73:2c:f3:53:87: c5:9e:f9:7d:8a:1d:7c:c8:a0:b2:85:d9:ca:b7:c5:d5:d4:7b: d5:44:d4:4f:3c:e0:2b:f2:b6:85:4b:19:ec:b3:e1:a1:7a:77: 91:f3:2f:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCGpynUDTDCHjGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWQ1ZDRmMTUtNWM5Ni00YTY5LWJiMWQtMzVjMDAwMDk4MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFc0VuctbJB9dQx1DQpB76tGFW01k2p6Z5vv Hz4ORCcM5vMLwfUCncNlV2wq53xeFO78hIUy2SbrQrIKI0d+4w58ZHEeg4NtIMsg +rkrp6RP6Q5xlt5hjXjqs6hevRAsqfmo3MSF+T5OKygqW+wEAYSeRG1DDA1AtaQQ JJ40VsDjlBHr9wxkQqasBBA/2i3O0RZQMSu2XLtHxXFBWoLpIpxcRvkKIwJSBld3 Fm6VkTn/7x6KnmwzJNa3PRilJCRmL+u9DozxFWiVLOKS+wEHtXnFvheoLYcgSJJi 5PiXTSspf73gJ1VQMyx5Bf4N5EH79PFMBZPIpb6EHe4i6ymQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGne9saoS4rHOFptlOuxme4ypyfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ5NGIwNjUtNTRlMC0z NWU2LWE1N2EtYTBkZjZiMTQzODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYi5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACewBRPWgLseHEMsBngByy2afnjizbU1T8C+oCGOcsTknCfLYRR1BPoT p8jxM4MMBDOBVOKDqDfzPD3paJX4vcnXteJCtuZHK1mWAFKcUT+fSgwOhEJJhM1C ax+9v2+zxqAu/jOQdL1Qk15KYerovm4djR5Fv9EcEwaKpEsYBLtK7Wis9IMQ2+AR 47Cuo5xTVRHLqO6BDBNehKKZ/ZmWIH5WSV4/8s1H1HPp066m3G/dx92ks8haWlGD G9X80HlXMNzs6sHqKne6ZBJisW7Shg1AHY5zLPNTh8We+X2KHXzIoLKF2cq3xdXU e9VE1E884CvytoVLGeyz4aF6d5HzL/I= -----END CERTIFICATE-----Generated at Wed Jun 4 23:32:22 2025 by rpki-client