$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57170cc-e04b-3db4-9f46-f231666774f0.roa File: a57170cc-e04b-3db4-9f46-f231666774f0.roa (raw, json) Hash identifier: skrlfvrFXU/mjufM81OS0NI2BgfkN4g5rNod7srPVuU= Subject key identifier: 7A:46:7A:6A:06:CB:D4:4C:EA:F2:8F:AF:B5:B0:F5:3D:A9:F6:96:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7C905DF6B0583CF4A1A20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57170cc-e04b-3db4-9f46-f231666774f0.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.209.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:c9:05:df:6b:05:83:cf:4a:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=15d1dbeb-ba39-4024-be72-a793a678ac88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:b8:9f:4c:15:50:cf:5f:94:bd:7d:7f:a1: 92:0c:bf:89:39:9a:44:04:95:04:d9:c0:56:2b:83: 0d:54:9b:49:00:4b:07:f9:72:29:f9:81:93:9f:bf: f0:52:33:24:4f:00:ec:3b:ba:3c:5c:5a:40:13:c4: 62:d5:89:4b:ab:61:3e:4d:ba:05:9e:8e:b8:64:77: ec:47:17:df:07:b1:c3:2c:b8:dd:0f:7b:cd:2d:85: c6:ab:b5:77:bb:10:33:83:4e:81:48:3c:a1:be:9a: 3c:87:de:17:87:fc:f0:16:55:00:d0:5e:b6:90:21: cb:d7:ee:c4:06:28:87:26:1b:ae:e0:1f:79:52:c6: 5c:5a:c7:a3:74:72:3f:85:1d:a4:92:73:fd:3d:af: c0:fd:0f:d1:b3:45:87:eb:86:7d:f3:40:51:58:cf: d4:41:dc:be:1b:4b:e6:1e:e7:44:4e:89:76:4a:84: a0:de:da:70:89:61:8c:d9:25:2d:c6:6a:b0:54:77: a1:67:1d:bd:94:30:ac:38:fd:4b:c4:a3:a2:13:56: 09:a8:92:e5:0a:a2:b0:2f:bd:5a:94:92:74:2c:fd: 15:b8:2a:46:96:02:6b:b0:cc:65:8a:a8:12:f1:e1: aa:53:13:fa:b5:dc:e1:50:d9:c7:f1:83:7f:e9:d8: fc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:7A:6A:06:CB:D4:4C:EA:F2:8F:AF:B5:B0:F5:3D:A9:F6:96:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57170cc-e04b-3db4-9f46-f231666774f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:41:ee:c3:da:d5:c5:99:cc:b4:d0:45:13:ac:2e:7b:e3: 54:56:ad:a6:33:46:ca:d9:31:27:30:b4:29:88:6b:45:45:aa: 5f:9b:25:64:e9:c4:50:c4:05:2c:2f:a2:3f:7f:e5:95:79:f1: 7f:18:ab:f6:97:08:18:a2:dc:18:79:e1:24:7d:05:71:b6:d4: 7d:ef:f4:33:84:5b:6e:5b:f8:9b:7f:e4:e4:7c:56:50:64:e6: ee:3d:e2:e6:07:6c:3f:46:f7:2d:b2:4e:34:3f:0f:25:5f:98: 76:53:3b:4d:cf:33:06:5c:7a:36:ca:96:e6:3f:ec:a6:11:51: 3b:ec:28:bf:5c:71:ba:23:cb:67:b5:b9:f2:cb:e3:35:f6:fb: 1d:b5:0a:0d:0d:25:6a:e4:19:3d:4d:86:37:a9:da:27:5d:ee: 67:69:7a:02:0b:5e:77:fd:51:22:4e:9f:7f:72:b7:af:86:15: e4:60:7d:5f:8f:4e:e1:77:6b:cc:63:9a:6b:65:96:d1:db:7b: cd:ff:fa:bf:2f:77:55:6c:f1:f8:4e:c0:f5:1a:ae:9e:ef:a3: af:99:a6:da:c1:10:c7:ce:dd:2f:14:21:77:31:22:95:86:90: d9:8b:b9:b1:58:a5:ec:c2:bc:e9:80:fc:b3:b2:6f:dc:a5:03: 5c:8d:b6:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj098kF32sFg89KGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTVkMWRiZWItYmEzOS00MDI0LWJlNzItYTc5M2E2NzhhYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/S4n0wVUM9flL19f6GSDL+JOZpEBJUE2cBW K4MNVJtJAEsH+XIp+YGTn7/wUjMkTwDsO7o8XFpAE8Ri1YlLq2E+TboFno64ZHfs RxffB7HDLLjdD3vNLYXGq7V3uxAzg06BSDyhvpo8h94Xh/zwFlUA0F62kCHL1+7E BiiHJhuu4B95UsZcWsejdHI/hR2kknP9Pa/A/Q/Rs0WH64Z980BRWM/UQdy+G0vm HudETol2SoSg3tpwiWGM2SUtxmqwVHehZx29lDCsOP1LxKOiE1YJqJLlCqKwL71a lJJ0LP0VuCpGlgJrsMxliqgS8eGqUxP6tdzhUNnH8YN/6dj8JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpGemoGy9RM6vKPr7Ww9T2p9pYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU3MTcwY2MtZTA0Yi0z ZGI0LTlmNDYtZjIzMTY2Njc3NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQQe7D2tXFmcy00EUTrC5741RWraYzRsrZMScwtCmIa0VFql+bJWTp xFDEBSwvoj9/5ZV58X8Yq/aXCBii3Bh54SR9BXG21H3v9DOEW25b+Jt/5OR8VlBk 5u494uYHbD9G9y2yTjQ/DyVfmHZTO03PMwZcejbKluY/7KYRUTvsKL9ccbojy2e1 ufLL4zX2+x21Cg0NJWrkGT1Nhjep2idd7mdpegILXnf9USJOn39yt6+GFeRgfV+P TuF3a8xjmmtlltHbe83/+r8vd1Vs8fhOwPUarp7vo6+ZptrBEMfO3S8UIXcxIpWG kNmLubFYpezCvOmA/LOyb9ylA1yNtrg= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:09 2025 by rpki-client