$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa File: a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa (raw, json) Hash identifier: PBbvr7R3s2I8itVwKkX4nkBRanlr86qr3tMI6UodmN8= Subject key identifier: A1:D8:8C:E4:89:C4:D2:C8:9F:A2:7D:70:10:DD:06:2A:91:32:1D:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431580FA2E84E113856BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 98.232.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:58:0f:a2:e8:4e:11:38:56:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=865f8d49-9925-4dcb-91f6-3f6942498671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:5b:3f:38:6a:35:2d:e7:da:b6:15:92:dd: 55:54:6c:77:ae:4a:71:22:74:de:33:66:dc:e6:da: b1:30:26:25:24:3a:8a:50:0f:75:ed:5c:a3:a8:27: 48:f0:4e:6f:a3:c7:9d:60:f9:cd:d4:f0:93:5d:c8: 62:73:77:28:4f:b2:e1:72:c4:73:68:49:cc:dd:23: 8d:48:cd:b9:c8:cc:93:c0:e8:e9:45:9a:7e:64:7f: cf:ca:59:a3:8d:21:69:8f:ec:a7:ce:a6:0e:62:c8: 40:c1:cb:b0:1d:e8:ef:18:a3:fe:4b:ce:f5:cc:39: d0:c6:83:d1:60:e8:c9:2c:2a:46:74:d4:d2:f5:69: b0:24:c5:fb:2e:43:37:96:c7:59:88:63:e0:67:d7: c9:2c:50:ab:da:dd:fa:40:41:44:c3:a0:d8:ec:fd: 7f:53:bd:53:de:b6:4a:cc:0f:6a:fa:92:bb:3d:21: f5:2c:c0:ff:c0:42:f2:84:69:5c:87:77:91:78:ae: f1:70:03:69:90:90:38:8d:52:54:23:79:95:e0:bc: b8:8b:51:ba:19:35:d5:43:10:65:db:bc:52:5f:48: 8b:7b:56:34:8c:c1:9e:ad:e2:4f:d0:96:df:6c:16: f3:9b:e4:80:dd:b5:de:cc:c0:1d:4b:e1:e2:5e:a5: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:8C:E4:89:C4:D2:C8:9F:A2:7D:70:10:DD:06:2A:91:32:1D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64d20cc-736e-35cf-ab63-e5861c1ac21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.232.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:13:21:ad:0a:e0:57:a0:4e:54:45:a3:55:00:0f:22:f5:87: d3:96:24:a7:95:9a:2a:bc:a7:2f:77:a5:23:9e:01:4c:83:e6: 71:e9:86:23:ed:63:c8:68:44:fc:74:5c:aa:7f:5a:ee:59:26: 31:fb:6c:94:31:f4:e1:c9:83:a4:ba:d1:c6:50:ca:e0:af:d2: ac:bd:10:c9:db:d5:a0:c0:05:25:37:0b:72:37:5b:12:ef:69: 68:2c:30:ef:36:e6:f2:4b:70:77:27:cc:1a:35:91:76:b2:be: bc:a9:1b:e8:8d:da:94:6e:47:33:79:64:d8:a1:ca:c5:aa:e7: 03:dc:a1:68:10:1d:fb:14:b3:ee:05:18:9e:cd:dd:85:f0:00: b9:b8:e5:4d:34:90:3d:e6:40:ba:34:60:90:c4:5f:1f:c7:c1: ed:28:f8:f7:31:25:84:c1:3d:32:54:30:33:07:14:fa:5d:f0: 26:f5:4a:c6:92:8e:cf:83:e3:b2:39:d7:d6:9e:2d:ac:e0:2e: 3c:67:4c:5e:ef:c1:50:fd:d1:9f:d3:24:5b:7a:d9:00:bc:8e: c2:85:b9:1b:8f:f4:d8:c0:40:8e:21:c5:4f:6c:03:86:da:de: 80:5e:76:8f:a0:cc:09:d3:6f:d9:fb:fe:4f:43:c6:c8:ab:97: 4e:c6:88:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMVgPouhOEThWv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODY1ZjhkNDktOTkyNS00ZGNiLTkxZjYtM2Y2OTQyNDk4NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ1bPzhqNS3n2rYVkt1VVGx3rkpxInTeM2bc 5tqxMCYlJDqKUA917VyjqCdI8E5vo8edYPnN1PCTXchic3coT7LhcsRzaEnM3SON SM25yMyTwOjpRZp+ZH/PylmjjSFpj+ynzqYOYshAwcuwHejvGKP+S871zDnQxoPR YOjJLCpGdNTS9WmwJMX7LkM3lsdZiGPgZ9fJLFCr2t36QEFEw6DY7P1/U71T3rZK zA9q+pK7PSH1LMD/wELyhGlch3eReK7xcANpkJA4jVJUI3mV4Ly4i1G6GTXVQxBl 27xSX0iLe1Y0jMGereJP0JbfbBbzm+SA3bXezMAdS+HiXqWRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHYjOSJxNLIn6J9cBDdBiqRMh3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY0ZDIwY2MtNzM2ZS0z NWNmLWFiNjMtZTU4NjFjMWFjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4TIa0K4FegTlRFo1UADyL1h9OWJKeVmiq8py93pSOeAUyD5nHphiPt Y8hoRPx0XKp/Wu5ZJjH7bJQx9OHJg6S60cZQyuCv0qy9EMnb1aDABSU3C3I3WxLv aWgsMO825vJLcHcnzBo1kXayvrypG+iN2pRuRzN5ZNihysWq5wPcoWgQHfsUs+4F GJ7N3YXwALm45U00kD3mQLo0YJDEXx/Hwe0o+PcxJYTBPTJUMDMHFPpd8Cb1SsaS js+D47I519aeLazgLjxnTF7vwVD90Z/TJFt62QC8jsKFuRuP9NjAQI4hxU9sA4ba 3oBedo+gzAnTb9n7/k9Dxsirl07GiNQ= -----END CERTIFICATE-----Generated at Tue Jun 3 05:01:07 2025 by rpki-client