$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7683f12-7f7e-30bf-8953-2f96329e10fe.roa File: a7683f12-7f7e-30bf-8953-2f96329e10fe.roa (raw, json) Hash identifier: KYQifkqkL3xoVBVAJ5ePLq/J3AxYEyIabZ+Ryf/utEE= Subject key identifier: 2F:89:89:66:60:3D:A2:68:39:A4:39:B4:88:53:38:E9:FD:25:DC:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6E4FECD998079B79500C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7683f12-7f7e-30bf-8953-2f96329e10fe.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 98.246.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:e4:fe:cd:99:80:79:b7:95:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a87bbc01-ced7-4489-b0d3-3a3caf5116be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:16:82:c6:34:8f:d4:f5:2a:88:55:c8:21:1c: 34:0a:0e:b4:ad:f8:b2:c4:48:dc:27:41:2f:52:d3: b4:c2:7c:c6:95:c3:0e:51:c5:63:3b:4c:8c:a1:13: c2:55:35:ae:41:bc:27:77:8d:a1:5b:01:f4:40:8c: 84:5e:aa:fe:84:d8:38:0d:79:5d:68:b8:94:ce:05: f4:f5:70:b1:05:94:3f:d6:65:d1:bb:d2:aa:ac:31: 09:e9:50:60:16:96:91:8c:f8:b7:d5:ee:2e:be:e7: 5b:d8:61:c8:7c:45:5f:7d:a3:db:a0:1d:50:84:c0: e0:f8:f8:06:3d:47:19:ba:c4:73:b1:91:1f:f8:05: 4b:d6:d7:8b:fe:18:1f:d4:9a:17:d2:d6:2a:da:24: 9f:d8:dd:37:a9:4f:16:2b:0c:6b:ef:6f:90:79:32: 48:a3:c4:01:72:8e:9b:b0:79:33:27:fe:3c:99:6f: d2:18:cd:0b:bd:39:a4:ad:d3:44:eb:06:aa:76:dc: 5c:0c:44:9c:1a:19:2c:0f:c9:b9:f8:dc:d8:47:48: d6:57:d9:2d:27:9a:1b:78:2c:7f:88:07:67:01:2b: b1:8d:cd:98:6f:d4:c2:9e:0f:5b:c4:5e:13:b9:53: a4:03:b0:a3:50:89:59:03:b0:4a:26:5d:85:1b:d6: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:89:89:66:60:3D:A2:68:39:A4:39:B4:88:53:38:E9:FD:25:DC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7683f12-7f7e-30bf-8953-2f96329e10fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:44:36:fe:b0:23:4d:e7:f3:93:e6:13:05:a8:fa:d9:d6:c4: d6:1d:41:51:9e:63:46:3e:5e:51:8c:13:56:50:88:b5:5a:26: af:05:35:c5:4b:f5:f4:5a:9b:d4:2c:09:82:72:44:e1:7d:1a: 07:a7:7e:f9:5a:84:c2:73:38:b6:38:7a:43:c7:9e:99:68:cf: 86:16:7b:e5:da:24:d3:6b:2a:bf:ce:ee:35:6d:bc:98:26:d1: f2:fc:32:92:9c:7d:20:cb:a2:ba:ed:6c:9c:5c:28:7e:bd:7e: 8a:26:d0:d8:55:06:b9:db:25:99:90:d6:cf:19:a5:53:42:7f: d1:20:a3:78:51:72:d6:e6:fe:c7:c3:c2:c0:6b:af:ed:45:0d: 68:c3:42:22:d2:37:dd:54:d8:f7:66:e9:24:47:72:38:52:fa: a1:68:83:cc:93:80:d0:db:9f:b5:0c:4e:c1:1c:dd:be:a4:70: 54:c4:58:b0:f5:5e:49:60:cf:99:96:ea:da:76:66:fd:c0:d4: e3:93:6a:19:55:19:ae:6b:ab:01:4f:9f:d2:a1:92:7a:48:05: 41:29:26:ec:b0:94:ca:95:0b:b9:d8:7a:61:5d:e4:7c:cd:df: 6a:33:1f:c6:aa:41:33:58:e3:58:74:b1:23:ee:1a:97:ca:48: da:87:59:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09uT+zZmAebeVAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTg3YmJjMDEtY2VkNy00NDg5LWIwZDMtM2EzY2FmNTExNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixaCxjSP1PUqiFXIIRw0Cg60rfiyxEjcJ0Ev UtO0wnzGlcMOUcVjO0yMoRPCVTWuQbwnd42hWwH0QIyEXqr+hNg4DXldaLiUzgX0 9XCxBZQ/1mXRu9KqrDEJ6VBgFpaRjPi31e4uvudb2GHIfEVffaPboB1QhMDg+PgG PUcZusRzsZEf+AVL1teL/hgf1JoX0tYq2iSf2N03qU8WKwxr72+QeTJIo8QBco6b sHkzJ/48mW/SGM0LvTmkrdNE6waqdtxcDEScGhksD8m5+NzYR0jWV9ktJ5obeCx/ iAdnASuxjc2Yb9TCng9bxF4TuVOkA7CjUIlZA7BKJl2FG9aJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+JiWZgPaJoOaQ5tIhTOOn9JdzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc2ODNmMTItN2Y3ZS0z MGJmLTg5NTMtMmY5NjMyOWUxMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZENv6wI03n85PmEwWo+tnWxNYdQVGeY0Y+XlGME1ZQiLVaJq8FNcVL 9fRam9QsCYJyROF9GgenfvlahMJzOLY4ekPHnploz4YWe+XaJNNrKr/O7jVtvJgm 0fL8MpKcfSDLorrtbJxcKH69foom0NhVBrnbJZmQ1s8ZpVNCf9Ego3hRctbm/sfD wsBrr+1FDWjDQiLSN91U2Pdm6SRHcjhS+qFog8yTgNDbn7UMTsEc3b6kcFTEWLD1 Xklgz5mW6tp2Zv3A1OOTahlVGa5rqwFPn9KhknpIBUEpJuywlMqVC7nYemFd5HzN 32ozH8aqQTNY41h0sSPuGpfKSNqHWZU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:26 2025 by rpki-client