$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa File: aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa (raw, json) Hash identifier: VdCOOb4/g/N5T+e32fw9SzkymKUS5NVz4PTD29sBMr0= Subject key identifier: 20:81:D2:BB:40:07:D1:66:9E:32:76:3D:B1:3F:B8:29:D0:0B:EC:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43079E516509E1F7C30B6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 98.217.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:79:e5:16:50:9e:1f:7c:30:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bd7dda95-1114-4487-b76a-1a6fc346d952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:a2:79:45:e0:7b:35:48:e7:1f:ee:c6:3f: 88:45:4a:c4:5d:fb:00:c5:f6:3a:10:54:ad:81:8c: 58:56:6a:93:48:69:ac:01:fb:17:cd:31:1e:a5:5e: bd:82:9d:56:80:a5:bc:90:14:96:ba:3c:1a:61:7d: d8:d6:f7:12:f0:a0:9b:a8:6d:66:20:6b:37:5a:af: e1:d4:01:2b:45:5d:ae:37:d8:15:9b:52:91:32:92: 76:79:66:ff:31:20:96:9f:c1:39:83:61:3b:8a:2b: 98:07:79:47:41:f7:bd:0b:fa:3d:fe:76:ce:72:e7: 2e:34:f8:1e:0b:2f:ed:9c:94:7f:22:19:de:3b:df: 7c:33:0e:cf:c8:f2:62:0a:7c:3a:dc:6a:9b:b0:de: 64:b1:44:7f:9e:f1:a1:be:24:19:7a:73:8f:a9:4f: 17:ff:a2:67:6e:f3:a8:0f:ce:dc:16:9d:e5:07:12: 33:b4:d4:cf:dd:d0:85:e9:91:76:f7:f8:47:5d:43: 81:ed:92:1f:98:5c:6e:a3:ad:d4:2e:53:71:f9:8a: 3b:72:86:74:81:ea:5e:59:09:c9:72:2c:31:d8:bb: 57:bd:2b:24:6c:54:0d:d1:bf:9d:1c:e5:6c:88:3d: 59:c6:c8:0b:52:10:f7:b8:70:62:46:7b:6e:22:32: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:81:D2:BB:40:07:D1:66:9E:32:76:3D:B1:3F:B8:29:D0:0B:EC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa65b4ae-39bb-3b7a-83ba-07c0b664f6ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.217.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5a:b3:82:9d:c0:18:cd:37:67:95:b1:15:fe:5a:e6:9b:b6: c6:ec:5b:87:c2:45:eb:e4:47:a3:7c:18:df:1e:98:95:d2:0e: 89:35:97:70:a2:6f:db:bc:a7:0a:77:b3:c0:cd:8d:c3:de:8f: e0:9f:05:48:7c:3a:15:8b:ea:d9:fa:1c:e3:b5:8f:56:35:f6: 03:8c:dd:a7:a8:53:68:6b:17:1d:22:6c:54:5b:40:36:de:c6: 62:49:bb:9d:4a:c2:85:a8:cf:11:5f:ac:a2:f0:da:56:d0:38: 9c:3e:ae:55:51:01:97:2d:88:10:a6:e1:34:ef:fe:3b:e5:b7: d8:dd:e1:01:04:22:d3:23:8a:59:89:97:7b:2f:87:43:fd:a0: 67:79:67:2f:a8:74:36:d3:b8:8f:8a:b5:10:17:f9:52:11:f3: 98:01:42:d4:53:dd:ae:e2:5b:0d:91:50:67:24:bc:3c:33:04: b0:66:16:93:05:25:a0:d8:97:96:16:85:c6:c0:5f:71:65:cf: 6b:35:f5:3d:40:85:7d:5c:dd:8f:7d:c4:c0:93:24:4e:c0:d0: 1e:3a:07:37:02:41:58:9f:62:e7:db:7d:8d:52:d9:10:27:de: a5:e6:9a:ed:5e:4f:be:8d:bb:58:9c:d5:2a:8b:63:1b:e2:bd: 0d:71:22:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMHnlFlCeH3wwtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmQ3ZGRhOTUtMTExNC00NDg3LWI3NmEtMWE2ZmMzNDZkOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ6ieUXgezVI5x/uxj+IRUrEXfsAxfY6EFSt gYxYVmqTSGmsAfsXzTEepV69gp1WgKW8kBSWujwaYX3Y1vcS8KCbqG1mIGs3Wq/h 1AErRV2uN9gVm1KRMpJ2eWb/MSCWn8E5g2E7iiuYB3lHQfe9C/o9/nbOcucuNPge Cy/tnJR/IhneO998Mw7PyPJiCnw63GqbsN5ksUR/nvGhviQZenOPqU8X/6JnbvOo D87cFp3lBxIztNTP3dCF6ZF29/hHXUOB7ZIfmFxuo63ULlNx+Yo7coZ0gepeWQnJ ciwx2LtXvSskbFQN0b+dHOVsiD1ZxsgLUhD3uHBiRntuIjLH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCB0rtAB9FmnjJ2PbE/uCnQC+wiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE2NWI0YWUtMzliYi0z YjdhLTgzYmEtMDdjMGI2NjRmNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNas4KdwBjNN2eVsRX+WuabtsbsW4fCRevkR6N8GN8emJXSDok1l3Ci b9u8pwp3s8DNjcPej+CfBUh8OhWL6tn6HOO1j1Y19gOM3aeoU2hrFx0ibFRbQDbe xmJJu51KwoWozxFfrKLw2lbQOJw+rlVRAZctiBCm4TTv/jvlt9jd4QEEItMjilmJ l3svh0P9oGd5Zy+odDbTuI+KtRAX+VIR85gBQtRT3a7iWw2RUGckvDwzBLBmFpMF JaDYl5YWhcbAX3Flz2s19T1AhX1c3Y99xMCTJE7A0B46BzcCQVifYufbfY1S2RAn 3qXmmu1eT76Nu1ic1SqLYxvivQ1xIus= -----END CERTIFICATE-----Generated at Wed Jun 4 23:33:39 2025 by rpki-client