$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acb2aa86-eed9-38f0-9c0e-553ab2abd6f5.roa File: acb2aa86-eed9-38f0-9c0e-553ab2abd6f5.roa (raw, json) Hash identifier: IMbBe7CRtP5yB9gW3a+6yAhl3Qgfe0Qis/NY5HNtles= Subject key identifier: 9D:FE:67:16:75:6D:11:79:4B:0B:CC:B9:D1:6E:B0:FD:05:1A:7A:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB15A255822E97A6EDFE600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acb2aa86-eed9-38f0-9c0e-553ab2abd6f5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.223.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:5a:25:58:22:e9:7a:6e:df:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=96dd8300-dfeb-4d09-b11b-3daaa7e3eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:a0:ee:fd:35:ce:ec:a4:0d:17:a7:c2:10: 5b:de:63:fa:4f:81:0e:1b:a0:e2:23:ed:2f:5c:a8: 66:57:59:ad:11:e2:2f:82:1a:72:fd:2f:3d:e7:ed: b5:9e:a6:5c:bf:a6:c0:68:94:f1:59:bd:38:ee:ed: 94:79:60:b5:f4:c7:8e:06:c4:5d:1c:96:b4:4f:14: 12:01:f4:18:a4:05:e1:c4:6d:78:4f:65:75:ee:77: 2b:f5:1a:b4:2f:91:77:bb:be:cd:a9:6e:6b:eb:35: 5b:18:2b:c8:37:5a:f5:84:2b:d3:79:dc:1c:89:09: 22:02:60:f2:5e:b1:ff:4a:1a:6f:26:13:80:93:a2: d1:36:5f:86:22:f6:42:0d:cc:9d:c6:d4:73:07:48: cd:b3:d4:13:8c:86:13:c2:28:61:b5:b6:26:33:f4: 02:f5:08:be:4f:3b:3a:84:d2:48:65:43:75:09:6d: 55:77:d4:0e:ba:75:10:5a:74:8e:3c:cf:cc:9b:30: 47:32:2f:10:72:73:30:61:97:1c:55:38:75:c3:ff: 78:65:36:de:95:fc:a1:fd:38:0e:d3:d8:93:ff:99: 61:ed:99:32:2d:b5:15:2a:2c:f3:d7:19:c4:10:27: 84:37:ea:bc:2d:38:3a:af:10:3b:c2:97:9f:5e:2e: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FE:67:16:75:6D:11:79:4B:0B:CC:B9:D1:6E:B0:FD:05:1A:7A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acb2aa86-eed9-38f0-9c0e-553ab2abd6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c2:48:b0:aa:f6:62:8d:9e:df:44:8f:ed:9d:7b:41:17:91: 12:c2:94:6c:d0:5b:9f:0b:7e:34:47:61:e9:99:9d:1a:89:c8: 97:53:6d:6c:bd:5d:14:42:83:08:70:90:61:79:77:96:43:a6: 15:33:42:8b:d8:df:6a:a3:24:d0:15:b7:62:ae:d2:3d:81:2d: 04:dd:6e:5e:a1:14:20:19:e0:7f:0b:67:71:21:c8:83:bc:0c: 49:26:af:33:89:81:f6:c8:d4:95:43:2a:f2:fc:23:5d:d6:8f: 3d:bf:9c:b0:72:c7:1c:55:bc:b2:d1:47:12:53:53:bb:8d:2a: 63:9f:82:9f:9a:38:32:36:d3:33:89:15:12:68:ec:78:b6:ad: 75:06:90:78:8f:21:e4:39:0b:01:df:e1:6f:0f:b4:21:25:df: 5e:79:46:46:c7:6e:e5:37:77:4f:eb:e9:fa:f1:88:f7:4c:12: d6:31:9b:46:4e:de:60:b4:b0:fb:e2:89:94:f8:10:d6:39:90: 65:fc:63:12:22:7e:85:cd:93:ee:7f:65:fa:8d:ef:08:88:c9: dc:11:5c:d4:76:36:10:59:e1:50:14:57:09:3f:67:5b:17:83: ad:01:27:0a:2a:3b:96:19:2f:89:a0:01:29:61:f2:88:4b:b5: 35:dc:f2:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssVolWCLpem7f5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTZkZDgzMDAtZGZlYi00ZDA5LWIxMWItM2RhYWE3ZTNlZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIeg7v01zuykDRenwhBb3mP6T4EOG6DiI+0v XKhmV1mtEeIvghpy/S895+21nqZcv6bAaJTxWb047u2UeWC19MeOBsRdHJa0TxQS AfQYpAXhxG14T2V17ncr9Rq0L5F3u77NqW5r6zVbGCvIN1r1hCvTedwciQkiAmDy XrH/ShpvJhOAk6LRNl+GIvZCDcydxtRzB0jNs9QTjIYTwihhtbYmM/QC9Qi+Tzs6 hNJIZUN1CW1Vd9QOunUQWnSOPM/MmzBHMi8QcnMwYZccVTh1w/94ZTbelfyh/TgO 09iT/5lh7ZkyLbUVKizz1xnEECeEN+q8LTg6rxA7wpefXi4BJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3+ZxZ1bRF5SwvMudFusP0FGno6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWNiMmFhODYtZWVkOS0z OGYwLTljMGUtNTUzYWIyYWJkNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYt9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPCSLCq9mKNnt9Ej+2de0EXkRLClGzQW58LfjRHYemZnRqJyJdTbWy9 XRRCgwhwkGF5d5ZDphUzQovY32qjJNAVt2Ku0j2BLQTdbl6hFCAZ4H8LZ3EhyIO8 DEkmrzOJgfbI1JVDKvL8I13Wjz2/nLByxxxVvLLRRxJTU7uNKmOfgp+aODI20zOJ FRJo7Hi2rXUGkHiPIeQ5CwHf4W8PtCEl3155RkbHbuU3d0/r6frxiPdMEtYxm0ZO 3mC0sPviiZT4ENY5kGX8YxIifoXNk+5/ZfqN7wiIydwRXNR2NhBZ4VAUVwk/Z1sX g60BJwoqO5YZL4mgASlh8ohLtTXc8ro= -----END CERTIFICATE-----Generated at Mon Apr 7 06:23:03 2025 by rpki-client