$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae0df516-7e62-3d33-8a62-579af9de4050.roa File: ae0df516-7e62-3d33-8a62-579af9de4050.roa (raw, json) Hash identifier: tUZD3yFwSypf72FHSHEoBUxL+7c9D3UZdelWfS6v8FY= Subject key identifier: 35:C4:1C:90:E8:15:2A:F5:6C:F0:D2:30:E1:16:FC:54:28:0B:6D:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4311EF43A27A456A55F5140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae0df516-7e62-3d33-8a62-579af9de4050.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.201.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:1e:f4:3a:27:a4:56:a5:5f:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5af2b9c1-497d-4ab9-965d-2ac03745dc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:70:68:8e:ae:a0:22:bc:b4:de:5d:e5:0c: fd:b5:24:85:bd:6e:57:f7:cd:9a:29:b0:4f:be:86: 44:d9:4b:de:20:e8:3a:bf:f1:66:c4:97:e7:e5:7d: 38:5d:50:e7:25:95:43:71:f4:6b:9a:97:4e:84:cd: bd:5f:3c:0e:87:bf:8f:34:95:fc:a1:5d:29:43:82: 25:8d:81:b2:4c:7e:f5:f6:f7:e3:44:29:f3:bb:4f: 01:60:12:d9:fb:fd:8e:11:1b:de:4a:45:c0:45:76: 53:c4:26:a1:9d:b2:a8:7a:7f:09:53:29:3a:ef:7a: a4:eb:da:f6:be:ea:a7:f0:12:5e:40:a8:39:6f:e0: ed:be:64:99:d0:bb:3c:42:6e:af:d0:1a:f0:e4:17: c8:b4:7c:8b:49:65:ff:46:0c:d8:bf:d0:8c:1a:f9: b7:28:0b:96:c5:bf:7d:a8:6f:3e:1a:4c:74:74:2b: 57:12:24:89:61:c1:e1:d7:5e:97:1c:2d:7b:44:cd: 41:55:11:cb:3a:7d:24:03:b6:48:e5:93:bf:03:1e: 35:38:16:a9:04:48:e6:f9:92:81:02:fc:18:89:44: f6:c4:ec:41:6a:77:df:f5:5d:d7:63:4e:af:93:07: a6:ec:be:29:5f:cb:f0:2b:cc:13:df:b7:ca:07:8f: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:1C:90:E8:15:2A:F5:6C:F0:D2:30:E1:16:FC:54:28:0B:6D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae0df516-7e62-3d33-8a62-579af9de4050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:5f:e7:cf:08:76:fa:3b:04:cd:fe:a7:96:35:42:99:b1:5d: 62:9f:ae:5e:45:81:a3:b3:1f:25:5a:bd:4a:3a:4e:c7:1f:6a: 27:d4:db:29:6a:16:e5:0c:5f:52:c9:26:cc:36:91:d7:41:ec: 0f:1e:59:85:87:79:63:ba:dc:19:ed:2e:d6:5b:be:e0:1f:48: 47:32:24:d2:50:67:9a:5c:62:f1:e5:12:cd:d8:53:93:8e:87: c9:50:87:98:a2:c9:f7:60:77:e3:55:79:45:6f:30:91:8a:df: 08:19:bb:98:9a:3b:e3:31:16:7b:46:2d:4e:ef:7d:64:e4:3a: 98:1a:05:cf:2d:2a:cf:43:c3:d4:e2:a0:ab:8c:e9:d2:4d:d9: 38:4d:84:85:6f:c2:5b:9b:6c:42:42:3a:db:d6:2f:5c:da:27: 91:a3:31:54:9e:48:5f:3c:bc:44:78:00:c6:40:38:0d:ba:a0: 08:10:a9:e5:5a:4f:67:4b:b7:bc:e3:26:cc:84:28:24:b1:89: 18:2a:b2:ca:90:ff:81:4f:25:56:23:d3:dd:1f:2f:44:c0:b2: 2f:6d:e5:fd:87:28:5a:c2:52:f8:06:f3:a8:60:37:e3:a7:e8: 56:65:b8:64:ed:56:a7:18:52:84:6c:44:e0:ee:a9:dc:82:d9: db:c7:a8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMR70OiekVqVfUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWFmMmI5YzEtNDk3ZC00YWI5LTk2NWQtMmFjMDM3NDVkYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEhwaI6uoCK8tN5d5Qz9tSSFvW5X982aKbBP voZE2UveIOg6v/FmxJfn5X04XVDnJZVDcfRrmpdOhM29XzwOh7+PNJX8oV0pQ4Il jYGyTH719vfjRCnzu08BYBLZ+/2OERveSkXARXZTxCahnbKoen8JUyk673qk69r2 vuqn8BJeQKg5b+DtvmSZ0Ls8Qm6v0Brw5BfItHyLSWX/RgzYv9CMGvm3KAuWxb99 qG8+Gkx0dCtXEiSJYcHh116XHC17RM1BVRHLOn0kA7ZI5ZO/Ax41OBapBEjm+ZKB AvwYiUT2xOxBanff9V3XY06vkwem7L4pX8vwK8wT37fKB48h3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXEHJDoFSr1bPDSMOEW/FQoC22nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUwZGY1MTYtN2U2Mi0z ZDMzLThhNjItNTc5YWY5ZGU0MDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsnGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBf588Idvo7BM3+p5Y1QpmxXWKfrl5FgaOzHyVavUo6TscfaifU2ylq FuUMX1LJJsw2kddB7A8eWYWHeWO63BntLtZbvuAfSEcyJNJQZ5pcYvHlEs3YU5OO h8lQh5iiyfdgd+NVeUVvMJGK3wgZu5iaO+MxFntGLU7vfWTkOpgaBc8tKs9Dw9Ti oKuM6dJN2ThNhIVvwlubbEJCOtvWL1zaJ5GjMVSeSF88vER4AMZAOA26oAgQqeVa T2dLt7zjJsyEKCSxiRgqssqQ/4FPJVYj090fL0TAsi9t5f2HKFrCUvgG86hgN+On 6FZluGTtVqcYUoRsRODuqdyC2dvHqLU= -----END CERTIFICATE-----Generated at Tue Jun 3 07:34:35 2025 by rpki-client