$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae3305aa-29a9-3495-97d0-1aedb7e06261.roa File: ae3305aa-29a9-3495-97d0-1aedb7e06261.roa (raw, json) Hash identifier: mECv8XUnTHEP3DI4Ec1sC7sdOboLheuYR3SzMsiyDXY= Subject key identifier: 95:2A:63:54:8F:C8:8E:48:D5:C1:83:33:2F:58:30:C4:1E:C7:6E:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F84B0B6BABDD58B035F0E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae3305aa-29a9-3495-97d0-1aedb7e06261.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 98.246.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:4b:0b:6b:ab:dd:58:b0:35:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=aab85158-31c4-40b9-8c8b-3e610302b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:c9:17:1f:9f:75:06:30:95:f4:5f:11:aa: 27:cc:04:a3:a9:3c:58:0d:a4:8b:fc:17:be:37:79: cc:81:61:18:d8:02:73:29:c5:bf:12:ed:63:43:69: 1e:2e:04:74:0a:23:96:bf:ac:22:eb:9b:d6:92:ba: bf:58:c9:ec:44:5b:9f:ac:53:88:e2:c1:e9:6e:f1: 31:4c:fc:82:87:19:44:bd:0f:0d:d8:ac:7c:85:2d: 8c:b4:34:af:2b:a4:fc:af:9a:15:7e:cc:16:e8:93: 6e:d8:44:0f:8f:33:dd:be:88:6f:f2:0f:3d:c8:fd: 52:26:24:ec:d4:7f:6e:57:b5:30:99:d6:61:51:11: 79:12:4c:97:c7:08:fe:05:58:e7:77:ad:51:75:0c: 63:eb:fc:06:ac:a4:fe:a3:cc:cc:e4:3d:98:29:cf: f7:2f:1d:5f:e2:bf:79:59:bf:ad:10:5d:92:d4:bb: 08:b8:0c:e0:a7:a1:3a:42:11:9e:0e:6e:d7:b1:5f: 98:97:7a:25:19:72:75:0e:92:92:fd:23:1e:62:9e: 37:24:f5:e6:7f:a3:a7:94:da:49:ab:28:48:07:bb: cd:e4:f8:35:55:fd:59:98:7c:b8:05:32:ab:2b:42: 8f:22:bd:e3:5e:8d:88:97:c3:68:be:0e:29:79:5d: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2A:63:54:8F:C8:8E:48:D5:C1:83:33:2F:58:30:C4:1E:C7:6E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae3305aa-29a9-3495-97d0-1aedb7e06261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:27:e7:15:e1:e1:d6:75:03:3c:2f:45:c8:a8:28:14:ef:dc: e8:e3:0b:ed:2f:65:f2:c8:4b:fe:7c:aa:1f:86:99:48:08:57: 9a:f0:34:90:7e:f4:9a:27:61:1a:bb:87:79:b6:5e:81:f5:1c: 5b:28:c0:58:a6:41:97:68:6a:b0:3f:99:41:48:af:fa:6e:b5: 1c:6c:54:f7:04:0a:d5:d7:e1:10:74:a9:63:80:cc:61:67:e0: d1:8c:f9:c5:7c:12:32:7e:58:b2:84:6c:2a:18:4c:40:03:36: f9:8c:41:7f:a1:75:9f:d2:6d:62:05:6a:2b:dc:4e:a1:fd:a8: 5e:b1:c7:13:45:38:d4:16:e9:16:f9:d3:22:69:cd:a1:f6:27: f0:61:d7:e4:3b:5c:c3:39:59:f0:46:67:c7:20:5f:e8:d7:4d: db:94:22:7f:8f:94:bd:05:a2:2f:f7:89:3b:9d:6e:a3:92:92: a1:ff:c6:ec:9c:02:43:37:a9:75:95:13:44:aa:6f:90:eb:60: c1:1d:ff:3f:32:fe:ec:a8:14:5b:e2:1b:42:79:fe:12:66:08: 53:63:4c:51:28:7c:61:b6:49:aa:ea:28:87:87:72:e6:33:4a: 33:f5:d9:13:25:44:17:36:8e:a2:e3:0d:65:c7:58:aa:80:34: b7:f7:bd:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+EsLa6vdWLA18OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWFiODUxNTgtMzFjNC00MGI5LThjOGItM2U2MTAzMDJiOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLJFx+fdQYwlfRfEaonzASjqTxYDaSL/Be+ N3nMgWEY2AJzKcW/Eu1jQ2keLgR0CiOWv6wi65vWkrq/WMnsRFufrFOI4sHpbvEx TPyChxlEvQ8N2Kx8hS2MtDSvK6T8r5oVfswW6JNu2EQPjzPdvohv8g89yP1SJiTs 1H9uV7UwmdZhURF5EkyXxwj+BVjnd61RdQxj6/wGrKT+o8zM5D2YKc/3Lx1f4r95 Wb+tEF2S1LsIuAzgp6E6QhGeDm7XsV+Yl3olGXJ1DpKS/SMeYp43JPXmf6OnlNpJ qyhIB7vN5Pg1Vf1ZmHy4BTKrK0KPIr3jXo2Il8Novg4peV10OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUqY1SPyI5I1cGDMy9YMMQex25xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUzMzA1YWEtMjlhOS0z NDk1LTk3ZDAtMWFlZGI3ZTA2MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQn5xXh4dZ1AzwvRcioKBTv3OjjC+0vZfLIS/58qh+GmUgIV5rwNJB+ 9JonYRq7h3m2XoH1HFsowFimQZdoarA/mUFIr/putRxsVPcECtXX4RB0qWOAzGFn 4NGM+cV8EjJ+WLKEbCoYTEADNvmMQX+hdZ/SbWIFaivcTqH9qF6xxxNFONQW6Rb5 0yJpzaH2J/Bh1+Q7XMM5WfBGZ8cgX+jXTduUIn+PlL0Foi/3iTudbqOSkqH/xuyc AkM3qXWVE0Sqb5DrYMEd/z8y/uyoFFviG0J5/hJmCFNjTFEofGG2SarqKIeHcuYz SjP12RMlRBc2jqLjDWXHWKqANLf3vTA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:38:21 2025 by rpki-client