$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3327e04-1b2a-311f-b1be-88da4e79ec04.roa File: b3327e04-1b2a-311f-b1be-88da4e79ec04.roa (raw, json) Hash identifier: wJY7xZ1Rc0vSqoce8LJ62zopEZJiMe8jAAD0VIS8guk= Subject key identifier: B7:D3:E1:3C:09:28:6D:49:78:C7:CE:22:31:A7:E4:78:F6:2A:87:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4322C25BEFA60CC4BCA7DE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3327e04-1b2a-311f-b1be-88da4e79ec04.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.209.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:2c:25:be:fa:60:cc:4b:ca:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=af61ba87-213e-4ed1-a795-1e6223290d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:90:6a:97:97:87:cd:6d:b7:b9:7c:7c:6a: 96:5f:49:6c:28:8b:b4:cc:9c:9b:87:1f:75:22:1f: 96:32:8b:71:ae:a7:52:89:56:cc:19:37:ab:80:e1: 7c:43:db:3e:d3:dd:d9:d6:c9:35:0d:a0:9b:9f:7c: 09:b1:25:91:f3:32:c4:e5:23:fc:7a:ca:d4:3e:ce: 56:f4:69:5f:47:65:b7:67:b2:e3:38:cf:33:6e:e2: 55:c3:dc:07:2e:78:7c:c6:69:21:69:45:0d:c3:20: 1c:ea:19:03:32:63:94:78:d9:78:0e:29:e3:ad:22: fb:fb:2c:b5:d6:82:ef:14:07:79:b7:ab:e5:ad:a3: 11:dd:73:0e:6e:bc:9a:71:b6:6a:58:68:b6:da:69: 0e:f8:1d:f8:15:4e:06:2d:a2:b5:80:24:c7:e4:9b: 78:e8:cf:e4:c1:af:84:b7:12:39:2f:db:b9:d9:a9: 52:53:61:41:e9:35:8a:ac:46:49:1b:a0:40:09:e6: 57:1d:ed:e0:6e:fe:6b:23:9c:db:fb:dd:23:b2:79: e7:68:95:16:92:73:c7:ac:a9:48:09:1d:fe:b2:e4: 22:97:94:26:39:5a:91:e4:b1:94:96:ce:32:db:29: 35:3c:1e:ae:93:25:7b:7e:93:d9:f0:8e:c7:22:42: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D3:E1:3C:09:28:6D:49:78:C7:CE:22:31:A7:E4:78:F6:2A:87:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3327e04-1b2a-311f-b1be-88da4e79ec04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:7d:1a:c5:a1:13:ef:96:74:69:7f:ca:be:2d:94:b0:2c:81: 34:6c:c0:8f:63:3e:fd:45:a2:f9:0d:42:20:c1:65:13:19:0b: 03:ec:60:0b:c9:ae:72:63:e2:69:03:9e:7a:73:79:16:76:bd: a9:21:0b:d6:ce:73:53:eb:f1:c9:e1:16:95:86:bb:69:10:ba: 04:e2:0f:1d:14:87:52:8e:93:f4:52:11:19:e6:82:8a:d6:70: fd:b2:45:cb:72:0f:01:c2:99:89:48:17:af:c8:3f:95:8e:7a: 16:e1:03:7b:1c:72:f6:5f:08:72:f9:59:74:b2:15:96:2b:a9: 24:9c:5e:e6:53:cd:8c:41:8e:8e:8b:3d:3d:d3:27:dc:da:61: e0:e1:32:99:8a:e9:07:a8:fc:79:c0:6b:69:06:61:51:f7:39: a9:bd:a4:b8:de:2e:d6:ca:b4:70:d8:c9:d1:22:e4:31:48:b6: 01:ad:9f:6a:cb:1e:40:22:c8:c9:b5:54:07:e6:da:5d:67:1f: 86:d8:27:0d:1b:44:b9:a2:57:1c:c1:7a:6c:73:e4:d8:cb:a0: c3:a2:31:ee:1f:8d:85:dc:ad:09:04:55:31:c9:16:db:3d:84: 75:1f:84:29:1d:54:96:d1:68:d3:01:5a:c6:15:14:b1:4f:4e: d1:07:fe:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMiwlvvpgzEvKfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YWY2MWJhODctMjEzZS00ZWQxLWE3OTUtMWU2MjIzMjkwZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEWQapeXh81tt7l8fGqWX0lsKIu0zJybhx91 Ih+WMotxrqdSiVbMGTergOF8Q9s+093Z1sk1DaCbn3wJsSWR8zLE5SP8esrUPs5W 9GlfR2W3Z7LjOM8zbuJVw9wHLnh8xmkhaUUNwyAc6hkDMmOUeNl4DinjrSL7+yy1 1oLvFAd5t6vlraMR3XMObryacbZqWGi22mkO+B34FU4GLaK1gCTH5Jt46M/kwa+E txI5L9u52alSU2FB6TWKrEZJG6BACeZXHe3gbv5rI5zb+90jsnnnaJUWknPHrKlI CR3+suQil5QmOVqR5LGUls4y2yk1PB6ukyV7fpPZ8I7HIkIbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfT4TwJKG1JeMfOIjGn5Hj2KodCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjMzMjdlMDQtMWIyYS0z MTFmLWIxYmUtODhkYTRlNzllYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl9GsWhE++WdGl/yr4tlLAsgTRswI9jPv1FovkNQiDBZRMZCwPsYAvJ rnJj4mkDnnpzeRZ2vakhC9bOc1Pr8cnhFpWGu2kQugTiDx0Uh1KOk/RSERnmgorW cP2yRctyDwHCmYlIF6/IP5WOehbhA3sccvZfCHL5WXSyFZYrqSScXuZTzYxBjo6L PT3TJ9zaYeDhMpmK6Qeo/HnAa2kGYVH3Oam9pLjeLtbKtHDYydEi5DFItgGtn2rL HkAiyMm1VAfm2l1nH4bYJw0bRLmiVxzBemxz5NjLoMOiMe4fjYXcrQkEVTHJFts9 hHUfhCkdVJbRaNMBWsYVFLFPTtEH/is= -----END CERTIFICATE-----Generated at Tue Jun 3 05:03:09 2025 by rpki-client