$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7657983-8e7c-3a55-8a3e-9b4cd76dc9a3.roa File: b7657983-8e7c-3a55-8a3e-9b4cd76dc9a3.roa (raw, json) Hash identifier: 0RohBMb0tAwQduHwkC0FWwhkulBlSOF9izF1QLPoLwc= Subject key identifier: 5C:6D:1D:0A:0D:BF:EF:7C:FF:8F:17:4D:F9:CA:11:55:37:21:24:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7696EECB04868C8CB6100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7657983-8e7c-3a55-8a3e-9b4cd76dc9a3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 98.216.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:69:6e:ec:b0:48:68:c8:cb:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=8f86ede7-fccf-4c49-b474-08ca1ea0e842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:3a:61:f7:dd:88:e7:8a:de:b8:c8:ab:41: 17:04:3d:95:9e:11:18:84:1d:81:ed:fc:0b:23:ac: 17:6c:b0:9d:1b:83:7e:1b:bc:a5:b3:ce:6b:9e:05: f7:c5:6f:42:f9:31:67:28:50:f2:03:7d:d0:b1:4a: 6f:1f:b5:7e:0b:e5:b3:77:9d:04:5c:ac:31:f0:15: 26:3b:4d:9f:61:2a:67:c7:7b:16:68:c5:95:7c:e4: 11:7f:a8:e6:d3:ec:0d:75:1a:31:ab:b2:eb:10:0c: f9:41:03:79:3d:e1:4c:aa:4e:26:c8:7a:07:df:a7: 8d:da:b0:a8:d2:69:05:0b:36:a7:db:df:38:7b:2c: 21:e7:69:50:e6:2c:6c:af:b5:d6:44:19:43:c0:18: 66:5b:5a:ef:94:77:52:ce:c3:e2:08:1f:73:94:1f: 10:c7:4c:f2:61:5e:ad:a2:5b:ba:85:b8:c6:e0:3f: 96:0b:ba:05:39:fb:7c:b5:3d:de:33:92:c4:65:a1: 37:f2:f9:10:a2:7c:6f:d7:1f:02:fa:d0:aa:07:9a: e5:1e:3f:75:4a:12:86:8c:20:39:0f:22:40:a3:03: 02:da:10:22:da:a5:38:22:23:68:d8:96:29:0d:fb: 3a:f5:90:a4:8c:b4:a2:0b:82:28:44:cb:ae:0c:2a: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6D:1D:0A:0D:BF:EF:7C:FF:8F:17:4D:F9:CA:11:55:37:21:24:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7657983-8e7c-3a55-8a3e-9b4cd76dc9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.216.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d0:2f:67:b4:f7:92:1e:fa:aa:57:fd:f2:6a:51:2e:7d:a6: ef:d9:16:d5:84:40:69:62:3d:20:fd:81:0b:c7:0c:4e:a7:55: 91:4e:b7:76:1b:e1:2d:01:c1:b5:cc:d5:1e:29:3a:e6:cb:39: 82:9b:bc:c4:df:cd:fc:15:52:5c:83:c0:6c:21:af:9e:15:61: 76:05:d6:5f:b0:fa:74:fe:03:db:20:4c:cd:e3:d2:5e:aa:f7: 26:c6:60:fe:9e:49:08:e3:fd:63:21:9d:45:a1:fa:7a:52:9e: 28:16:6b:3d:d8:26:a9:29:b7:54:b4:1f:a1:31:d1:57:2e:0a: d8:af:c3:30:1b:4b:ec:6c:e7:64:9d:c2:e4:48:e1:be:9c:43: 96:e1:c7:19:94:c4:96:32:1f:2e:60:90:4d:70:77:3c:b3:4a: f3:44:a9:7a:9a:b3:b2:2c:b9:1a:2b:b4:4d:54:45:60:bc:a7: 35:c0:ec:15:e1:be:35:01:34:14:60:05:e6:45:ac:c3:7d:97: 5f:a4:78:a4:cd:e7:be:7f:48:f6:1c:81:fe:dd:8a:db:2e:78: 86:18:03:ee:cf:af:6c:47:ad:11:9c:35:d8:f7:77:71:56:9a: ba:52:f1:0e:46:3b:10:e6:9e:a3:9d:e1:07:92:33:47:cb:8c: 3a:b8:6d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj092lu7LBIaMjLYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OGY4NmVkZTctZmNjZi00YzQ5LWI0NzQtMDhjYTFlYTBlODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsc6YffdiOeK3rjIq0EXBD2VnhEYhB2B7fwL I6wXbLCdG4N+G7yls85rngX3xW9C+TFnKFDyA33QsUpvH7V+C+Wzd50EXKwx8BUm O02fYSpnx3sWaMWVfOQRf6jm0+wNdRoxq7LrEAz5QQN5PeFMqk4myHoH36eN2rCo 0mkFCzan2984eywh52lQ5ixsr7XWRBlDwBhmW1rvlHdSzsPiCB9zlB8Qx0zyYV6t olu6hbjG4D+WC7oFOft8tT3eM5LEZaE38vkQonxv1x8C+tCqB5rlHj91ShKGjCA5 DyJAowMC2hAi2qU4IiNo2JYpDfs69ZCkjLSiC4IoRMuuDCrWHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxtHQoNv+98/48XTfnKEVU3IST6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjc2NTc5ODMtOGU3Yy0z YTU1LThhM2UtOWI0Y2Q3NmRjOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLQL2e095Ie+qpX/fJqUS59pu/ZFtWEQGliPSD9gQvHDE6nVZFOt3Yb 4S0BwbXM1R4pOubLOYKbvMTfzfwVUlyDwGwhr54VYXYF1l+w+nT+A9sgTM3j0l6q 9ybGYP6eSQjj/WMhnUWh+npSnigWaz3YJqkpt1S0H6Ex0VcuCtivwzAbS+xs52Sd wuRI4b6cQ5bhxxmUxJYyHy5gkE1wdzyzSvNEqXqas7IsuRortE1URWC8pzXA7BXh vjUBNBRgBeZFrMN9l1+keKTN575/SPYcgf7ditsueIYYA+7Pr2xHrRGcNdj3d3FW mrpS8Q5GOxDmnqOd4QeSM0fLjDq4beI= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:17 2025 by rpki-client