$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b935b37e-7216-3684-b09a-41cb5017ea30.roa File: b935b37e-7216-3684-b09a-41cb5017ea30.roa (raw, json) Hash identifier: CDK85nqxUByn2oyyyH5ok9jQT09GiLxjTJs7LozM0Ys= Subject key identifier: 3B:8C:36:87:FB:AE:69:E6:7B:3E:79:46:47:B6:E3:82:A3:73:96:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43283678E68CAB179537BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b935b37e-7216-3684-b09a-41cb5017ea30.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.40.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:83:67:8e:68:ca:b1:79:53:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=0c32d3a2-8809-4743-b381-4cef4164c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:1a:a8:03:3e:80:f7:c6:5e:3a:37:dc:2d: 76:3f:10:bd:6b:6a:de:80:50:71:c7:f5:74:02:8b: f4:2c:8b:0b:56:db:7d:3d:16:43:c4:99:b3:4c:8c: d8:a9:de:9d:89:b7:26:a9:4f:e9:b8:4f:c5:b4:56: e4:b9:ad:0f:f3:72:b2:c2:bc:2f:08:a7:d0:58:06: 98:6a:7e:1a:c3:da:34:91:a9:a5:e9:55:cd:4d:f5: 62:67:31:55:b2:b2:95:06:53:c0:92:41:06:2d:fa: cc:65:da:fc:09:22:e2:99:8a:26:2c:79:d4:7c:39: ad:99:2a:9a:ef:b1:e9:aa:9d:d0:cf:e2:43:41:61: 67:d6:d6:70:e1:d1:7c:a9:40:a7:fc:25:0a:71:22: 62:2c:d0:57:2f:6b:5d:78:7f:5d:e9:41:2b:71:a9: 13:7c:02:ed:19:51:2f:a9:a9:6d:c7:ae:30:e3:bb: ae:81:98:30:26:7a:11:5c:54:ee:e0:95:ab:9e:48: cf:e6:b6:6a:83:0d:31:1a:51:95:9f:63:e7:9b:70: 57:23:0b:c7:73:f5:05:50:68:de:ad:fe:89:08:f5: 51:a8:f1:9a:7d:a5:9d:e0:59:b4:ce:b9:b5:d2:ab: e1:0a:55:c2:0d:8d:96:8c:ed:be:3e:e8:53:27:82: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:36:87:FB:AE:69:E6:7B:3E:79:46:47:B6:E3:82:A3:73:96:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b935b37e-7216-3684-b09a-41cb5017ea30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:1e:c5:29:64:a5:9c:08:6f:e0:d4:77:4d:94:6d:39:d3:da: e5:c4:03:f4:5a:7a:81:8f:4e:73:6f:da:0d:ec:68:62:19:0c: 21:b5:19:10:73:7e:e4:9a:f2:01:5b:bd:05:ec:19:88:62:72: 16:89:2b:54:d2:6a:58:37:23:b2:b1:44:73:39:a7:14:78:94: 7b:1e:b6:83:c6:03:70:c3:39:16:0c:8b:38:26:7e:f7:ab:49: 37:b5:91:2a:45:2f:42:c7:0c:f8:19:06:03:ee:0c:05:2a:b6: b1:07:07:9d:83:32:df:da:d2:e5:e9:2c:9a:ba:6e:62:c1:ac: bd:b0:46:76:72:c2:3c:cd:f7:f5:15:3d:fe:98:cd:18:30:57: 59:5e:83:fb:db:0c:f0:b2:3d:4c:cd:7b:5f:84:d2:88:78:04: b1:97:27:3f:6b:d0:bd:33:40:ef:73:fd:8c:9a:bd:2c:82:8c: 7a:b0:9b:91:66:7e:57:74:af:11:d6:41:a5:bb:96:f5:3d:78: d8:80:b7:98:41:ce:00:87:a4:33:2b:c3:dd:d5:c8:95:d3:64: 09:2a:ae:64:27:47:fa:73:0f:72:f4:f3:83:ad:6c:a5:b8:31: d1:ca:53:bd:1f:de:84:55:41:c4:ff:fc:96:36:99:7b:23:d3: e7:7f:3c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMoNnjmjKsXlTe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGMzMmQzYTItODgwOS00NzQzLWIzODEtNGNlZjQxNjRjNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyIaqAM+gPfGXjo33C12PxC9a2regFBxx/V0 Aov0LIsLVtt9PRZDxJmzTIzYqd6dibcmqU/puE/FtFbkua0P83KywrwvCKfQWAaY an4aw9o0kaml6VXNTfViZzFVsrKVBlPAkkEGLfrMZdr8CSLimYomLHnUfDmtmSqa 77Hpqp3Qz+JDQWFn1tZw4dF8qUCn/CUKcSJiLNBXL2tdeH9d6UErcakTfALtGVEv qaltx64w47uugZgwJnoRXFTu4JWrnkjP5rZqgw0xGlGVn2Pnm3BXIwvHc/UFUGje rf6JCPVRqPGafaWd4Fm0zrm10qvhClXCDY2WjO2+PuhTJ4IGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuMNof7rmnmez55Rke244Kjc5ZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjkzNWIzN2UtNzIxNi0z Njg0LWIwOWEtNDFjYjUwMTdlYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYijmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIexSlkpZwIb+DUd02UbTnT2uXEA/RaeoGPTnNv2g3saGIZDCG1GRBz fuSa8gFbvQXsGYhichaJK1TSalg3I7KxRHM5pxR4lHsetoPGA3DDORYMizgmfver STe1kSpFL0LHDPgZBgPuDAUqtrEHB52DMt/a0uXpLJq6bmLBrL2wRnZywjzN9/UV Pf6YzRgwV1leg/vbDPCyPUzNe1+E0oh4BLGXJz9r0L0zQO9z/YyavSyCjHqwm5Fm fld0rxHWQaW7lvU9eNiAt5hBzgCHpDMrw93VyJXTZAkqrmQnR/pzD3L084OtbKW4 MdHKU70f3oRVQcT//JY2mXsj0+d/PEw= -----END CERTIFICATE-----Generated at Tue Jun 3 06:06:32 2025 by rpki-client