$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be55e38e-aeea-3589-91db-8714ec5fd972.roa File: be55e38e-aeea-3589-91db-8714ec5fd972.roa (raw, json) Hash identifier: A09NTSLnqP2qz8IcKdkp1aI9OkXXTVfCvQjL3qamtFg= Subject key identifier: 31:2B:E1:AB:38:25:0B:DB:51:F4:B2:65:C3:72:88:70:91:29:3F:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203CBF45D16C27D0CC5E22D8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be55e38e-aeea-3589-91db-8714ec5fd972.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 98.251.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:bf:45:d1:6c:27:d0:cc:5e:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=1db2d001-5fe5-40b9-9944-3802ff7f5c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:d5:58:95:db:92:56:5e:bf:40:3f:4e:eb: cd:96:6c:a2:0b:91:75:11:cc:e8:bb:64:e8:7f:1a: 5e:4e:08:61:33:af:8e:9d:4c:08:c4:b3:5a:c5:d1: 98:2b:60:e9:93:61:08:90:ab:a3:51:6a:1b:9b:cc: 9e:63:3c:7e:8a:3e:af:11:a9:e8:eb:b5:64:04:da: a3:df:80:d1:3e:95:0e:5a:1c:16:6d:68:96:5f:98: 33:30:15:68:e8:bf:f6:5c:90:ab:06:ad:72:5d:83: 38:e6:50:8a:2e:22:00:da:6c:91:dc:2c:79:51:dd: 1e:ab:d7:db:74:e9:d1:96:f0:59:43:ad:65:c9:4e: e9:57:d1:e2:cc:ca:0e:28:0e:4a:92:b4:a3:d8:96: 0b:a6:dc:e0:0c:7b:58:8f:bc:07:0d:13:c5:4c:a3: 45:c1:43:38:02:1c:03:fe:8b:6a:c4:d8:13:5f:1e: 9a:d4:77:7f:bb:43:3a:a4:d9:4a:17:9e:8a:3f:3c: 39:28:a7:e7:dc:7a:f6:c5:5b:e4:9a:b8:50:79:9c: 0c:f0:7d:f2:f1:dc:f0:48:35:7f:63:9f:2d:95:9d: 79:56:02:3a:ba:bc:51:db:38:5f:22:58:3b:e3:d1: e2:71:c8:07:de:3e:4c:95:bf:e8:8e:f8:20:dc:08: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2B:E1:AB:38:25:0B:DB:51:F4:B2:65:C3:72:88:70:91:29:3F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be55e38e-aeea-3589-91db-8714ec5fd972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7e:6b:c9:39:0b:e2:3d:73:6f:b8:3c:7f:22:e0:a9:bd:91: 56:90:01:72:78:a8:05:69:ed:a3:c1:18:db:29:e3:08:e8:aa: 9c:7e:76:4e:97:e9:ae:d1:be:fd:ec:be:92:05:7d:28:7f:f7: c3:02:72:67:95:28:ab:40:0d:39:38:e0:51:09:bc:cc:30:bb: f6:fa:55:1a:41:23:b5:64:33:59:24:db:3c:47:92:48:bc:b4: f6:58:1c:ba:9d:47:48:40:8e:44:53:1f:d9:8e:9d:88:8d:4e: 2a:a4:88:43:df:c2:df:84:b6:9c:0a:85:68:0c:c0:93:96:5e: 98:e7:74:4c:42:f4:8a:11:59:93:88:20:8d:4b:33:ee:27:f4: aa:14:95:5a:fd:63:54:cb:bc:e1:f4:fc:fa:32:01:ff:3c:a9: 6b:1f:7f:58:59:82:3a:f0:43:83:d0:9e:56:37:a8:9a:7d:e8: c6:bf:c6:90:b8:f3:f3:ea:f5:cb:01:76:3d:7f:78:74:4c:27: 28:1d:92:08:1e:41:67:11:e2:70:5d:8c:21:d3:16:e4:45:ac: 39:ea:bf:f4:66:1b:10:75:a3:a9:16:83:37:1f:44:1f:21:2d: d8:5c:22:55:a2:2b:00:d5:a1:d3:ea:5b:66:28:9e:5d:1b:9f: f3:e8:a1:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPL9F0Wwn0MxeItgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MWRiMmQwMDEtNWZlNS00MGI5LTk5NDQtMzgwMmZmN2Y1Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVrVWJXbklZev0A/TuvNlmyiC5F1Eczou2To fxpeTghhM6+OnUwIxLNaxdGYK2Dpk2EIkKujUWobm8yeYzx+ij6vEano67VkBNqj 34DRPpUOWhwWbWiWX5gzMBVo6L/2XJCrBq1yXYM45lCKLiIA2myR3Cx5Ud0eq9fb dOnRlvBZQ61lyU7pV9HizMoOKA5KkrSj2JYLptzgDHtYj7wHDRPFTKNFwUM4AhwD /otqxNgTXx6a1Hd/u0M6pNlKF56KPzw5KKfn3Hr2xVvkmrhQeZwM8H3y8dzwSDV/ Y58tlZ15VgI6urxR2zhfIlg749HiccgH3j5Mlb/ojvgg3AjsxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEr4as4JQvbUfSyZcNyiHCRKT+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU1NWUzOGUtYWVlYS0z NTg5LTkxZGItODcxNGVjNWZkOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl+a8k5C+I9c2+4PH8i4Km9kVaQAXJ4qAVp7aPBGNsp4wjoqpx+dk6X 6a7Rvv3svpIFfSh/98MCcmeVKKtADTk44FEJvMwwu/b6VRpBI7VkM1kk2zxHkki8 tPZYHLqdR0hAjkRTH9mOnYiNTiqkiEPfwt+EtpwKhWgMwJOWXpjndExC9IoRWZOI II1LM+4n9KoUlVr9Y1TLvOH0/PoyAf88qWsff1hZgjrwQ4PQnlY3qJp96Ma/xpC4 8/Pq9csBdj1/eHRMJygdkggeQWcR4nBdjCHTFuRFrDnqv/RmGxB1o6kWgzcfRB8h LdhcIlWiKwDVodPqW2Yonl0bn/PoocE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:33 2025 by rpki-client