$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be55e38e-aeea-3589-91db-8714ec5fd972.roa File: be55e38e-aeea-3589-91db-8714ec5fd972.roa (raw, json) Hash identifier: gftxjhKKZ3SMq3/O7j7GaoEGXvAf4PjbrG5m1hDXUg4= Subject key identifier: 70:9E:1A:1A:D0:2C:1C:28:6E:32:AB:97:E6:6D:87:09:D9:C4:4F:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75D3F46B4A884274D0E0A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be55e38e-aeea-3589-91db-8714ec5fd972.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 98.251.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:d3:f4:6b:4a:88:42:74:d0:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=83e11acc-fc5e-4c5a-9257-163834b5d496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:76:8a:46:9d:07:c1:a9:1e:d9:4b:4d:87: 12:ae:dd:f3:ba:c7:07:1f:59:94:cd:94:c1:51:94: f3:f0:64:f9:de:f1:be:d1:74:c7:d6:15:04:ce:5a: 2a:db:00:c4:11:06:32:c0:89:95:57:c9:47:03:fc: ec:6f:1b:8b:86:5e:8a:a3:27:b6:1a:a0:8c:65:b1: e0:25:7d:5f:0b:44:0b:64:89:7c:69:4d:e9:ee:6c: 32:93:dc:db:a2:79:46:98:e2:4a:09:0b:20:59:29: 5c:a1:37:5c:05:68:09:62:de:38:14:9b:f7:19:44: 55:8d:45:ef:67:0f:9f:3a:92:6d:53:1c:a3:f3:7b: ba:f2:9c:5f:2c:dd:1d:f0:0f:8e:fc:4a:d3:8f:46: 69:4f:fe:2d:25:2b:da:5e:34:f2:6a:0b:65:5a:a1: f1:0e:b5:d9:7c:fc:f8:82:b4:e5:bc:55:d9:88:54: f2:e1:dd:d9:e0:bf:fa:6e:4b:47:76:21:14:ad:f4: 97:d7:c9:b0:5b:2b:d8:95:de:dd:2b:1b:cd:ca:ca: d9:3e:f5:5e:c7:fb:0f:66:52:26:6b:08:b0:20:c4: 5c:12:7e:ee:aa:ac:94:b8:47:7c:e1:78:7a:5e:4c: 17:80:a1:da:fe:bf:78:d0:a6:f4:49:ad:e6:a8:54: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9E:1A:1A:D0:2C:1C:28:6E:32:AB:97:E6:6D:87:09:D9:C4:4F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be55e38e-aeea-3589-91db-8714ec5fd972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a7:24:64:24:7f:0d:96:8e:96:a7:ca:fb:0f:39:16:e7:7b: aa:1e:dd:e9:a3:b6:94:59:35:f4:84:50:74:93:94:a2:b2:f4: a4:34:b3:22:9f:d3:6b:e4:ba:e9:74:2a:0b:08:7f:f9:d6:31: 0a:2d:9b:30:c4:fb:fa:4b:72:67:af:45:e3:59:6b:e0:84:f4: 5d:8f:81:b4:db:1d:07:1a:78:88:41:b5:d0:50:00:36:d9:a9: aa:02:c4:e7:b4:19:0a:dd:38:0b:14:a4:b1:3d:e6:c0:d3:26: 58:32:50:3a:4d:a5:f2:22:4d:09:38:9d:65:b2:55:13:40:31: 47:03:02:59:fb:ad:d0:e1:1c:89:5b:dc:48:d9:24:d3:ee:a1: 84:3a:78:a0:8c:94:39:01:f4:79:8b:dd:cb:cb:b2:81:29:3b: d2:6d:21:23:86:44:b9:96:b7:13:a7:92:b3:a6:e9:1a:94:5a: 46:a0:41:4b:47:13:0d:95:1d:33:e6:27:0e:88:f5:35:ca:df: 81:c9:5f:7c:01:32:91:28:d0:ba:14:05:5c:c9:92:16:47:92: 5b:50:b6:8c:8b:75:d8:f5:9f:eb:1f:ce:b3:25:4e:25:9d:72: 8e:cc:39:a4:48:56:19:fe:25:dd:44:09:77:a5:5c:27:a4:4f: 8d:28:93:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/ddP0a0qIQnTQ4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ODNlMTFhY2MtZmM1ZS00YzVhLTkyNTctMTYzODM0YjVkNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr152ikadB8GpHtlLTYcSrt3zuscHH1mUzZTB UZTz8GT53vG+0XTH1hUEzloq2wDEEQYywImVV8lHA/zsbxuLhl6Koye2GqCMZbHg JX1fC0QLZIl8aU3p7mwyk9zbonlGmOJKCQsgWSlcoTdcBWgJYt44FJv3GURVjUXv Zw+fOpJtUxyj83u68pxfLN0d8A+O/ErTj0ZpT/4tJSvaXjTyagtlWqHxDrXZfPz4 grTlvFXZiFTy4d3Z4L/6bktHdiEUrfSX18mwWyvYld7dKxvNysrZPvVex/sPZlIm awiwIMRcEn7uqqyUuEd84Xh6XkwXgKHa/r940Kb0Sa3mqFSStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCeGhrQLBwobjKrl+ZthwnZxE84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU1NWUzOGUtYWVlYS0z NTg5LTkxZGItODcxNGVjNWZkOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmnJGQkfw2WjpanyvsPORbne6oe3emjtpRZNfSEUHSTlKKy9KQ0syKf 02vkuul0KgsIf/nWMQotmzDE+/pLcmevReNZa+CE9F2PgbTbHQcaeIhBtdBQADbZ qaoCxOe0GQrdOAsUpLE95sDTJlgyUDpNpfIiTQk4nWWyVRNAMUcDAln7rdDhHIlb 3EjZJNPuoYQ6eKCMlDkB9HmL3cvLsoEpO9JtISOGRLmWtxOnkrOm6RqUWkagQUtH Ew2VHTPmJw6I9TXK34HJX3wBMpEo0LoUBVzJkhZHkltQtoyLddj1n+sfzrMlTiWd co7MOaRIVhn+Jd1ECXelXCekT40ok4c= -----END CERTIFICATE-----Generated at Wed Jun 4 23:30:38 2025 by rpki-client