$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa File: bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa (raw, json) Hash identifier: t9KaJArBEuxKKKVROosVmORHd81C1CEEH388un19bd4= Subject key identifier: CB:1B:82:42:ED:75:9D:62:AE:FA:E5:4A:B1:66:2C:0D:9C:A0:20:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C085A882B53DF8D40F1A6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.212.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:5a:88:2b:53:df:8d:40:f1:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5d502b29-e9bd-4160-b515-cba812e310e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:c5:a5:9b:4a:89:98:a5:7d:5d:2d:8f:d2: 9d:c3:97:7e:d4:37:e4:ad:bb:fb:16:60:0f:1d:8e: ff:87:48:93:7d:6b:b8:a9:e8:18:94:29:36:a4:c8: ee:80:ec:c6:b1:d7:7d:8c:4c:c0:e2:1a:56:af:49: 26:82:ac:a3:cb:1d:ec:8e:01:54:66:2d:d6:7f:46: 38:b0:03:9d:63:75:5c:b3:05:b8:91:3f:11:f9:b7: 16:77:9f:44:0b:6b:8d:65:99:ba:f5:96:ec:3d:ec: 33:07:87:cc:04:d5:17:bd:61:e4:e9:35:30:a8:a1: 8f:e5:f5:8c:a4:94:83:09:96:89:8b:4f:c2:8f:02: 12:b0:31:ba:ba:48:f8:fc:ce:d1:a7:e5:1a:6e:83: e7:8b:92:5d:42:85:74:6d:64:8c:64:73:12:d7:fc: 0b:9c:24:fe:78:dd:38:c0:c3:d0:b6:14:a3:f9:4b: 56:d7:c0:7b:ca:b3:31:ed:ed:f3:75:0c:0b:1e:0d: bc:ea:bb:66:ec:d2:b7:b8:3f:aa:c5:6a:78:6c:95: 05:18:14:dd:f1:d2:8f:9e:b2:a6:32:68:af:86:f5: 2c:b1:88:51:68:7f:d5:2b:54:af:59:df:15:c7:fc: 12:26:d4:3c:46:83:dd:be:1b:fb:5b:45:1b:34:f5: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1B:82:42:ED:75:9D:62:AE:FA:E5:4A:B1:66:2C:0D:9C:A0:20:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8bdb9c-c827-3ad1-a670-f4a6c7ad2d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f4:00:1c:f1:d8:a7:e7:b9:67:66:17:ed:ef:04:51:90:18: a6:38:c3:48:93:1b:eb:55:c3:11:5b:c5:75:8a:fe:0a:b2:e1: a1:f8:fe:ce:8b:9b:67:79:75:9c:3e:48:73:e3:07:f8:10:e7: f8:c6:b0:e6:1d:20:d4:14:0b:71:55:07:65:b4:0a:a5:ec:8f: 40:37:c5:dd:9a:90:94:57:f3:9b:07:e6:b6:65:e8:2f:8c:72: 6f:41:37:c3:0f:ba:81:60:84:28:1c:50:1e:0b:a6:f3:aa:f1: 6e:d5:38:c2:9b:b0:9e:93:34:4d:de:06:2e:bc:68:0d:40:75: 5b:e9:ee:15:54:c5:b8:92:75:4c:ae:d1:a7:ab:41:bb:3a:8b: 11:39:89:cd:af:46:6c:86:f4:7c:d9:59:0d:8d:64:f1:fa:4c: 78:42:99:1f:4b:8b:b3:6a:50:5f:89:9c:8e:b8:a6:e2:e4:34: fb:c9:a9:c2:ef:0f:9a:c8:48:7e:8b:89:12:ad:82:d5:07:31: 35:28:92:15:d2:4a:80:6d:3a:95:63:6f:6a:7c:14:9c:7d:ad: 3d:9e:d9:56:89:36:03:17:91:28:e7:2b:c5:30:0d:e9:7c:f4: b1:8d:14:1f:38:73:09:54:8f:99:04:86:81:59:e5:d0:f9:54: 2c:c5:75:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCFqIK1PfjUDxpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NWQ1MDJiMjktZTliZC00MTYwLWI1MTUtY2JhODEyZTMxMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshPFpZtKiZilfV0tj9Kdw5d+1Dfkrbv7FmAP HY7/h0iTfWu4qegYlCk2pMjugOzGsdd9jEzA4hpWr0kmgqyjyx3sjgFUZi3Wf0Y4 sAOdY3VcswW4kT8R+bcWd59EC2uNZZm69ZbsPewzB4fMBNUXvWHk6TUwqKGP5fWM pJSDCZaJi0/CjwISsDG6ukj4/M7Rp+UaboPni5JdQoV0bWSMZHMS1/wLnCT+eN04 wMPQthSj+UtW18B7yrMx7e3zdQwLHg286rtm7NK3uD+qxWp4bJUFGBTd8dKPnrKm MmivhvUssYhRaH/VK1SvWd8Vx/wSJtQ8RoPdvhv7W0UbNPUFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsbgkLtdZ1irvrlSrFmLA2coCClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY4YmRiOWMtYzgyNy0z YWQxLWE2NzAtZjRhNmM3YWQyZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP0ABzx2KfnuWdmF+3vBFGQGKY4w0iTG+tVwxFbxXWK/gqy4aH4/s6L m2d5dZw+SHPjB/gQ5/jGsOYdINQUC3FVB2W0CqXsj0A3xd2akJRX85sH5rZl6C+M cm9BN8MPuoFghCgcUB4LpvOq8W7VOMKbsJ6TNE3eBi68aA1AdVvp7hVUxbiSdUyu 0aerQbs6ixE5ic2vRmyG9HzZWQ2NZPH6THhCmR9Li7NqUF+JnI64puLkNPvJqcLv D5rISH6LiRKtgtUHMTUokhXSSoBtOpVjb2p8FJx9rT2e2VaJNgMXkSjnK8UwDel8 9LGNFB84cwlUj5kEhoFZ5dD5VCzFdTc= -----END CERTIFICATE-----Generated at Tue Jun 3 04:49:36 2025 by rpki-client