$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa File: cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa (raw, json) Hash identifier: G2UgfB8y5oz7TTOVVCmBCLCrBxzlZuI8yhA6d7haxFI= Subject key identifier: 28:64:81:5E:F4:17:8D:5E:B0:B1:AC:F8:39:AC:C8:01:4C:C3:DD:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1E159EDB09D089EA00460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.248.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:e1:59:ed:b0:9d:08:9e:a0:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=17b8b7d4-06e5-4f80-a8d3-951dafcb2d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:d6:97:61:cc:58:5e:46:48:8a:a2:4c:e0: 97:1d:70:e3:50:a2:01:34:b3:23:a2:96:50:2d:aa: 7e:28:c5:94:4f:51:cc:b1:11:d4:3e:77:60:af:84: c4:f5:29:d0:a3:e5:c6:7b:36:84:03:97:f0:75:7e: b0:06:e7:a8:7e:2a:31:ff:5c:e9:4d:39:48:1d:b9: f6:84:7a:3e:73:ad:51:ea:45:9c:b1:cd:5a:7c:79: 7e:f0:fc:eb:9f:ac:6c:4e:ff:ee:70:ac:c3:58:f7: 00:5c:b8:a5:ef:6c:17:5c:65:52:b5:83:cb:2c:27: 75:83:7b:be:34:90:c0:63:ca:d4:5f:8e:79:8a:e6: ba:f3:d9:ab:f6:28:2f:4a:a2:16:8d:b7:58:dc:89: 9b:a7:90:15:52:b5:5a:1f:8e:27:53:76:df:65:fa: b4:f7:b9:37:68:7b:27:49:3a:13:02:84:0a:f5:fc: 6b:3d:2f:81:c0:b9:a1:5f:71:ac:bf:0b:01:b5:3e: f4:36:08:4a:f1:87:b8:4f:b7:a9:bc:05:fc:47:c9: 32:0c:41:f1:f0:25:c5:36:3b:33:ea:6e:ea:00:f4: 75:01:66:f1:50:7a:7e:09:6f:3c:23:fc:b3:8e:14: 87:70:8d:dd:a0:fa:65:db:6c:c4:16:c6:86:09:dd: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:64:81:5E:F4:17:8D:5E:B0:B1:AC:F8:39:AC:C8:01:4C:C3:DD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:10:90:9c:b9:98:e0:60:03:88:8e:a8:7a:ba:ee:1a:7d:ec: 22:24:cb:ce:80:8a:b0:db:33:ff:90:fa:cd:dc:c2:f0:99:c5: 3b:89:7c:c4:3e:10:3f:94:6a:fc:9f:6c:20:a7:95:70:7b:9d: 49:a2:70:f6:ec:10:89:d9:39:d1:19:25:bf:65:3b:fe:2a:87: c9:08:9d:5a:d0:a1:b1:85:11:59:bd:39:02:2d:db:4c:b2:cd: b0:f2:6d:cd:8f:44:4d:91:57:8a:89:78:57:a1:ed:51:d6:cc: a1:ae:64:1a:8e:01:67:59:0d:92:88:d2:c5:f0:2a:e5:92:39: d2:ed:71:2a:ae:cf:a1:58:be:94:0f:88:26:6c:bc:4d:9c:1a: a1:14:b5:d0:38:4b:01:db:4e:15:a5:06:73:60:6c:2a:a3:25: 65:7d:e1:eb:8a:a5:50:cd:89:4d:cc:7d:32:8a:86:f0:02:e2: be:c9:8f:db:59:30:3e:e7:67:30:81:69:88:52:e9:1c:8a:41: df:42:60:80:e9:b7:bc:0f:ac:d4:df:41:dd:f2:ae:35:1c:73: e8:3c:7c:2c:1d:9a:2e:12:d1:a0:b8:16:fd:9b:39:6c:09:67: 00:f3:c6:8f:83:92:17:c5:fb:2a:08:74:ba:54:93:81:2e:8e: 9a:ef:e8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksseFZ7bCdCJ6gBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTdiOGI3ZDQtMDZlNS00ZjgwLWE4ZDMtOTUxZGFmY2IyZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rDWl2HMWF5GSIqiTOCXHXDjUKIBNLMjopZQ Lap+KMWUT1HMsRHUPndgr4TE9SnQo+XGezaEA5fwdX6wBueofiox/1zpTTlIHbn2 hHo+c61R6kWcsc1afHl+8Pzrn6xsTv/ucKzDWPcAXLil72wXXGVStYPLLCd1g3u+ NJDAY8rUX455iua689mr9igvSqIWjbdY3Imbp5AVUrVaH44nU3bfZfq097k3aHsn SToTAoQK9fxrPS+BwLmhX3GsvwsBtT70NghK8Ye4T7epvAX8R8kyDEHx8CXFNjsz 6m7qAPR1AWbxUHp+CW88I/yzjhSHcI3doPpl22zEFsaGCd0RDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChkgV70F41esLGs+DmsyAFMw92AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YzZDNlNmMtN2Q2NS0z MTkxLWFiOTUtODVhMDZhOWNiN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUQkJy5mOBgA4iOqHq67hp97CIky86AirDbM/+Q+s3cwvCZxTuJfMQ+ ED+UavyfbCCnlXB7nUmicPbsEInZOdEZJb9lO/4qh8kInVrQobGFEVm9OQIt20yy zbDybc2PRE2RV4qJeFeh7VHWzKGuZBqOAWdZDZKI0sXwKuWSOdLtcSquz6FYvpQP iCZsvE2cGqEUtdA4SwHbThWlBnNgbCqjJWV94euKpVDNiU3MfTKKhvAC4r7Jj9tZ MD7nZzCBaYhS6RyKQd9CYIDpt7wPrNTfQd3yrjUcc+g8fCwdmi4S0aC4Fv2bOWwJ ZwDzxo+DkhfF+yoIdLpUk4Eujprv6BE= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:31 2025 by rpki-client