$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa File: cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa (raw, json) Hash identifier: WFg3JBY4OcdGQ0AlqXkQt7ZhjO38W7gb8BsU7BjsQiA= Subject key identifier: C4:C9:5B:65:A1:A1:2D:92:EF:BE:49:B8:F2:97:D3:D9:A6:3F:ED:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB04705ED553282E0757F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 98.202.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:47:05:ed:55:32:82:e0:75:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e23dce44-bd63-4690-920f-9ed249065ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:a5:15:70:e4:5f:b9:53:72:35:b1:7a:66: d5:d5:1c:41:3b:58:15:ae:01:dd:53:c0:69:64:50: ce:01:a7:7a:89:5c:81:32:a8:3d:47:22:45:e8:b5: b0:1e:3d:fd:1b:82:7a:c6:d5:10:fa:11:fa:74:50: 72:3a:79:d7:13:79:40:0f:09:56:c5:7c:5c:5a:1d: 15:7a:3e:24:d1:93:e9:36:e2:67:7a:46:c6:11:31: 4d:06:ff:a3:a3:62:ba:90:57:5d:01:3d:99:a7:84: 4b:3a:38:bb:aa:e4:04:d0:df:c1:0e:36:5e:5f:5e: 84:ec:ed:3a:60:20:15:40:14:00:1b:5f:be:a5:85: 63:51:55:64:02:ac:11:c9:a4:26:69:ee:50:ec:20: ad:f0:b7:5a:ac:42:7b:ea:c7:30:bc:e2:12:20:ef: 4c:1f:65:06:50:2b:8b:b0:8b:2a:ae:b1:96:d9:ef: 6b:9a:3c:65:fb:7f:65:01:9a:e1:58:e3:96:87:82: 2e:5f:9c:77:15:b5:7b:2d:15:9b:58:7a:21:28:22: 4f:86:72:a5:90:bf:08:fa:e9:f2:00:97:c7:68:b9: c3:21:26:47:d9:23:7d:1c:a8:e1:3d:e0:b6:a1:a4: de:58:5b:0a:3e:3e:3a:5e:ff:46:6a:6c:11:da:16: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:5B:65:A1:A1:2D:92:EF:BE:49:B8:F2:97:D3:D9:A6:3F:ED:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8cd40b-bf79-398c-a8c4-6faf322c32cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.202.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ff:3d:0a:3e:55:14:31:06:a6:c2:bb:1e:fd:e1:4b:1b:f8: da:d9:26:b1:c3:f3:6d:4f:87:6f:d3:89:56:24:27:93:d3:58: 65:c3:c3:dd:7b:b9:0a:5a:d7:40:8a:74:84:cd:0a:e0:5f:69: 45:43:05:c9:51:88:21:81:0f:57:70:61:15:8c:44:1d:4c:20: de:27:44:b9:3c:a0:f7:f4:e2:ce:50:b5:5c:35:33:8a:8f:ad: 45:2e:6e:ae:54:3e:12:95:8d:65:eb:c5:35:97:77:cc:60:0a: 23:d7:c1:1e:f0:44:c3:10:d5:2f:c1:f4:eb:c7:fe:37:a0:08: 24:8f:45:a5:c8:63:9f:c5:7e:df:2d:bf:bb:84:7f:5d:ab:d9: 50:02:ab:0f:e0:98:2e:d1:34:fd:00:09:fc:22:22:5f:51:bb: a4:5c:8f:24:fb:32:55:94:45:f2:e8:bb:4d:e1:13:5e:08:40: f6:da:14:06:f0:d6:d3:02:c6:1b:f1:65:66:e0:75:93:3b:ec: bb:45:d2:41:1f:82:f9:ed:17:5b:85:21:94:c5:92:6a:e7:61: 2a:3e:6f:3b:fa:09:16:84:df:75:b6:77:b7:56:07:b4:83:4d: 6d:63:2f:65:a5:b0:ad:00:38:9b:cf:8a:3d:68:34:bd:df:47: 0c:0f:c0:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssEcF7VUyguB1f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTIzZGNlNDQtYmQ2My00NjkwLTkyMGYtOWVkMjQ5MDY1ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9qlFXDkX7lTcjWxembV1RxBO1gVrgHdU8Bp ZFDOAad6iVyBMqg9RyJF6LWwHj39G4J6xtUQ+hH6dFByOnnXE3lADwlWxXxcWh0V ej4k0ZPpNuJnekbGETFNBv+jo2K6kFddAT2Zp4RLOji7quQE0N/BDjZeX16E7O06 YCAVQBQAG1++pYVjUVVkAqwRyaQmae5Q7CCt8LdarEJ76scwvOISIO9MH2UGUCuL sIsqrrGW2e9rmjxl+39lAZrhWOOWh4IuX5x3FbV7LRWbWHohKCJPhnKlkL8I+uny AJfHaLnDISZH2SN9HKjhPeC2oaTeWFsKPj46Xv9GamwR2hYbvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTJW2WhoS2S775JuPKX09mmP+1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y4Y2Q0MGItYmY3OS0z OThjLWE4YzQtNmZhZjMyMmMzMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYspkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA//PQo+VRQxBqbCux794Usb+NrZJrHD821Ph2/TiVYkJ5PTWGXDw917 uQpa10CKdITNCuBfaUVDBclRiCGBD1dwYRWMRB1MIN4nRLk8oPf04s5QtVw1M4qP rUUubq5UPhKVjWXrxTWXd8xgCiPXwR7wRMMQ1S/B9OvH/jegCCSPRaXIY5/Fft8t v7uEf12r2VACqw/gmC7RNP0ACfwiIl9Ru6RcjyT7MlWURfLou03hE14IQPbaFAbw 1tMCxhvxZWbgdZM77LtF0kEfgvntF1uFIZTFkmrnYSo+bzv6CRaE33W2d7dWB7SD TW1jL2WlsK0AOJvPij1oNL3fRwwPwEM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:15 2025 by rpki-client