$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa File: cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa (raw, json) Hash identifier: c4DXmjKBVesWO+Lji2YMsie+VGPDNGt4jGCiS9JE34g= Subject key identifier: 3F:32:98:E9:C6:C0:87:D6:64:4A:94:13:CA:E4:7D:32:E5:8F:4A:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF1C205E25C5715726A980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 76.98.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:1c:20:5e:25:c5:71:57:26:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3e51a03e-b7dc-43da-8d71-aaf760c80b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:56:0f:e9:e9:24:5a:66:58:e3:6f:d4:e8:74: 7c:ed:cb:b7:55:35:ad:ce:47:15:e7:c3:d4:d5:56: 9c:53:8d:ac:fa:27:67:9f:61:a8:ef:e1:f3:09:9d: 0c:01:96:3c:49:fd:0f:8d:67:fd:6a:51:6f:87:ca: 53:ec:23:0d:d7:28:4f:b4:4e:de:87:8e:2f:87:c8: aa:31:8c:9b:86:0c:ff:fb:ba:a8:c9:e5:13:b7:14: f9:af:70:c6:4f:cd:7f:fc:a3:da:9c:39:c9:3d:5e: 7d:08:b4:58:09:44:3a:56:2e:35:31:13:92:cf:2a: 0a:c2:81:61:a8:dc:25:eb:4b:2c:c1:ae:db:1b:2c: 97:ce:05:c0:3e:43:6b:33:7b:de:ab:cc:b8:b5:a5: a7:9c:6d:d7:c2:69:eb:53:b7:ae:6b:be:96:40:ff: 21:e2:68:b6:9c:68:38:c7:be:28:09:d0:3f:ac:15: 36:3c:40:52:24:e0:de:24:ed:15:e0:e8:c9:2d:f9: 6d:02:97:21:52:a3:0b:96:26:b0:7d:a9:a3:60:fc: 8c:1e:97:cb:f1:36:0d:13:8b:2e:5c:34:34:96:eb: 67:4e:b0:58:43:ca:84:18:b6:9d:a0:5d:58:72:40: b2:00:2f:24:11:71:64:41:f6:3e:cb:72:24:bc:b5: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:98:E9:C6:C0:87:D6:64:4A:94:13:CA:E4:7D:32:E5:8F:4A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9134dd-5c21-3e04-ad07-9798ca129dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.98.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d6:91:b0:64:2c:44:f0:2a:0e:95:69:98:75:33:43:49:1a: 5b:6c:33:c3:ac:57:0f:ef:29:83:ca:76:1a:fc:3b:50:30:b9: dd:b6:13:ad:04:12:de:5f:ae:fc:2a:a1:58:66:3f:1b:23:26: 85:68:41:4f:62:37:2b:c3:c7:5e:63:30:b9:23:ba:9b:ad:b1: 5c:de:8c:51:0f:a9:6b:86:b0:c6:0f:76:30:05:c9:0d:b5:33: e2:a0:4c:83:db:0b:a0:6b:31:1d:ba:45:ef:33:e8:85:e7:1f: 33:5c:0e:1b:94:8f:12:dd:85:de:2e:45:20:64:17:f5:8d:bb: cd:7e:70:f1:47:36:df:4f:a6:f2:33:b2:41:d4:88:79:9f:77: 6d:07:85:8b:4f:4e:16:8b:62:95:db:bb:2e:7d:90:66:c8:ce: c9:25:19:66:87:fd:c8:43:54:26:01:47:eb:2e:95:25:16:bc: 8e:5d:74:ab:5d:67:61:b2:df:8c:f0:da:78:29:03:40:ba:3a: e9:6c:e9:96:c9:d0:ee:05:4d:4f:54:8f:19:fb:79:1d:6a:e5: d8:0a:2e:d5:1d:b9:07:7e:b7:66:32:ce:7a:d6:9d:df:26:16: a9:aa:56:b0:a5:24:41:d1:9e:a1:ca:41:f2:d1:fa:48:b5:41: a2:97:59:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrxwgXiXFcVcmqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2U1MWEwM2UtYjdkYy00M2RhLThkNzEtYWFmNzYwYzgwYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VYP6ekkWmZY42/U6HR87cu3VTWtzkcV58PU 1VacU42s+idnn2Go7+HzCZ0MAZY8Sf0PjWf9alFvh8pT7CMN1yhPtE7eh44vh8iq MYybhgz/+7qoyeUTtxT5r3DGT81//KPanDnJPV59CLRYCUQ6Vi41MROSzyoKwoFh qNwl60sswa7bGyyXzgXAPkNrM3veq8y4taWnnG3XwmnrU7eua76WQP8h4mi2nGg4 x74oCdA/rBU2PEBSJODeJO0V4OjJLfltApchUqMLliawfamjYPyMHpfL8TYNE4su XDQ0lutnTrBYQ8qEGLadoF1YckCyAC8kEXFkQfY+y3IkvLW6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8ymOnGwIfWZEqUE8rkfTLlj0qTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y5MTM0ZGQtNWMyMS0z ZTA0LWFkMDctOTc5OGNhMTI5ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3WkbBkLETwKg6VaZh1M0NJGltsM8OsVw/vKYPKdhr8O1Awud22E60E Et5frvwqoVhmPxsjJoVoQU9iNyvDx15jMLkjuputsVzejFEPqWuGsMYPdjAFyQ21 M+KgTIPbC6BrMR26Re8z6IXnHzNcDhuUjxLdhd4uRSBkF/WNu81+cPFHNt9PpvIz skHUiHmfd20HhYtPThaLYpXbuy59kGbIzsklGWaH/chDVCYBR+sulSUWvI5ddKtd Z2Gy34zw2ngpA0C6Ouls6ZbJ0O4FTU9Ujxn7eR1q5dgKLtUduQd+t2YyznrWnd8m FqmqVrClJEHRnqHKQfLR+ki1QaKXWbA= -----END CERTIFICATE-----Generated at Sun Apr 6 20:33:13 2025 by rpki-client